OPENSUSE-SU-2018:4062-1 Security update for pdns-recursor

This update for pdns-recursor to version 4.1.8 fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer bsc1114157. - CVE-2018-14644: Fixed denial of service via crafted query for meta-types bsc1114170. - CVE-2018-14626...

OPENSUSE-SU-2018:0632-1 Security update for python-Django

This update for python-Django fixes the following issues: Update to version 1.11.10 LTS Fixes CVE-2018-6188 boo1077714, CVE-2017-7234, CVE-2017-7233, CVE-2017-12794...

OPENSUSE-SU-2017:2984-1 Security update for redis

This update for redis to version 4.0.2 fixes the following issues: - CVE-2016-8339: CONFIG SET client-output-buffer-limit Code Execution Vulnerability boo1002351 The following upstream changes are included: - SLOWLOG now logs the offending client name and address - The modules native data types R...

OPENSUSE-SU-2026:12119-1 python313-urllib3_1-1.26.20-8.1 on GA media

These are all security issues fixed in the python313-urllib31-1.26.20-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12097-1 MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12103-1 python313-Django-6.1.2-1.1 on GA media

These are all security issues fixed in the python313-Django-6.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12092-1 cups-filters-1.28.17-10.1 on GA media

These are all security issues fixed in the cups-filters-1.28.17-10.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12088-1 qemu-11.1.2-1.1 on GA media

These are all security issues fixed in the qemu-11.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12060-1 iperf-3.22-1.1 on GA media

These are all security issues fixed in the iperf-3.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12019-1 python313-mysql-connector-python-9.7.0-1.2 on GA media

These are all security issues fixed in the python313-mysql-connector-python-9.7.0-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11947-1 python313-sglang-0.5.20-2.1 on GA media

These are all security issues fixed in the python313-sglang-0.5.20-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21976-1 Security update for gnome-shell

This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619...

OPENSUSE-SU-2026:11922-1 libslirp-devel-4.9.5+1-1.1 on GA media

These are all security issues fixed in the libslirp-devel-4.9.5+1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11907-1 tomcat10-10.1.60-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.60-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11900-1 mistral-vibe-2.25.8-1.1 on GA media

These are all security issues fixed in the mistral-vibe-2.25.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11894-1 libX11-6-1.8.13-3.1 on GA media

These are all security issues fixed in the libX11-6-1.8.13-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11890-1 gimp-3.2.6-3.1 on GA media

These are all security issues fixed in the gimp-3.2.6-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21951-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESR MFSA 2026-93, bsc1280371: - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the...

OPENSUSE-SU-2026:11878-1 jackson-dataformat-cbor-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-cbor-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11857-1 gitoxide-0.58.0-2.1 on GA media

These are all security issues fixed in the gitoxide-0.58.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21925-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder...

OPENSUSE-SU-2026:21924-1 Security update for cloudflared

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge registration errors over QUIC and fix supervisor error classification Negotiate protected mode durin...

OPENSUSE-SU-2026:21899-1 Security update for alloy

This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs bsc1265542. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

OPENSUSE-SU-2026:11841-1 python313-uv-0.12.17-1.1 on GA media

These are all security issues fixed in the python313-uv-0.12.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21882-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

OPENSUSE-SU-2026:21878-1 Security update for ruby3.4

This update for ruby3.4 fixes the following issues: - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. - CVE-2026-27820: insufficient checks in zstreambufferungets can lead to a buffer overflow bsc1259239. - CVE-2026-41316: erb: @init...

OPENSUSE-SU-2026:21874-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in Repo.clonefrom URL via os.path.expandvars bsc1273357. - CVE-2026-67323: unguarded Git options passed as keyword arguments in Repo.archive and git.lsremote allow for command injectio...

OPENSUSE-SU-2026:11799-1 python313-aiosmtplib-5.1.3-1.1 on GA media

These are all security issues fixed in the python313-aiosmtplib-5.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11791-1 sngrep-1.8.4-2.1 on GA media

These are all security issues fixed in the sngrep-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11787-1 glibc-2.44-2.1 on GA media

These are all security issues fixed in the glibc-2.44-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21841-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update vendor.tar to fix: bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662: hauler: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library - update vendor.tar to fix: bsc1279416,...

OPENSUSE-SU-2026:21849-1 Security update for kimi-code

This update for kimi-code fixes the following issues: Changes in kimi-code: Update to version 0.42.0: Add an experimental Updates panel with paginated progress messages from the main agent and subagents, enabled with KIMICODEEXPERIMENTALNOTIFYUSER=1 Turn the subagent model pool, Remote Control an...

OPENSUSE-SU-2026:11774-1 kubernetes1.34-apiserver-1.34.11-2.1 on GA media

These are all security issues fixed in the kubernetes1.34-apiserver-1.34.11-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11775-1 kubernetes1.35-apiserver-1.35.8-2.1 on GA media

These are all security issues fixed in the kubernetes1.35-apiserver-1.35.8-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11720-1 ggml-devel-0.4.0-1.1 on GA media

These are all security issues fixed in the ggml-devel-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21771-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276612. - CVE-2026-81092: github.com/mark3labs/mcp-go/server: requests accepted in HTTP transports...

OPENSUSE-SU-2026:21795-1 Security update for python-Authlib

This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-41479: Open Redirect vulnerability via crafted authorization requests bsc1275231...

OPENSUSE-SU-2026:21793-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 2.1.0 bsc1265425, CVE-2026-41888: v2.1.0 is a minor release built on the containerd- native foundation laid down in v2.0.0. The headline is that hauler store sync and hauler store add are now fully concurrent, with...

OPENSUSE-SU-2025:20076-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: Chromium 142.0.7444.175 boo1253698: CVE-2025-13223: Type Confusion in V8 CVE-2025-13224: Type Confusion in V8 Chromium 142.0.7444.162 boo1253267: CVE-2025-13042: Inappropriate implementation in V8 Chromium 142.0.7444.134...

OPENSUSE-SU-2026:21681-1 Security update for rav1e

This update for rav1e fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted log input can allow ANSI escape sequence injection and terminal manipulation bsc1249016. Changes for rav1e: - Update cargo dependencies...

OPENSUSE-SU-2026:11640-1 java-17-openj9-17.0.20.1-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21675-1 Security update for broot

This update for broot fixes the following issues: Changes in broot: - v1.59.0 CVE-2026-72847 boo1275994 new shellcommand verb attribute: run a command through a shell sh -c / cmd /C so &&, ; and pipes work, without leaving broot - Fix 1145 fix invalid official Mac binary duplicate linked dylib wi...

OPENSUSE-SU-2026:11599-1 ucode-intel-20260812-1.1 on GA media

These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21626-1 Security update for qt6-svg

This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing pattern group nodes bsc1250994...

OPENSUSE-SU-2026:11529-1 forgejo-cli-0.6.0-2.1 on GA media

These are all security issues fixed in the forgejo-cli-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21555-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

OPENSUSE-SU-2026:11492-1 aws-efs-utils-3.2.0-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21548-1 Security update for gd

This update for gd fixes the following issue: - CVE-2026-9672: security issue in libgd bsc1273101...

OPENSUSE-SU-2026:11475-1 kak-lsp-21.0.2-1.1 on GA media

These are all security issues fixed in the kak-lsp-21.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11462-1 gleam-1.18.1-1.1 on GA media

These are all security issues fixed in the gleam-1.18.1-1.1 package on the GA media of openSUSE Tumbleweed...