OPENSUSE-SU-2026:11103-1 libxar-devel-1.8.0.0.503-1.1 on GA media

These are all security issues fixed in the libxar-devel-1.8.0.0.503-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21119-1 Security update for perl-HTTP-Daemon

This update for perl-HTTP-Daemon fixes the following issue - CVE-2026-8450: HTTP: Daemon versions before 6.17 for Perl allow OS command injection via sendfile bsc1266370...

OPENSUSE-SU-2026:21103-1 Security update for postgresql15

This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...

OPENSUSE-SU-2026:21112-1 Security update for xwayland

This update for xwayland fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. bsc1266301 - Font Alias Stack-based Buffer Overflow. bsc1266294 - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. bsc1266300 - XKB Key Types Stack-based Buffer Overflow. bsc12662...

OPENSUSE-SU-2026:21096-1 Security update for zypper, libzypp, libsolv

This update for zypper, libzypp, libsolv fixes the following issues: Changes in zypper: Update to 1.14.98: - Transactional systems: Delegate rw-commands to transactional-wrapper if available jscPED-13680, jscPED-15607 On a transactional system where the root filesystem is mounted read-only, zyppe...

OPENSUSE-SU-2026:11060-1 tinyproxy-1.11.3-3.1 on GA media

These are all security issues fixed in the tinyproxy-1.11.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11030-1 crun-1.28-1.1 on GA media

These are all security issues fixed in the crun-1.28-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11034-1 perl-Crypt-PBKDF2-0.261630-1.1 on GA media

These are all security issues fixed in the perl-Crypt-PBKDF2-0.261630-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11035-1 python311-aiosmtplib-5.1.1-1.1 on GA media

These are all security issues fixed in the python311-aiosmtplib-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20962-1 Security update for cyrus-imapd

This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - cyrus-imapd don't start because of missing "Requires=var-run.mount" from systemd bsc1251788 Remove var-run.mount from Requires and After - update to version 3.8.6 bugfix release VUL-0: CVE-2025-49812: cyrus-imapd:...

OPENSUSE-SU-2026:20963-1 Security update for neonmodem

This update for neonmodem fixes the following issues: Changes in neonmodem: - Update golang.org/x/net dependency to v0.55.0 due to bsc1267193 - Update golang.org/x/image dependency to v0.38.0 due to bsc1260727 - Update golang.org/x/term dependency to v0.42.0 due to bsc1260727 - Update to version...

OPENSUSE-SU-2026:20949-1 Security update for wicked

This update for wicked fixes the following issues: Changes in wicked: - Update to version 0.6.79 - Fix an indirect remote shell command injection via unsanitized dhcp strings and leaseinfo dump bsc1265221,CVE-2026-44932: - Fix to escape single-quotes in leaseinfo dump output used by the wicked te...

OPENSUSE-SU-2026:20947-1 Security update for java-21-openj9

This update for java-21-openj9 fixes the following issues: Changes in java-21-openj9: - Make post scripts less noisy bsc1267355 - Use libalternatives instead of update-alternatives for distributions where libalternatives is available - Update to OpenJDK 21.0.11 with OpenJ9 0.59.0 virtual machine ...

OPENSUSE-SU-2026:11018-1 wicked-0.6.79-1.1 on GA media

These are all security issues fixed in the wicked-0.6.79-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11004-1 python311-kafka-python-2.3.2-1.1 on GA media

These are all security issues fixed in the python311-kafka-python-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20940-1 Security update for grafana

This update for grafana fixes the following issues: Changes in grafana: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266600 - Update to version 11.6.14+security-04: Security: CVE-2026-28374: Fix insecure direct object referenc...

OPENSUSE-SU-2026:20938-1 Security update for perl-YAML-Syck

This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - CVE-2026-5089: prevent buffer underflow in base60 sexagesimal parsing PR 133 bsc1265155...

OPENSUSE-SU-2026:10977-1 MozillaFirefox-151.0.3-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-151.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10972-1 python311-jupyter-server-2.19.0-1.1 on GA media

These are all security issues fixed in the python311-jupyter-server-2.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10969-1 perl-IO-Compress-2.220.0-2.1 on GA media

These are all security issues fixed in the perl-IO-Compress-2.220.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20884-1 Security update for memcached

This update for memcached fixes the following issues - CVE-2026-47783: timing side-channel in SASL password database authentication username bsc1265873. - CVE-2026-47784: timing side-channel in SASL password database authentication password bsc1265881...

