OPENSUSE-SU-2026:11971-1 python313-GitPython-3.2.0-1.1 on GA media

These are all security issues fixed in the python313-GitPython-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11923-1 openai-codex-0.158.0-1.1 on GA media

These are all security issues fixed in the openai-codex-0.158.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21996-1 Security update for v2ray-core

This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.54.2 Add iOS Client Support Bundle: Packet Bridge Receiver, Subscription Improvment, DNS and other udp improvement Add Wireguard Chain Proxy Support Fix bugs Update vendored dependencies boo1266787...

OPENSUSE-SU-2026:11906-1 tomcat-9.0.122-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.122-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11899-1 libtcnative-2-0-2.0.16-1.1 on GA media

These are all security issues fixed in the libtcnative-2-0-2.0.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11862-1 libp11-kit0-0.26.5-1.1 on GA media

These are all security issues fixed in the libp11-kit0-0.26.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11869-1 rsync-3.5.1-1.1 on GA media

These are all security issues fixed in the rsync-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21886-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279274. - CVE-2026-84304: google.golang.org/grpc: heap memory...

OPENSUSE-SU-2026:21884-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library bsc1278681. - CVE-2026-71556: github.com/go-git/go-git/v5: arbitrary file read/write via symbolic lin...

OPENSUSE-SU-2026:11815-1 python313-ansi2html-1.9.5-1.1 on GA media

These are all security issues fixed in the python313-ansi2html-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21873-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation bsc1267246. - CVE-2026-40528: stack and heap buffer overrun in the dokeyvalue function due to missing length check allows for memory...

OPENSUSE-SU-2026:21863-1 Security update for live555

This update for live555 fixes the following issues: Changes in live555: - Update to version 2026.08.25: Fixed a bug in "VorbisAudioRTPSource" that could have caused a malicious SDP description to crash a RTP client. - update to 2026.08.14: Fixed a bug that could cause a problem with subclassed...

OPENSUSE-SU-2026:21859-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: Updated to 1.570.0 1.57: See /usr/share/doc/packages/perl-Net-DNS/Changes . - Resync with IANA DNS parameters registry. - EDNS: Add support for MQTYPE-QUERY option. - Unbounded recursion when re-encoding message wit...

OPENSUSE-SU-2026:11783-1 alsa-1.2.16.1-2.1 on GA media

These are all security issues fixed in the alsa-1.2.16.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11771-1 gimp-3.2.6-1.1 on GA media

These are all security issues fixed in the gimp-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21778-1 Security update for php-composer2

This update for php-composer2 fixes the following issue: - CVE-2026-84361: Arbitrary code execution via malicious Perforce source URL bsc1278257...

OPENSUSE-SU-2026:21789-1 Security update for python-apprise

This update for python-apprise fixes the following issues: Changes in python-apprise: - CVE-2026-59180: Information disclosure via HTTP redirect following with credential resending bsc1271342...

OPENSUSE-SU-2026:21788-1 Security update for lxd

This update for lxd fixes the following issues: Changes in lxd: - update to 5.21.6: bsc1274937, CVE-2026-63293, bsc1274936, CVE-2026-62420, bsc1274954, CVE-2026-63295, bsc1274963, CVE-2026-63297, bsc1274961, CVE-2026-63296, bsc1275085, CVE-2026-63299, bsc1275084, CVE-2026-63298, bsc1275090,...

OPENSUSE-SU-2026:11664-1 apptainer-1.5.3-3.1 on GA media

These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21701-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

OPENSUSE-SU-2026:21689-1 Security update for gstreamer-devtools

This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal Channel type's Drop method has a race condition that can lead to a double-free and memory corruption bsc1243178. - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI...

OPENSUSE-SU-2026:21685-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing bsc1273551. - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees...

OPENSUSE-SU-2026:11535-1 bun-1.4.0~git20260808.52bf09cb-2.1 on GA media

These are all security issues fixed in the bun-1.4.0git20260808.52bf09cb-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11477-1 librest-1_0-0-0.10.2-2.1 on GA media

These are all security issues fixed in the librest-10-0-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11457-1 perl-Date-Manip-6.990.0-2.1 on GA media

These are all security issues fixed in the perl-Date-Manip-6.990.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11442-1 OpenImageIO-3.1.16.0-1.1 on GA media

These are all security issues fixed in the OpenImageIO-3.1.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21508-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...

