SUSE-SU-2026:3225-1 Security update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni

This update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni fixes the following issue Security issues fixed: - CVE-2026-26032: improper pathname limitation in PackagerResolver allows for arbitrary files writes outside of the configured buildRoot directory bsc1271727. Other updates...

Malicious code in zstd-jni (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6861 Malicious code in zstd-jni (npm)

The package communicates with a domain associated with malicious activity...