OPENSUSE-SU-2026:11870-1 libblkid-devel-2.42.3-1.1 on GA media

These are all security issues fixed in the libblkid-devel-2.42.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11858-1 hplip-3.26.6-1.1 on GA media

These are all security issues fixed in the hplip-3.26.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11862-1 libp11-kit0-0.26.5-1.1 on GA media

These are all security issues fixed in the libp11-kit0-0.26.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11866-1 python313-soupsieve-2.9.2-1.1 on GA media

These are all security issues fixed in the python313-soupsieve-2.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11869-1 rsync-3.5.1-1.1 on GA media

These are all security issues fixed in the rsync-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11856-1 ansible-lint-26.9.0-1.1 on GA media

These are all security issues fixed in the ansible-lint-26.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21929-1 Security update for cyrus-imapd

This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: Update to 3.8.8 bugfix release: - CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL bsc1279908 - CVE-2026-61908: JMAP email-header blob ID out-of-bounds index bsc1279975 - CVE-2026-61909: CalDAV/CardDAV...

OPENSUSE-SU-2026:21912-1 Security update for python-PyMuPDF

This update for python-PyMuPDF fixes the following issues: Changes in python-PyMuPDF: - CVE-2026-82035: a path traversal vulnerability in the font branch of extractobjects in src/main.py bsc1280486...

OPENSUSE-SU-2026:21911-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of Service via memory leak in MSL decoder bsc1279711. - CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetLis...

OPENSUSE-SU-2026:21909-1 Security update for libXrender

This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911...

OPENSUSE-SU-2026:21908-1 Security update for libX11

This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910...

OPENSUSE-SU-2026:21905-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53612: local privilege escalation via TOCTOU in mount8...

OPENSUSE-SU-2026:21904-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: Heap out-of-bounds write in RemoteIo when readi...

OPENSUSE-SU-2026:21903-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP API accepts oversized valid JSON bodies on withdecode and directrequest paths bsc1271318. - CVE-2026-57213:...

OPENSUSE-SU-2026:11846-1 forgejo-longterm-15.0.8-1.1 on GA media

These are all security issues fixed in the forgejo-longterm-15.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11844-1 cockpit-files-44-1.1 on GA media

These are all security issues fixed in the cockpit-files-44-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11849-1 openai-codex-0.155.1-1.1 on GA media

These are all security issues fixed in the openai-codex-0.155.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11848-1 helm-4.3.0-2.1 on GA media

These are all security issues fixed in the helm-4.3.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11843-1 aria2-1.37.0-3.1 on GA media

These are all security issues fixed in the aria2-1.37.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11845-1 flatpak-builder-1.4.12-1.1 on GA media

These are all security issues fixed in the flatpak-builder-1.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11852-1 python313-autobahn-26.7.1-2.1 on GA media

These are all security issues fixed in the python313-autobahn-26.7.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11850-1 perl-Mojolicious-9.490.0-2.1 on GA media

These are all security issues fixed in the perl-Mojolicious-9.490.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11851-1 python313-asyncssh-2.24.0-1.1 on GA media

These are all security issues fixed in the python313-asyncssh-2.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11853-1 golang-github-v2fly-v2ray-core-5.54.2-1.1 on GA media

These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.54.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11847-1 google-osconfig-agent-20260918.01-1.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20260918.01-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21902-1 Security update for zstd-jni

This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read bsc1279953. - CVE-2026-87824: denial of Service DoS via out-of-bounds read in Zstd.trainFromBufferDirect bsc1279956. - CVE-2026-87825: use-after-free resulting...

OPENSUSE-SU-2026:21925-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder...

OPENSUSE-SU-2026:21924-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge registration errors over QUIC and fix supervisor error classification Negotiate protected mode durin...

OPENSUSE-SU-2026:21928-1 Security update for python-weasyprint

This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery SSRF bsc1279942...

OPENSUSE-SU-2026:21927-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Fix potential authentication bypass and deadlocks in the crypto/ssh library by updating golang.org/x/crypto to v0.56.0. CVE-2026-56854,CVE-2026-78662,CVE-2026-56855 bsc1278666 - Fix a potential DoS via crash due to...

OPENSUSE-SU-2026:21900-1 Security update for jsoup, re2j

This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application bsc1275912...

OPENSUSE-SU-2026:21901-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

OPENSUSE-SU-2026:21897-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6348 CVE-2026-84304 GHSA-vp52-pcj8-j9qc GO-2026-6356...

OPENSUSE-SU-2026:21899-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs bsc1265542. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

OPENSUSE-SU-2026:21898-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

OPENSUSE-SU-2026:11836-1 libtpms-devel-0.10.2-2.1 on GA media

These are all security issues fixed in the libtpms-devel-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11833-1 libX11-6-1.8.13-2.1 on GA media

These are all security issues fixed in the libX11-6-1.8.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11842-1 rke2-1.36-1.36.4+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.36-1.36.4+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11829-1 apko-1.4.4-1.1 on GA media

These are all security issues fixed in the apko-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11834-1 libXrender-devel-0.9.12-2.1 on GA media

These are all security issues fixed in the libXrender-devel-0.9.12-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11827-1 MozillaThunderbird-140.16.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11841-1 python313-uv-0.12.17-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11840-1 python3-pytest-ansible-26.8.0-1.1 on GA media

These are all security issues fixed in the python3-pytest-ansible-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11832-1 helm3-3.22.0-1.1 on GA media

These are all security issues fixed in the helm3-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11839-1 python313-graphifyy-0.9.65-1.1 on GA media

These are all security issues fixed in the python313-graphifyy-0.9.65-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11835-1 librepods-0.1.0+git20260515.672e65a-1.1 on GA media

These are all security issues fixed in the librepods-0.1.0+git20260515.672e65a-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11838-1 pijul-1.0.0~beta.23-1.1 on GA media

These are all security issues fixed in the pijul-1.0.0beta.23-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11826-1 MozillaFirefox-156.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-156.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11837-1 mcphost-0.34.0-11.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-11.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11831-1 bazel-rules-python-source-2.3.3-1.1 on GA media

These are all security issues fixed in the bazel-rules-python-source-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed...