hauler-2.0.1-1.1 on GA media (moderate)

hauler-2.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11154-1 Rating: moderate Cross-References: CVE-2026-48702 CVSS scores: CVE-2026-48702 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-48702 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:11165-1 alloy-1.17.1-1.1 on GA media

These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11164-1 MozillaThunderbird-140.12.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11167-1 kubectl-cnpg-1.29.2-1.1 on GA media

These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : python-pdm (openSUSE-SU-2026:21161-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21161-1 advisory. Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files bsc1268384 - CVE-2026-47763: Do not write to paths...

openSUSE 16 Security Update : loupe (openSUSE-SU-2026:21074-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21074-1 advisory. This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to...

openSUSE 16 Security Update : capnproto (openSUSE-SU-2026:21062-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21062-1 advisory. Update to version 1.4.0. Security issues fixed: - CVE-2026-32239: negative Content-Length conversion treated as impossibly large length by KJ-HT...

openSUSE 16 Security Update : python-py7zr (openSUSE-SU-2026:21159-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21159-1 advisory. Changes in python-py7zr: - CVE-2026-23879: crafted malicious symbolic link chains in an archive can lead to an arbitrary file write bsc1268669 -...

openSUSE 16: alsa / alsa-devel / alsa-topology-devel / libasound2 / etc (openSUSE-SU-2026:21075-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21075-1 advisory. This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt...

PT-2026-55486

Name of the Vulnerable Software and Affected Versions CloudNativePG versions prior to 1.28.4 CloudNativePG versions prior to 1.29.2 Description CloudNativePG fails to pin the search path in the fillDefaultParameters function within pkg/management/postgres/pool/profiles.go when opening superuser...

PT-2026-55433

These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55428

These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11171-1 python311-python-socketio-5.16.3-1.1 on GA media

These are all security issues fixed in the python311-python-socketio-5.16.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11169-1 python3-onionshare-2.6.4-1.1 on GA media

These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11170-1 python311-python-engineio-4.13.3-1.1 on GA media

These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11168-1 perl-CGI-Session-4.490.0-1.1 on GA media

These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed...

perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media (moderate)

perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11158-1 Rating: moderate Cross-References: CVE-2026-56017 CVE-2026-56018 CVSS scores: CVE-2026-56017 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56017 SUSE : 8.7...

Security update for python-zeroconf (moderate)

openSUSE security update: security update for python-zeroconf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21175-1 Rating: moderate References: bsc1268235 bsc1268341 bsc1268342 bsc1268343 bsc1268388 Cross-References: CVE-2026-47180 CVE-2026-47183...

openSUSE 16 Security Update : golang-github-prometheus-alertmanager (openSUSE-SU-2026:21157-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21157-1 advisory. Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to versi...

openSUSE 16: MozillaThunderbird / MozillaThunderbird-openpgp-librnp / etc (openSUSE-SU-2026:21168-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21168-1 advisory. Changes in MozillaThunderbird: - Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 bsc1268071 CVE-2026-12289 bmo2023443 Privilege escalation in the...