OPENSUSE-SU-2026:10423-1 nginx-1.29.7-1.1 on GA media

These are all security issues fixed in the nginx-1.29.7-1.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : chromium -- security fixes (3c370171-b6b6-463a-8746-ee49bea08c87)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3c370171-b6b6-463a-8746-ee49bea08c87 advisory. Chrome Releases reports: This update includes 26 security fixes: Tenable has extracted the...

FreeBSD : chromium -- security fixes (07d6b170-fed8-4ee2-ba96-b6d61b6d6a26)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 07d6b170-fed8-4ee2-ba96-b6d61b6d6a26 advisory. Chrome Releases reports: This update includes 8 security fixes: Tenable has extracted the...

Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.179 fixes various security issues The following security issues were fixed: CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255595. CVE-2023-53781: smc: Fix use-after-free in tcpwritetimerhandl...

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255595. CVE-2023-53781: smc: Fix use-after-free in tcpwritetimerhandl...

OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media

These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...

Stable Channel Update for ChromeOS / ChromeOS Flex

The ChromeOS Stable channel is being updated to OS version 16581.42.0 Browser version 146.0.7680.169 for most ChromeOS devices. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta...

OPENSUSE-SU-2026:10417-1 python311-deepdiff-8.6.2-1.1 on GA media

These are all security issues fixed in the python311-deepdiff-8.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10415-1 glances-common-4.5.2-1.1 on GA media

These are all security issues fixed in the glances-common-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10413-1 firefox-esr-140.9.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10418-1 python311-jsonpath-ng-1.8.0-1.1 on GA media

These are all security issues fixed in the python311-jsonpath-ng-1.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10416-1 python313-PyMuPDF-1.27.2.2-1.1 on GA media

These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10414-1 perl-Crypt-URandom-0.550.0-1.1 on GA media

These are all security issues fixed in the perl-Crypt-URandom-0.550.0-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2025-21738: ata: libata-sff: Ensure that we cannot write outside the allocated buffer bsc1238917. CVE-2025-40242: gfs2: Fix unlikely race in gdlmputlock bsc1255075...

Rails has a possible XSS vulnerability in its Action View tag helpers

Impact When a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed, producing malformed HTML. A carefully crafted attribute value could then be misinterpreted by the browser as a separate attribute name, possibly leading to XSS. Application...

Important: Red Hat Security Advisory: osbuild-composer security update

An update for osbuild-composer is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images

Updated container images are now available for director Operator for Red Hat OpenStack Platform 17.1 Wallaby for RHEL 9.2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

SUSE-SU-2026:0962-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui bsc1254992. - CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET bsc1249587. ...

OPENSUSE-SU-2026:10407-1 azure-storage-azcopy-10.32.2-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.32.2-1.1 package on the GA media of openSUSE Tumbleweed...

Stable Channel Update for Desktop

The Stable channel has been updated to 146.0.7680.164/165 for Windows/Mac and 146.0.7680.164 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...