OPENSUSE-SU-2026:21814-1 Security update for zk

This update for zk fixes the following issues: Changes in zk: - Update Go vendored dependencies to resolve security issues boo1278625, boo1278447: Upgrade golang.org/x/crypto to v0.56.0 to fix security vulnerabilities in the embedded x/crypto/ssh package: - CVE-2026-56854: authentication bypass -...

OPENSUSE-SU-2026:11724-1 python313-geopy-2.5.0-1.1 on GA media

These are all security issues fixed in the python313-geopy-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11727-1 rclone-1.75.1-1.1 on GA media

These are all security issues fixed in the rclone-1.75.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11722-1 perl-DBD-Pg-3.21.2-1.1 on GA media

These are all security issues fixed in the perl-DBD-Pg-3.21.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11721-1 libmariadb-devel-3.4.9-2.1 on GA media

These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11725-1 jupyter-nbconvert-7.17.1-2.1 on GA media

These are all security issues fixed in the jupyter-nbconvert-7.17.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11728-1 rpcbind-1.2.9-2.1 on GA media

These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11718-1 helm-4.2.4-3.1 on GA media

These are all security issues fixed in the helm-4.2.4-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11726-1 python313-pypdf-6.16.2-3.1 on GA media

These are all security issues fixed in the python313-pypdf-6.16.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11716-1 ffmpeg-4-4.4.8-5.1 on GA media

These are all security issues fixed in the ffmpeg-4-4.4.8-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11717-1 git-bug-0.10.1-7.1 on GA media

These are all security issues fixed in the git-bug-0.10.1-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11723-1 python313-comfyui-frontend-package-1.52.7-1.1 on GA media

These are all security issues fixed in the python313-comfyui-frontend-package-1.52.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11720-1 ggml-devel-0.4.0-1.1 on GA media

These are all security issues fixed in the ggml-devel-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11714-1 chromedriver-152.0.7977.82-1.1 on GA media

These are all security issues fixed in the chromedriver-152.0.7977.82-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11719-1 gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21802-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

OPENSUSE-SU-2026:21801-1 Security update for trivy

This update for trivy fixes the following issues: - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates bsc1258543. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP meth...

OPENSUSE-SU-2026:21782-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

OPENSUSE-SU-2026:21783-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. - CVE-2026-47104: one-byte out-of-bounds read in parseiadarray allows attacke...

OPENSUSE-SU-2026:21800-1 Security update for freeciv

This update for freeciv fixes the following issues: Changes in freeciv: - freeciv 3.2.6: Fix Heap Buffer Overflow in worklistload via Crafted Save File boo1278695 Fix Out-of-Bounds Read in activities.order via Crafted Save File boo1278696 Fix some unit move legality checks and path finding issues...

OPENSUSE-SU-2026:11710-1 python313-fastapi-0.138.0-2.1 on GA media

These are all security issues fixed in the python313-fastapi-0.138.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11709-1 python313-dnspython-2.8.0-2.1 on GA media

These are all security issues fixed in the python313-dnspython-2.8.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11693-1 NetworkManager-1.56.1-4.1 on GA media

These are all security issues fixed in the NetworkManager-1.56.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11707-1 libopenslide-devel-4.0.1-1.1 on GA media

These are all security issues fixed in the libopenslide-devel-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11711-1 python313-idna-3.19-1.1 on GA media

These are all security issues fixed in the python313-idna-3.19-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11698-1 gh-2.100.0-1.1 on GA media

These are all security issues fixed in the gh-2.100.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11701-1 insighttoolkit-devel-5.4.7-1.1 on GA media

These are all security issues fixed in the insighttoolkit-devel-5.4.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11703-1 kernel-devel-7.2.3-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11712-1 python313-jwcrypto-1.6.0-1.1 on GA media

These are all security issues fixed in the python313-jwcrypto-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11694-1 amazon-ssm-agent-3.3.5226.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.5226.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11702-1 jsoup-1.23.2-1.1 on GA media

These are all security issues fixed in the jsoup-1.23.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11704-1 kbfs-6.6.3-4.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11695-1 cadvisor-0.60.5-3.1 on GA media

These are all security issues fixed in the cadvisor-0.60.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11700-1 hauler-2.1.0-3.1 on GA media

These are all security issues fixed in the hauler-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11706-1 bson-devel-2.5.2-1.1 on GA media

These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11713-1 trivy-0.74.0-4.1 on GA media

These are all security issues fixed in the trivy-0.74.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11692-1 GraphicsMagick-1.3.48-2.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.48-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11708-1 perl-Net-DNS-1.570.0-1.1 on GA media

These are all security issues fixed in the perl-Net-DNS-1.570.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11696-1 curl-8.22.0-1.1 on GA media

These are all security issues fixed in the curl-8.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11705-1 kimi-code-0.41.0-1.1 on GA media

These are all security issues fixed in the kimi-code-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11699-1 google-guest-agent-20260903.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11697-1 distribution-registry-3.1.1-6.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21776-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: - CVE-2026-10805: local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...

OPENSUSE-SU-2026:21774-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: OpenLDAP SASL authentication bypass...

OPENSUSE-SU-2026:21771-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276612. - CVE-2026-81092: github.com/mark3labs/mcp-go/server: requests accepted in HTTP transports...

OPENSUSE-SU-2026:21777-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...

OPENSUSE-SU-2026:21773-1 Security update for perl-URI

This update for perl-URI fixes the following issue: - CVE-2026-19953: non-NFC host names encoded to non-standard punycode labels due to missing normalization in nameprep bsc1277886...

OPENSUSE-SU-2026:21778-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

OPENSUSE-SU-2026:21768-1 Security update for msgpack-c

This update for msgpack-c fixes the following issue: Update to release 7.0.2: - CVE-2026-72854: Integer Overflow in msgpackunpackerexpandbuffer Causes a False-Success Undersized Reservation bsc1275911...