OPENSUSE-SU-2026:21733-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - Update CVE-2026-66757 patch. The original patch wasn't allocating enough bytes...

OPENSUSE-SU-2026:21731-1 Security update for gegl

This update for gegl fixes the following issues: Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229...

OPENSUSE-SU-2026:21717-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

OPENSUSE-SU-2026:11663-1 perl-URI-5.360.0-1.1 on GA media

These are all security issues fixed in the perl-URI-5.360.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-84820

Name of the Vulnerable Software and Affected Versions RemoteIo versions prior to 0.28.9-1.1 Description A heap out-of-bounds write occurs in RemoteIo when reading data from a malicious remote server. This issue specifically affects WebReady and Curl builds. Recommendations Update to version...

openSUSE 16 Security Update : python-cryptography (openSUSE-SU-2026:21685-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21685-1 advisory. - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. -...

OPENSUSE-SU-2026:11656-1 aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 on GA media

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.0git0.2950b36-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11658-1 exiv2-0.28.9-1.1 on GA media

These are all security issues fixed in the exiv2-0.28.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11657-1 dracut-112+suse.47.gec0b378-1.1 on GA media

These are all security issues fixed in the dracut-112+suse.47.gec0b378-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : 389-ds (openSUSE-SU-2026:21691-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21691-1 advisory. Update to version 3.0.6git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted...

openSUSE 16 Security Update : go1.25-openssl (openSUSE-SU-2026:21696-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21696-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: -...

openSUSE 16 Security Update : rav1e (openSUSE-SU-2026:21681-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21681-1 advisory. This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and...

openSUSE 16: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (openSUSE-SU-2026:21700-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21700-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...

openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21690-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21690-1 advisory. - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessiv...

wicked-0.6.80-2.1 on GA media (moderate)

wicked-0.6.80-2.1 on GA media Announcement ID: openSUSE-SU-2026:11636-1 Rating: moderate Cross-References: CVE-2026-71401 CVE-2026-71402 CVSS scores: CVE-2026-71401 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-71402 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

openSUSE 16 Security Update : go1.26-openssl (openSUSE-SU-2026:21705-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21705-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: -...

openSUSE 16 Security Update : librest (openSUSE-SU-2026:21694-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21694-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseud...

openSUSE 16 Security Update : python-aiohttp (openSUSE-SU-2026:21687-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21687-1 advisory. - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate...

PT-2026-84821

Name of the Vulnerable Software and Affected Versions RemoteIo affected versions not specified Description A heap out-of-bounds read occurs in RemoteIo when the software processes block-aligned remote CRW files. A heap out-of-bounds read is a memory safety violation where the program reads data...

PT-2026-84816

Name of the Vulnerable Software and Affected Versions exiv2 versions prior to 0.28.9-1.1 Description An out of bounds read occurs in the decodeBasic function within CrwMap. An out of bounds read is a condition where a program reads data past the end of the intended buffer, which can lead to crash...