PT-2026-56844

Name of the Vulnerable Software and Affected Versions libmbedtls23 affected versions not specified libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libmbedtls23 and libeverest packages within the openSUSE Tumbleweed GA media...

OPENSUSE-SU-2026:11213-1 dirmngr-2.5.21-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.21-1.1 package on the GA media of openSUSE Tumbleweed...

Stable Channel Update for Desktop

The Stable channel has been updated to 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

OPENSUSE-SU-2026:11220-1 python313-pytest-html-4.2.0-4.1 on GA media

These are all security issues fixed in the python313-pytest-html-4.2.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11212-1 go1.25-1.25.12-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11216-1 mihomo-1.19.28-1.1 on GA media

These are all security issues fixed in the mihomo-1.19.28-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11227-1 xwayland-24.1.12-1.1 on GA media

These are all security issues fixed in the xwayland-24.1.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11225-1 libtiff-devel-32bit-4.7.2-1.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

nodejs:22 security, bug fix, and enhancement update

An update is available for nodejs, module.nodejs, nodejs-packaging, nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2026:35892 Important: nodejs:22 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

RLSA-2026:35891 Important: nodejs:24 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

OPENSUSE-SU-2026:11207-1 libsuricata8_0_5-8.0.5-2.1 on GA media

These are all security issues fixed in the libsuricata805-8.0.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11209-1 tomcat10-10.1.56-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.56-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11201-1 pam-1.7.2+git12-2.1 on GA media

These are all security issues fixed in the pam-1.7.2+git12-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56159

Name of the Vulnerable Software and Affected Versions Excelize versions prior to 2.11.0 Description Excelize is a Go language library used for reading and writing Microsoft Excel spreadsheets. The library parses shared-string cell values using the strconv.Atoi function but only verifies the upper...

OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media

These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56158

Name of the Vulnerable Software and Affected Versions Excelize versions prior to 2.11.0 Description The streaming worksheet reader used by the Rows and GetRows functions does not enforce the TotalRows limit on the row r attribute. An attacker can provide a small XLSX file containing a row number...

OPENSUSE-SU-2026:11202-1 python313-Protego-0.6.2-1.1 on GA media

These are all security issues fixed in the python313-Protego-0.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11205-1 rustup-1.28.2~0-4.1 on GA media

These are all security issues fixed in the rustup-1.28.20-4.1 package on the GA media of openSUSE Tumbleweed...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: fix potential race in tcpv6synrecvsock CVE-2026-43198 kernel: netfilter: nfnetlinkcthelper: fix OOB read in nfnlcthelperdumptable CVE-2026-43450 kernel: sctp: revalidate list cursor...