OPENSUSE-SU-2026:11413-1 perses-cli-0.54.0-1.1 on GA media

These are all security issues fixed in the perses-cli-0.54.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21475-1 Security update for samba

This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-by...

OPENSUSE-SU-2026:11308-1 libsuricata8_0_6-8.0.6-1.1 on GA media

These are all security issues fixed in the libsuricata806-8.0.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21324-1 Security update for go1.25

This update for go1.25 fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. - CVE-2026-27142: html/template: URLs in meta content...

OPENSUSE-SU-2026:11236-1 python313-Django6-6.0.7-1.1 on GA media

These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11242-1 spectre-meltdown-checker-26.36.0602723-1.1 on GA media

These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21249-1 Security update for trivy

This update for trivy fixes the following issues Update to version 0.72.0. - CVE-2026-54448: tar unpacker reads scanned Helm chart archives .tgz with io.ReadAlltr and defines no size limit, which can lead to a DoS bsc1269271. - CVE-2026-55092: org.opencontainers.image.title annotation from OCI...

OPENSUSE-SU-2026:21225-1 Security update for rmt-server

This update for rmt-server fixes the following issue Update to 3.0.0: - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 bsc1265369. Changes for rmt-server: - Version 3.0.0 Security fix: Remove unused...

OPENSUSE-SU-2026:21205-1 Security update for docker-stable

This update for docker-stable fixes the following issues - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

OPENSUSE-SU-2026:11176-1 kitty-0.47.4-2.1 on GA media

These are all security issues fixed in the kitty-0.47.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11167-1 kubectl-cnpg-1.29.2-1.1 on GA media

These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21185-1 Security update for stgit

This update for stgit fixes the following issues: Changes in stgit: - Update to version 2.6.0: chore: update changelog for 2.6.0 fiximport: respect --name verbatim, ignoring stgit.namelength testrefresh: use testwhenfinished for status.renames cleanup expect over unwrap for test bugfix: issue 615...

OPENSUSE-SU-2026:11134-1 libslirp-devel-4.9.3+4-1.1 on GA media

These are all security issues fixed in the libslirp-devel-4.9.3+4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11123-1 jupyter-nbclassic-1.3.3-2.1 on GA media

These are all security issues fixed in the jupyter-nbclassic-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21154-1 Security update for ofono

This update for ofono fixes the following issues: Changes in ofono: - Reference the tracking bugs for the SMS/STK/USSD decoder security fixes applied upstream across the 2.14-2.17 updates: SMS decoder stack buffer overflows: CVE-2023-2794 boo1218292, CVE-2023-4232 boo1218293, CVE-2023-4233...

OPENSUSE-SU-2026:21151-1 Security update for warewulf4

This update for warewulf4 fixes the following issues: Changes in warewulf4: - updated go-jose to fix CVE-2026-34986 bsc1262810 - chi is fixed in the upstream project - updating to v4.7.0 with following security fixes fixed CVE-2026-39821 bsc1266483 fixed CVE-2026-33814 bsc1265653 - v4.7.0 with...

OPENSUSE-SU-2026:21028-1 Security update for util-linux

This update for util-linux fixes the following issue - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606...

OPENSUSE-SU-2026:20998-1 Security update for tree-sitter-ruby

This update for tree-sitter-ruby fixes the following issues - CVE-2025-5889: brace-expansion: inefficient regular expression complexity in function expand of file index.js bsc1244345. - CVE-2025-59343: tar-fs: tar-fs symlink validation bypass bsc1250517. Changes for tree-sitter-ruby: - Use correc...

OPENSUSE-SU-2026:11080-1 ghc-crypton-asn1-types-0.4.1-1.1 on GA media

These are all security issues fixed in the ghc-crypton-asn1-types-0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21121-1 Security update for tomcat11

This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

OPENSUSE-SU-2026:21078-1 Security update for python-ecdsa

This update for python-ecdsa fixes the following issue: - CVE-2026-33936: issue in the low-level DER parsing functions can cause unexpected exceptions to be raised from the public API functions bsc1261009...

OPENSUSE-SU-2026:11048-1 trivy-0.71.1-2.1 on GA media

These are all security issues fixed in the trivy-0.71.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20970-1 Security update for postgresql17

This update for postgresql17 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...