PT-2026-83494

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An inconsistent canonicalization process occurs when ignore path parameters in path matching is enabled. T...

openSUSE 16: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (openSUSE-SU-2026:21633-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21633-1 advisory. This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component...

OPENSUSE-SU-2026:11631-1 jfrog-cli-2.122.0-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.122.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11635-1 python313-uv-0.12.7-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11636-1 wicked-0.6.80-2.1 on GA media

These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : snphost (openSUSE-SU-2026:21638-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21638-1 advisory. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270541. - CVE-2026-41678: openssl:...

openSUSE 16: libQt6Svg6 / libQt6SvgWidgets6 / qt6-svg-devel / etc (openSUSE-SU-2026:21626-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21626-1 advisory. This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing pattern group nodes bsc1250994. Tenable has extracte...

OPENSUSE-SU-2026:11633-1 php-composer2-2.10.3-1.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21667-1 Security update for file-roller

This update for file-roller fixes the following issues: Changes in file-roller: - CVE-2026-78322: Check line length when parsing command output bsc1276442...

SUSE-SU-2026:3840-1 Security update for wicked

This update for wicked fixes the following issues: Update to version 0.6.79. - CVE-2026-44932: indirect remote shell command injection due to insufficient sanitization of DHCP options written to /run/wicked/leaseinfo. files bsc1265221. - CVE-2026-71401: out-of-bounds read due to IP length underfl...

PT-2026-83377

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description A symlink-following flaw exists in the qemuTPMEmulatorPrepareHost function. The function performs a path-based chown operation on the swtpm logfile without verifying if the file is a symbolic...

tor-0.4.9.11-1.1 on GA media (moderate)

tor-0.4.9.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11590-1 Rating: moderate Cross-References: CVE-2026-77584 CVE-2026-77587 CVE-2026-77638 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues...

Security update for gh (important)

openSUSE security update: security update for gh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21663-1 Rating: important References: bsc1266618 bsc1276661 bsc1276662 bsc1276663 bsc1276664 Cross-References: CVE-2026-39821 CVE-2026-64652...

Security update for xmlrpc-c (moderate)

openSUSE security update: security update for xmlrpc-c ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21633-1 Rating: moderate References: bsc1272769 Cross-References: CVE-2026-15928 CVSS scores: CVE-2026-15928 SUSE : 5.4...

Security update for dracut (important)

openSUSE security update: security update for dracut ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21639-1 Rating: important References: bsc1274432 Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5...

python313-mistune-3.3.4-1.1 on GA media (moderate)

python313-mistune-3.3.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11585-1 Rating: moderate Cross-References: CVE-2017-15612 CVE-2017-16876 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed ...

Security update for pcp (moderate)

openSUSE security update: security update for pcp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21636-1 Rating: moderate References: bsc1272922 bsc1272923 bsc1272924 bsc1272925 bsc1272926 bsc1272927 bsc1272928 bsc1272930 Cross-References:...

Security update for gstreamer-plugins-bad (moderate)

openSUSE security update: security update for gstreamer-plugins-bad ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21629-1 Rating: moderate References: bsc1268394 Cross-References: CVE-2026-52718 CVSS scores: CVE-2026-52718 SUSE : 6.5...

Security update for qt6-svg (important)

openSUSE security update: security update for qt6-svg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21626-1 Rating: important References: bsc1250994 Cross-References: CVE-2025-10729 CVSS scores: CVE-2025-10729 SUSE : 7...

OPENSUSE-SU-2026:11625-1 python313-djangorestframework-3.18.0-2.1 on GA media

These are all security issues fixed in the python313-djangorestframework-3.18.0-2.1 package on the GA media of openSUSE Tumbleweed...