openSUSE 16 Security Update : rav1e (openSUSE-SU-2026:21681-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21681-1 advisory. This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and...

java-1_8_0-openj9-1.8.0.504-1.1 on GA media (moderate)

java-180-openj9-1.8.0.504-1.1 on GA media Announcement ID: openSUSE-SU-2026:11641-1 Rating: moderate Cross-References: CVE-2026-70906 CVE-2026-70907 CVSS scores: CVE-2026-70906 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-70907 SUSE : 5.3...

wicked-0.6.80-2.1 on GA media (moderate)

wicked-0.6.80-2.1 on GA media Announcement ID: openSUSE-SU-2026:11636-1 Rating: moderate Cross-References: CVE-2026-71401 CVE-2026-71402 CVSS scores: CVE-2026-71401 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-71402 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N...

python313-uv-0.12.7-1.1 on GA media (moderate)

python313-uv-0.12.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11635-1 Rating: moderate Cross-References: CVE-2026-25800 CVSS scores: CVE-2026-25800 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

java-17-openj9-17.0.20.1-1.1 on GA media (moderate)

java-17-openj9-17.0.20.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11640-1 Rating: moderate Cross-References: CVE-2026-70906 CVE-2026-70907 CVSS scores: CVE-2026-70906 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-70907 SUSE : 5.3...

openSUSE 16 Security Update : python-aiohttp (openSUSE-SU-2026:21687-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21687-1 advisory. - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate...

openSUSE 16 Security Update : python-h2 (openSUSE-SU-2026:21693-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21693-1 advisory. This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, whic...

openSUSE 16: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (openSUSE-SU-2026:21700-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21700-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...

OPENSUSE-SU-2026:11661-1 grafana-12.4.5-5.1 on GA media

These are all security issues fixed in the grafana-12.4.5-5.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-84821

Name of the Vulnerable Software and Affected Versions RemoteIo affected versions not specified Description A heap out-of-bounds read occurs in RemoteIo when the software processes block-aligned remote CRW files. A heap out-of-bounds read is a memory safety violation where the program reads data...

OPENSUSE-SU-2026:11663-1 perl-URI-5.360.0-1.1 on GA media

These are all security issues fixed in the perl-URI-5.360.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11657-1 dracut-112+suse.47.gec0b378-1.1 on GA media

These are all security issues fixed in the dracut-112+suse.47.gec0b378-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-84816

Name of the Vulnerable Software and Affected Versions exiv2 versions prior to 0.28.9-1.1 Description An out of bounds read occurs in the decodeBasic function within CrwMap. An out of bounds read is a condition where a program reads data past the end of the intended buffer, which can lead to crash...

OPENSUSE-SU-2026:11662-1 openai-codex-0.152.0-1.1 on GA media

These are all security issues fixed in the openai-codex-0.152.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11658-1 exiv2-0.28.9-1.1 on GA media

These are all security issues fixed in the exiv2-0.28.9-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-84820

Name of the Vulnerable Software and Affected Versions RemoteIo versions prior to 0.28.9-1.1 Description A heap out-of-bounds write occurs in RemoteIo when reading data from a malicious remote server. This issue specifically affects WebReady and Curl builds. Recommendations Update to version...

OPENSUSE-SU-2026:11656-1 aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 on GA media

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.0git0.2950b36-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11659-1 ffmpeg-9-libavcodec-devel-9.0.1-3.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-3.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : librest (openSUSE-SU-2026:21694-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21694-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseud...

openSUSE 16: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (openSUSE-SU-2026:21699-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21699-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...