OPENSUSE-SU-2026:11017-1 perl-GD-2.860.0-1.1 on GA media

These are all security issues fixed in the perl-GD-2.860.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20937-1 Security update for python-Django

This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-6873: Signed cookie salt namespace collision bsc1267578 - CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend bsc1267579 - CVE-2026-8404: Potential exposure of priva...

OPENSUSE-SU-2026:20933-1 Security update for mariadb

This update for mariadb fixes the following issues Update to 11.8.8: - CVE-2026-3494: audit plugin comment handling bypass bsc1259176. - CVE-2026-34303: mysql: optimizer unspecified vulnerability bsc1266435. - CVE-2026-35549: SHA2 auth plugin crash on large packets bsc1261413. - CVE-2026-44168:...

OPENSUSE-SU-2026:20908-1 Security update for perl-XML-LibXML

This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences bsc1264715...

OPENSUSE-SU-2026:10964-1 libsofia-sip-ua-glib3-1.13.17+50-1.1 on GA media

These are all security issues fixed in the libsofia-sip-ua-glib3-1.13.17+50-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20897-1 Security update for python-pyOpenSSL

This update for python-pyOpenSSL fixes the following issue - CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state inconsistency bsc1262803...

OPENSUSE-SU-2026:10907-1 cloud-hypervisor-52.0-1.1 on GA media

These are all security issues fixed in the cloud-hypervisor-52.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10888-1 argocd-cli-3.4.3-1.1 on GA media

These are all security issues fixed in the argocd-cli-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20828-1 Security update for vim

This update for vim fixes the following issues - CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes bsc1261833. - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim...

OPENSUSE-SU-2026:10862-1 yq-4.53.2-1.1 on GA media

These are all security issues fixed in the yq-4.53.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20792-1 Security update for perl-HTTP-Tiny

This update for perl-HTTP-Tiny fixes the following issues: Changes in perl-HTTP-Tiny: - updated to 0.094 0.094 - No changes from 0.093-TRIAL 0.093 - fix to prevent invalid characters in all headers, and prevent header smuggling CVE-2026-7010 bsc1264992 - updated to 0.092 0.092 - No changes from...

OPENSUSE-SU-2026:10856-1 rclone-1.74.2-1.1 on GA media

These are all security issues fixed in the rclone-1.74.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10847-1 rqlite-10.1.0-1.1 on GA media

These are all security issues fixed in the rqlite-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20776-1 Security update for valkey

This update for valkey fixes the following issues - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts bsc1258746. - CVE-2026-21863: denial of service via invalid clusterbus packet bsc1258788. - CVE-2026-23479: use-after-free in unblock client...

OPENSUSE-SU-2026:20762-1 Security update for go1.26

This update for go1.26 fixes the following issues Security issues: - CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. - CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. - CVE-2026-39817: cmd/go: "go tool pack" does...

OPENSUSE-SU-2026:10790-1 java-1_8_0-openj9-1.8.0.492-2.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.492-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20752-1 Security update for alloy

This update for alloy fixes the following issues Security issues: - CVE-2026-4427: github.com/jackc/pgproto3/v2: improper validation of field length allows a malicious PostgreSQL server to crash a client application via a DataRow message bsc1259919. - CVE-2026-25934: github.com/go-git/go-git/v5:...

OPENSUSE-SU-2026:10737-1 MozillaFirefox-150.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-150.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20699-1 Security update for openCryptoki

This update for openCryptoki fixes the following issues Security issue: - CVE-2026-40253: Updated fix for malformed BER-encoded cryptographic objects bsc1262283. Non security issue: - Refactored .spec file to fully support transactional and immutable operating systems jscPED-14609: Migrated user...

OPENSUSE-SU-2026:10650-1 libtiff-devel-32bit-4.7.1-5.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.7.1-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20611-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks sometimes soft-fail...

OPENSUSE-SU-2026:10604-1 ruby4.0-rubygem-rack-session-2.1.2-1.1 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rack-session-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10587-1 calibre-9.7.0-1.1 on GA media

These are all security issues fixed in the calibre-9.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20570-1 Security update for go1.25

This update for go1.25 fixes the following issues: - Update to version go1.25.9 bsc1244485. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

OPENSUSE-SU-2026:20547-1 Security update for strongswan

This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP bsc1259472. Changes for strongswan: - Fixed a vulnerability in the NetworkManager plugin that...

