Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

Security update for podman

This update for podman rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15.3...

PT-2026-83485

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description When Capsule Protocol is enabled, the HttpDatagramHandler caches the current RequestDecoder. During stream...

openSUSE 16 Security Update : 7zip (openSUSE-SU-2026:21641-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21641-1 advisory. This update for 7zip fixes the following issue: Update to 26.02. - CVE-2026-14266: heap buffer overflow when processing XZ chunked data can lead to remo...

openSUSE 16 Security Update : dracut (openSUSE-SU-2026:21639-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21639-1 advisory. This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code executio...

openSUSE 16: ansible-rmt-server / rmt-server / rmt-server-config / etc (openSUSE-SU-2026:21640-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21640-1 advisory. Update to version 3.1 bsc1274715. Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser...

PT-2026-83488

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description The ext authz filter incorrectly assumes that a request always contains a :path pseudoheader when applying...

PT-2026-83494

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description An inconsistent canonicalization process occurs when ignore path parameters in path matching is enabled. T...

PT-2026-83490

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy fails to properly handle scoped IPv6 addresses when using Utility::copyInternetAddressAndPort and QU...

OPENSUSE-SU-2026:11634-1 jupyter-jupyterlab-4.5.10-1.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-4.5.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11632-1 owasp-modsecurity-crs-4.29.0-1.1 on GA media

These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11636-1 wicked-0.6.80-2.1 on GA media

These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83483

Name of the Vulnerable Software and Affected Versions Composer versions prior to 2.10.3 Composer versions prior to 2.2.30 Description Two issues allow directory escape and arbitrary command execution. Recommendations Update to version 2.10.3. Update to version 2.2.30...

OPENSUSE-SU-2026:11630-1 istioctl-1.30.4-1.1 on GA media

These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11627-1 bzip2-1.0.8-6.1 on GA media

These are all security issues fixed in the bzip2-1.0.8-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11635-1 python313-uv-0.12.7-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83484

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.36.10 Envoy versions prior to 1.37.6 Envoy versions prior to 1.38.4 Envoy versions prior to 1.39.1 Description Envoy matches raw request paths, whereas servlet backends like Apache Tomcat strip semicolon matrix...

OPENSUSE-SU-2026:11633-1 php-composer2-2.10.3-1.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : python-pip (openSUSE-SU-2026:21643-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21643-1 advisory. This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows...

openSUSE 16 Security Update : rsync (openSUSE-SU-2026:21650-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21650-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon...