OPENSUSE-SU-2026:21918-1 Security update for warewulf4

This update for warewulf4 fixes the following issues: Changes in warewulf4: - updating to v4.7.1 with the following changes wwctl power no longer falls back to the local BMC for nodes with no ipmi: ipaddr:, which could power off the Warewulf server itself wwclient is built with GOAMD64=v1 and no...

OPENSUSE-SU-2026:21877-1 Security update for ffmpeg-7

This update for ffmpeg-7 fixes the following issues: - CVE-2023-6602: HLS Force TTY Demuxer bsc1220546. - CVE-2023-6604: HLS XBIN Demuxer DoS Amplification bsc1220549. - CVE-2024-35367: FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8...

OPENSUSE-SU-2026:21879-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ss...

OPENSUSE-SU-2026:21875-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

OPENSUSE-SU-2026:21874-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in Repo.clonefrom URL via os.path.expandvars bsc1273357. - CVE-2026-67323: unguarded Git options passed as keyword arguments in Repo.archive and git.lsremote allow for command injectio...

OPENSUSE-SU-2026:21913-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 153.0.8010.47 boo1280687: CVE-2026-91726: Out of bounds read in WebGL CVE-2026-91721: Use after free in Internals CVE-2026-91749: Use after free in Workers CVE-2026-91724: Use after free in Input CVE-2026-91728:...

OPENSUSE-SU-2026:11818-1 shadowsocks-rust-1.25.0-1.1 on GA media

These are all security issues fixed in the shadowsocks-rust-1.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11816-1 python313-weasyprint-70.0-1.1 on GA media

These are all security issues fixed in the python313-weasyprint-70.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11817-1 python313-3.13.15-1.1 on GA media

These are all security issues fixed in the python313-3.13.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11814-1 jsch-2.28.7-1.1 on GA media

These are all security issues fixed in the jsch-2.28.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11812-1 chromedriver-153.0.8010.47-1.1 on GA media

These are all security issues fixed in the chromedriver-153.0.8010.47-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11811-1 amazon-ssm-agent-3.3.5390.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.5390.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11815-1 python313-ansi2html-1.9.5-1.1 on GA media

These are all security issues fixed in the python313-ansi2html-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11813-1 cloudflared-2026.9.1-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21873-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation bsc1267246. - CVE-2026-40528: stack and heap buffer overrun in the dokeyvalue function due to missing length check allows for memory...

OPENSUSE-SU-2026:21915-1 Security update for budgie-backgrounds

This update for budgie-backgrounds fixes the following issues: Changes in budgie-backgrounds: - Convert images to JXL, add submission format policy, drop jhead dep because of CVE-2025-44906 bsc1243819...

OPENSUSE-SU-2026:21872-1 Security update for memcached

This update for memcached fixes the following issue: - heap buffer overflows in default-config LRU-crawler metadump and proxy backend-response length truncation bsc1270716...

OPENSUSE-SU-2026:21871-1 Security update for libsoup

This update for libsoup fixes the following issues - CVE-2026-0716: out-of-bounds read when processing a crafted unmasked frame with a payload length near UINT64MAX sent by a WebSocket server bsc1256418...

OPENSUSE-SU-2026:11801-1 ImageMagick-7.1.2.31-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.31-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11810-1 warewulf4-4.7.1-1.1 on GA media

These are all security issues fixed in the warewulf4-4.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11802-1 NetworkManager-applet-l2tp-1.52.6-1.1 on GA media

These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11809-1 valkey-9.1.2-2.1 on GA media

These are all security issues fixed in the valkey-9.1.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11807-1 nginx-1.31.6-1.1 on GA media

These are all security issues fixed in the nginx-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11808-1 python313-pymongo-4.18.1-1.1 on GA media

These are all security issues fixed in the python313-pymongo-4.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11804-1 jetty-annotations-9.4.58-6.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11805-1 kernel-devel-7.2.6-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11806-1 kit-0.107.0-1.1 on GA media

These are all security issues fixed in the kit-0.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11803-1 alloy-1.19.2-1.1 on GA media

These are all security issues fixed in the alloy-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21870-1 Security update for openai-codex

This update for openai-codex fixes the following issues: Changes in openai-codex: Update to version 0.154.0: Experimental worktree support for isolated checkouts of new or forked sessions, with browse and resume Answer questions inline while Codex keeps working, keeping the main draft Vim R repla...

OPENSUSE-SU-2026:21869-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations bsc1277378 - CVE-2026-78475: unbounded variable-length stack allocations in the PIX loader can cause stack exhaustion...

OPENSUSE-SU-2026:21867-1 Security update for mkvtoolnix

This update for mkvtoolnix fixes the following issues: Changes in mkvtoolnix: - CVE-2026-90783: heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic boo1280126...

OPENSUSE-SU-2026:21865-1 Security update for mbedtls

This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to version 3.6.7: CVE-2026-25832: TLS 1.3 client accepted HRR selecting unadvertised group boo1280186 Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was not advertised in the original ClientHe...

OPENSUSE-SU-2026:21863-1 Security update for live555

This update for live555 fixes the following issues: Changes in live555: - Update to version 2026.08.25: Fixed a bug in "VorbisAudioRTPSource" that could have caused a malicious SDP description to crash a RTP client. - update to 2026.08.14: Fixed a bug that could cause a problem with subclassed...

OPENSUSE-SU-2026:21866-1 Security update for chirp

This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memories with AM mode Unify Baofeng setting descriptions across drivers Add Yaesu FT5D uvb5: Fix Rever...

OPENSUSE-SU-2026:21864-1 Security update for mbedtls-2

This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - CVE-2025-52496: race condition in AESNI support detection, AES key disclosure / GCM forgery in multithreaded programs boo1245810 - CVE-2025-59438: padding oracle through timing of cipher error reporting boo1252454...

OPENSUSE-SU-2026:21856-1 Security update for rpm

This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: rpm-plugin-selinux if selinux-policy - harden ndb code bsc1269584 CVE-2026-44605 - split all plugins into subpackages this allows for an easy way to g...

OPENSUSE-SU-2026:21858-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: Chromium 153.0.8010.36 boo1279840: CVE-2026-87464: Use after free in WebGL CVE-2026-87488: Use after free in WebGL CVE-2026-87438: Out of bounds write in WebGL CVE-2026-87527: Buffer overflow in WebGL CVE-2026-87628: Use...

OPENSUSE-SU-2026:11792-1 7zip-26.03-1.1 on GA media

These are all security issues fixed in the 7zip-26.03-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11795-1 ffmpeg-9-libavcodec-devel-9.0.1-6.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11797-1 freeipmi-1.6.19-1.1 on GA media

These are all security issues fixed in the freeipmi-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11798-1 go-passbolt-cli-0.5.2-1.1 on GA media

These are all security issues fixed in the go-passbolt-cli-0.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11799-1 python313-aiosmtplib-5.1.3-1.1 on GA media

These are all security issues fixed in the python313-aiosmtplib-5.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11796-1 firefox-esr-153.3.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-153.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11794-1 ffmpeg-8-8.1.2-5.1 on GA media

These are all security issues fixed in the ffmpeg-8-8.1.2-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11793-1 ant-1.10.18-2.1 on GA media

These are all security issues fixed in the ant-1.10.18-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11800-1 python313-litellm-1.101.0-1.1 on GA media

These are all security issues fixed in the python313-litellm-1.101.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21861-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH channel messages CVE-2026-56854, CVE-2026-56855, CVE-2026-78662, bsc1278604: Fix gh api telemetry disableme...

OPENSUSE-SU-2026:21853-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 bsc1278001: CVE-2026-75874 bmo2039972 Sandbox escape in the Remote Settings Client component CVE-2026-84118 bmo2057457 Use-after-free in the JavaScript: GC component CVE-2026-84119...

OPENSUSE-SU-2026:21859-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: Updated to 1.570.0 1.57: See /usr/share/doc/packages/perl-Net-DNS/Changes . - Resync with IANA DNS parameters registry. - EDNS: Add support for MQTYPE-QUERY option. - Unbounded recursion when re-encoding message wit...

OPENSUSE-SU-2026:21851-1 Security update for kronosnet

This update for kronosnet fixes the following issues: - CVE-2026-15811: improper sanitization of sensitive memory locations following cryptographic configuration adjustments can lead to potential exposure of encryption keys bsc1271923. - CVE-2026-15812: improper verification of packet origins...