OPENSUSE-SU-2026:20447-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: - Update to versio 16.13. bsc1258754 - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector bsc1258008 - CVE-2026-2004: Harden selectivity estimators against being attached to operators that accept unexpected data type...

OPENSUSE-SU-2026:20410-1 Security update for exiv2

This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder bsc1219870. - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntriesDecoder bsc1219871. - CVE-2024-39695:...

OPENSUSE-SU-2026:20405-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds chec...

OPENSUSE-SU-2026:20392-1 Security update for python-Authlib

This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-27962: JWS deserializecompact allows for signature bypass by accepting user-controlled embedded JWK as verification key bsc1259738 - CVE-2026-28490: cryptographic padding oracle in JWE RSA15 key...

OPENSUSE-SU-2026:20384-1 Security update for libsoup

This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion bsc1252555. - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy bsc1254876. - CVE-2025-32049:...

OPENSUSE-SU-2026:10287-1 sdbootutil-1+git20260303.90d816d-1.1 on GA media

These are all security issues fixed in the sdbootutil-1+git20260303.90d816d-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10234-1 chromedriver-145.0.7632.109-1.1 on GA media

These are all security issues fixed in the chromedriver-145.0.7632.109-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10091-1 java-11-openjdk-11.0.30.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.30.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20057-1 Security update for docker

This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at - Update to Docker 28.5.0-ce. See upstream changelog online at - Update to docker-buildx v0.29.0. Upstream changelog: - Remove git-core recommends on SLE. Most SLE...

OPENSUSE-SU-2026:20031-1 Security update for curl

This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS bsc1256105. - CVE-2025-14524: bearer token leak on cross-protocol redirect bsc1255731. - CVE-2025-14819: libssh global knownhost override...

OPENSUSE-SU-2026:10025-1 python311-aiohttp-3.13.3-1.1 on GA media

These are all security issues fixed in the python311-aiohttp-3.13.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15823-1 clair-4.9.0-1.1 on GA media

These are all security issues fixed in the clair-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15320-1 avif-tools-1.3.0-2.1 on GA media

These are all security issues fixed in the avif-tools-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15244-1 libtpms-devel-0.10.1-1.1 on GA media

These are all security issues fixed in the libtpms-devel-0.10.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15257-1 pam_pkcs11-0.6.13-2.1 on GA media

These are all security issues fixed in the pampkcs11-0.6.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14897-1 tomcat10-10.1.35-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.35-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14805-1 postgresql13-13.19-1.1 on GA media

These are all security issues fixed in the postgresql13-13.19-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14789-1 kernel-firmware-nfp-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-nfp-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14800-1 kernel-firmware-ueagle-20250206-1.1 on GA media

These are all security issues fixed in the kernel-firmware-ueagle-20250206-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:14647-1 python311-translate-toolkit-3.14.5-1.1 on GA media

These are all security issues fixed in the python311-translate-toolkit-3.14.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:14546-1 ansible-core-2.16-2.16.14-1.1 on GA media

These are all security issues fixed in the ansible-core-2.16-2.16.14-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:0377-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 131.0.6778.85 stable released 2024-11-19 boo1233534 CVE-2024-11395: Type Confusion in V8...

OPENSUSE-SU-2024:0373-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 131.0.6778.69 stable released 2024-11-12 boo1233311 CVE-2024-11110: Inappropriate implementation in Blink. CVE-2024-11111: Inappropriate implementation in Autofill. CVE-2024-11112: Use after free in Media. CVE-2024-11113: Use after fre...

OPENSUSE-SU-2024:0372-1 Security update for icinga2

This update for icinga2 fixes the following issues: Update to 2.13.10: - CVE-2024-49369: Fix TLS certificate validation bypass bsc1233310...

OPENSUSE-SU-2024:0370-1 Security update for cobbler

This update for cobbler fixes the following issues: Update to 3.3.7 Security: Fix issue that allowed anyone to connect to the API as admin CVE-2024-47533, boo1231332 bind - Fix bug that prevents cname entries from being generated successfully Fix build on RHEL9 based distributions fence-agents-al...