PT-2026-49119

Name of the Vulnerable Software and Affected Versions Tornado versions prior to 6.5.6 Description Gzip decompression routines process data in limited-size chunks but lack an overall limit for the total size of accumulated decompressed chunks. This allows a malicious server to consume unlimited...

OPENSUSE-SU-2026:11021-1 kitty-0.47.3-1.1 on GA media

These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11028-1 librav1e0_8-0.8.1-2.1 on GA media

These are all security issues fixed in the librav1e08-0.8.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11009-1 ffmpeg-7-7.1.4-3.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10993-1 apptainer-1.5.1-1.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10994-1 cpp-httplib-devel-0.46.1-1.1 on GA media

These are all security issues fixed in the cpp-httplib-devel-0.46.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10995-1 enc-1.1.5-2.1 on GA media

These are all security issues fixed in the enc-1.1.5-2.1 package on the GA media of openSUSE Tumbleweed...

MGASA-2026-0187 Updated tor packages fix security issues

This update provides lots of security issues fixed by upstream since our current version. Please see the links for details...

PT-2026-48599

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.11 Description The HTJ2K High-Throughput JPEG 2000 decoder in OpenEXRCore contains a heap-buffer-overflow READ in the ht undo impl function. This occurs because the function copies decoded pixels from a...

PT-2026-48598

Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13 Description An issue exists where .repo files can contain an optional path that may lead to path traversal attacks. Path traversal is a technique that allows an attacker to access files and directories that a...

OPENSUSE-SU-2026:10988-1 perl-Protocol-HTTP2-1.130.0-1.1 on GA media

These are all security issues fixed in the perl-Protocol-HTTP2-1.130.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-48609

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10983-1 gdk-pixbuf-loader-libheif-1.23.0-2.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-48597

Name of the Vulnerable Software and Affected Versions libzypp versions prior to 17.38.13-1.1 Description An issue exists allowing path traversal via the keyhint variable. Recommendations Update to version 17.38.13-1.1...

PT-2026-48114

These are all security issues fixed in the ack-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10965-1 ack-3.10.0-1.1 on GA media

These are all security issues fixed in the ack-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10974-1 python311-pypdf-6.13.0-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10964-1 libsofia-sip-ua-glib3-1.13.17+50-1.1 on GA media

These are all security issues fixed in the libsofia-sip-ua-glib3-1.13.17+50-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10963-1 python311-aiohttp-3.14.0-1.1 on GA media

These are all security issues fixed in the python311-aiohttp-3.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10961-1 ggml-devel-9500-1.1 on GA media

These are all security issues fixed in the ggml-devel-9500-1.1 package on the GA media of openSUSE Tumbleweed...