OPENSUSE-SU-2026:11843-1 aria2-1.37.0-3.1 on GA media

These are all security issues fixed in the aria2-1.37.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11853-1 golang-github-v2fly-v2ray-core-5.54.2-1.1 on GA media

These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.54.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11849-1 openai-codex-0.155.1-1.1 on GA media

These are all security issues fixed in the openai-codex-0.155.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21902-1 Security update for zstd-jni

This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read bsc1279953. - CVE-2026-87824: denial of Service DoS via out-of-bounds read in Zstd.trainFromBufferDirect bsc1279956. - CVE-2026-87825: use-after-free resulting...

OPENSUSE-SU-2026:21925-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder...

OPENSUSE-SU-2026:21924-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge registration errors over QUIC and fix supervisor error classification Negotiate protected mode durin...

OPENSUSE-SU-2026:21928-1 Security update for python-weasyprint

This update for python-weasyprint fixes the following issues: Changes in python-weasyprint: - CVE-2026-55073: Server-Side Request Forgery SSRF bsc1279942...

OPENSUSE-SU-2026:21927-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Fix potential authentication bypass and deadlocks in the crypto/ssh library by updating golang.org/x/crypto to v0.56.0. CVE-2026-56854,CVE-2026-78662,CVE-2026-56855 bsc1278666 - Fix a potential DoS via crash due to...

OPENSUSE-SU-2026:21900-1 Security update for jsoup, re2j

This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application bsc1275912...

OPENSUSE-SU-2026:21901-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 client ondataread via GOAWAY during body upload bsc1279238. - CVE-2026-85534: heap buffer overflow in SoupSession through ondatasourcereadcallback via SETTINGS frame with crafted INITIALWINDOWSIZE...

OPENSUSE-SU-2026:21897-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6348 CVE-2026-84304 GHSA-vp52-pcj8-j9qc GO-2026-6356...

OPENSUSE-SU-2026:21898-1 Security update for distribution

This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277966. - CVE-2026-41178:...

OPENSUSE-SU-2026:21899-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs bsc1265542. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

OPENSUSE-SU-2026:11832-1 helm3-3.22.0-1.1 on GA media

These are all security issues fixed in the helm3-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11826-1 MozillaFirefox-156.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-156.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11835-1 librepods-0.1.0+git20260515.672e65a-1.1 on GA media

These are all security issues fixed in the librepods-0.1.0+git20260515.672e65a-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11838-1 pijul-1.0.0~beta.23-1.1 on GA media

These are all security issues fixed in the pijul-1.0.0beta.23-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11836-1 libtpms-devel-0.10.2-2.1 on GA media

These are all security issues fixed in the libtpms-devel-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11837-1 mcphost-0.34.0-11.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-11.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11831-1 bazel-rules-python-source-2.3.3-1.1 on GA media

These are all security issues fixed in the bazel-rules-python-source-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11833-1 libX11-6-1.8.13-2.1 on GA media

These are all security issues fixed in the libX11-6-1.8.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11827-1 MozillaThunderbird-140.16.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11829-1 apko-1.4.4-1.1 on GA media

These are all security issues fixed in the apko-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11842-1 rke2-1.36-1.36.4+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.36-1.36.4+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11834-1 libXrender-devel-0.9.12-2.1 on GA media

These are all security issues fixed in the libXrender-devel-0.9.12-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11841-1 python313-uv-0.12.17-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11839-1 python313-graphifyy-0.9.65-1.1 on GA media

These are all security issues fixed in the python313-graphifyy-0.9.65-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11840-1 python3-pytest-ansible-26.8.0-1.1 on GA media

These are all security issues fixed in the python3-pytest-ansible-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11828-1 amazon-cloudwatch-agent-1.300072.0-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300072.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11830-1 apptainer-1.5.3-4.1 on GA media

These are all security issues fixed in the apptainer-1.5.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21894-1 Security update for httpcomponents-client

This update for httpcomponents-client fixes the following issue: - CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163...

OPENSUSE-SU-2026:21893-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

OPENSUSE-SU-2026:21891-1 Security update for ant

This update for ant fixes the following issues: - CVE-2021-36374: excessive memory allocation when reading a specially crafted ZIP archive or a derived formats bsc1188469. - CVE-2025-7962: jakarta: improper neutralization of \r and \n UTF-8 characters can lead to SMTP injection bsc1246873. -...

OPENSUSE-SU-2026:21890-1 Security update for gdb

This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

OPENSUSE-SU-2026:21889-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scalenearestneighbor via duplicate alpha planes from nested iden/auxl items bsc1279443. - CVE-2026-84384: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS...

OPENSUSE-SU-2026:21888-1 Security update for gnome-remote-desktop

This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow unauthenticated denial of service bsc1273354...

OPENSUSE-SU-2026:21921-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 153.0.8010.52 boo1281123: CVE-2026-93374: Use after free in Dawn CVE-2026-93372: Buffer overflow in WebGL CVE-2026-93375: Incorrect reference resolution in Tracing CVE-2026-93382: Use after free in PDFium...

OPENSUSE-SU-2026:21887-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

OPENSUSE-SU-2026:21886-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279274. - CVE-2026-84304: google.golang.org/grpc: heap memory...

OPENSUSE-SU-2026:21884-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library bsc1278681. - CVE-2026-71556: github.com/go-git/go-git/v5: arbitrary file read/write via symbolic lin...

OPENSUSE-SU-2026:21883-1 Security update for freeipmi

This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem bsc1278722. - CVE-2026-85506: Arbitrary code execution via...

OPENSUSE-SU-2026:21882-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

OPENSUSE-SU-2026:11823-1 libsoup-3_0-0-3.6.6-9.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11821-1 kbfs-6.6.3-5.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11822-1 kyverno-1.19.1-1.1 on GA media

These are all security issues fixed in the kyverno-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11824-1 python313-PyMuPDF-1.28.2-1.1 on GA media

These are all security issues fixed in the python313-PyMuPDF-1.28.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11819-1 fake-gcs-server-1.56.1-1.1 on GA media

These are all security issues fixed in the fake-gcs-server-1.56.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11825-1 libipa_hbac-devel-2.13.1-3.1 on GA media

These are all security issues fixed in the libipahbac-devel-2.13.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11820-1 helm-4.3.0-1.1 on GA media

These are all security issues fixed in the helm-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21878-1 Security update for ruby3.4

This update for ruby3.4 fixes the following issues: - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. - CVE-2026-27820: insufficient checks in zstreambufferungets can lead to a buffer overflow bsc1259239. - CVE-2026-41316: erb: @init...