Stable Channel Update for Desktop

The Stable channel has been updated to 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Important: Red Hat Security Advisory: Kiali 2.22.5 for Red Hat OpenShift Service Mesh 3.3

Kiali 2.22.5 for Red Hat OpenShift Service Mesh 3.3 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

PT-2026-49728

Name of the Vulnerable Software and Affected Versions zeroconf versions prior to 0.149.16 Description An issue exists where the functions read character string and read string in src/zeroconf/ protocol/incoming.py advance the self.offset by a declared length without verifying it against self. dat...

librav1e0_8-0.8.1-2.1 on GA media (moderate)

librav1e08-0.8.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:11028-1 Rating: moderate Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-58160 SUSE : 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:...

OPENSUSE-SU-2026:11035-1 python311-aiosmtplib-5.1.1-1.1 on GA media

These are all security issues fixed in the python311-aiosmtplib-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11034-1 perl-Crypt-PBKDF2-0.261630-1.1 on GA media

These are all security issues fixed in the perl-Crypt-PBKDF2-0.261630-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11031-1 google-guest-agent-20260529.00-2.1 on GA media

These are all security issues fixed in the google-guest-agent-20260529.00-2.1 package on the GA media of openSUSE Tumbleweed...

openSUSE 16 Security Update : perl-CryptX (openSUSE-SU-2026:20936-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20936-1 advisory. Changes in perl-CryptX: - updated to 0.89.0 0.089 see /usr/share/doc/packages/perl-CryptX/Changes 0.089 2026-05-10 - new: Crypt::ASN1 - new:...

SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2310-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2310-1 advisory. The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: -...

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2026:2376-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2376-1 advisory. This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: Security fixes: -...

Fedora 43 : bind9-next (2026-ec095a4675)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ec095a4675 advisory. Update to 9.21.22 rhbz2480122 Security Fixes: - Limit resolver server list size. CVE-2026-3592 - Fix GSS-API resource leak. CVE-2026-3039 - Disable...

PT-2026-49118

Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description When SimpleAsyncHTTPClient follows a 3xx redirect, it shallow-copies the original HTTPRequest and removes only the Host header. It fails to clear the Authorization header, auth username, auth passwor...

OPENSUSE-SU-2026:11025-1 python311-paramiko-5.0.0-1.1 on GA media

These are all security issues fixed in the python311-paramiko-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11024-1 python311-PyJWT-2.13.0-1.1 on GA media

These are all security issues fixed in the python311-PyJWT-2.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11022-1 opensc-0.27.1-2.1 on GA media

These are all security issues fixed in the opensc-0.27.1-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 44 : composer (2026-9b34a78e81)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9b34a78e81 advisory. Version 2.10.1 - 2026-06-04 Security: Fixed shell escaping when opening an editor 12903 Security: Verify backup phar signature before restoring it when using...

OPENSUSE-SU-2026:11018-1 wicked-0.6.79-1.1 on GA media

These are all security issues fixed in the wicked-0.6.79-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11017-1 perl-GD-2.860.0-1.1 on GA media

These are all security issues fixed in the perl-GD-2.860.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11008-1 chromedriver-149.0.7827.102-1.1 on GA media

These are all security issues fixed in the chromedriver-149.0.7827.102-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11016-1 logback-1.5.34-2.1 on GA media

These are all security issues fixed in the logback-1.5.34-2.1 package on the GA media of openSUSE Tumbleweed...