OPENSUSE-SU-2026:11632-1 owasp-modsecurity-crs-4.29.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83483

Name of the Vulnerable Software and Affected Versions Composer versions prior to 2.10.3 Composer versions prior to 2.2.30 Description Two issues allow directory escape and arbitrary command execution. Recommendations Update to version 2.10.3. Update to version 2.2.30...

Security update for gzip (moderate)

openSUSE security update: security update for gzip ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21666-1 Rating: moderate References: bsc1269623 bsc1272554 Cross-References: CVE-2026-41992 CVSS scores: CVE-2026-41992 SUSE : 6.1...

Security update for wicked (important)

openSUSE security update: security update for wicked ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21669-1 Rating: important References: bsc1274627 Cross-References: CVE-2026-71401 CVE-2026-71402 CVSS scores: CVE-2026-71401 SUSE : 7.5...

OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 on GA media (moderate)

OpenRGB-1.0rc3.1+git0.g5e81e26f-1.1 on GA media Announcement ID: openSUSE-SU-2026:11602-1 Rating: moderate Cross-References: CVE-2026-59682 CVSS scores: CVE-2026-59682 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVE-2026-59682 SUSE : 8.8...

openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:21658-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- RU-2026:21658-1 advisory. Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only LICENSE.txt confirms it Correct Legal-Review-Notice usa...

openSUSE 16 Security Update : dracut (openSUSE-SU-2026:21639-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21639-1 advisory. This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code executio...

openSUSE 16: glab / glab-bash-completion / glab-fish-completion / etc (openSUSE-SU-2026:21662-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21662-1 advisory. Changes in glab: - Update to version 1.114.0: featapi: support dynamic custom headers for authenticating proxies featartifact-registry: add glab...

OPENSUSE-SU-2026:11635-1 python313-uv-0.12.7-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83481

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy's ProdClusterManagerFactory::allocateConnPool function dereferences transport socket options when...

PT-2026-83485

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When Capsule Protocol is enabled, the HttpDatagramHandler caches the current RequestDecoder. During stream...

PT-2026-83490

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy fails to properly handle scoped IPv6 addresses when using Utility::copyInternetAddressAndPort and QU...

PT-2026-83494

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An inconsistent canonicalization process occurs when ignore path parameters in path matching is enabled. T...

PT-2026-83489

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An unauthenticated HTTP/2 client can exploit the way the proxy forwards data for configured non-WebSocket...

OPENSUSE-SU-2026:11636-1 wicked-0.6.80-2.1 on GA media

These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16: libQt6Svg6 / libQt6SvgWidgets6 / qt6-svg-devel / etc (openSUSE-SU-2026:21626-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21626-1 advisory. This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing pattern group nodes bsc1250994. Tenable has extracte...

OPENSUSE-SU-2026:11633-1 php-composer2-2.10.3-1.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11631-1 jfrog-cli-2.122.0-1.1 on GA media

These are all security issues fixed in the jfrog-cli-2.122.0-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21635-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21635-1 advisory. - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images bsc1270004. - CVE-2026-62343: heap buffer overwrite in morphology...

openSUSE 16: libxmlrpc++8 / libxmlrpc3 / libxmlrpc_abyss++8 / libxmlrpc_abyss3 / etc (openSUSE-SU-2026:21633-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21633-1 advisory. This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component...