OPENSUSE-SU-2026:10933-1 hauler-1.4.3-5.1 on GA media

These are all security issues fixed in the hauler-1.4.3-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20854-1 Security update for rqlite

This update for rqlite fixes the following issues: Changes in rqlite: - Update to version 10.2.0: Support verifying mTLS peer Common Name Console supports restore from SQLite data Console "count rows" respects current Tables Expand/Collapse state Console supports dropping indexes Further Console...

OPENSUSE-SU-2026:20861-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issue - CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects bsc1265267...

OPENSUSE-SU-2026:20862-1 Security update for python-Twisted

This update for python-Twisted fixes the following issue - CVE-2026-42304: Prior to 26.4.0rc2, the twisted.names module is vulnerable to a Denial of Service DoS attack via resource exhaustion during DNS name decompression bsc1265265...

OPENSUSE-SU-2026:10919-1 apache-sshd-2.18.0-1.1 on GA media

These are all security issues fixed in the apache-sshd-2.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10924-1 perl-Sereal-Decoder-5.6.0-1.1 on GA media

These are all security issues fixed in the perl-Sereal-Decoder-5.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10916-1 libgphoto2-6-2.5.34-1.1 on GA media

These are all security issues fixed in the libgphoto2-6-2.5.34-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10889-1 distribution-registry-3.1.1-3.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10893-1 java-26-openjdk-26.0.1.0-1.1 on GA media

These are all security issues fixed in the java-26-openjdk-26.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10899-1 mcphost-0.34.0-7.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10877-1 helm3-3.21.0-2.1 on GA media

These are all security issues fixed in the helm3-3.21.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10881-1 libBasicUsageEnvironment2-2026.04.22-1.1 on GA media

These are all security issues fixed in the libBasicUsageEnvironment2-2026.04.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20821-1 Security update for localsearch

This update for localsearch fixes the following issues: - CVE-2026-1764: Fixed a heap buffer overflow leads to denial of service or information disclosure when parsing MP3 files. bsc1257606 - CVE-2026-1765: Fixed a Denial of Service and potential information disclosure via crafted MP3 files...

OPENSUSE-SU-2026:10864-1 MozillaThunderbird-140.11.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20812-1 Security update for cups

This update for cups fixes the following issues - CVE-2026-27447: Authorization bypass via case-insensitive group-member lookup bsc1261572. - CVE-2026-34978: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss bsc1261571. - CVE-2026-34979: Heap overflow in getoption...

OPENSUSE-SU-2026:10776-1 tekton-cli-0.45.0-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.45.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10773-1 perl-CryptX-0.89.0-1.1 on GA media

These are all security issues fixed in the perl-CryptX-0.89.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20743-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: Dirty Frag fixes: - CVE-2026-43500: supported.conf: drop rxrpc completely bsc1264450 - CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449...

OPENSUSE-SU-2026:10763-1 regclient-0.11.4-1.1 on GA media

These are all security issues fixed in the regclient-0.11.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20697-1 Security update for cairo

This update for cairo fixes the following issue: - CVE-2025-50422: Poppler crash on malformed input bsc1247589...

OPENSUSE-SU-2026:10710-1 python311-jupyter-server-2.18.1-1.1 on GA media

These are all security issues fixed in the python311-jupyter-server-2.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20680-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.19+10 April 2026 CPU. Security issues fixed: - CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

OPENSUSE-SU-2026:20662-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 1.4.2 bsc1258614, CVE-2026-24122: Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 in the gomodules group across 1 directory fix for new helm chart features Bump github.com/sigstore/rekor from 1.4.3 ...

OPENSUSE-SU-2026:20629-1 Security update for mariadb

This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can lead to crash or remote code execution bsc1260081...

OPENSUSE-SU-2026:20617-1 Security update for python-Pillow

This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks bsc1262184...

OPENSUSE-SU-2026:20607-1 Security update for erlang

This update for erlang fixes the following issues: Security issues fixed: - CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote arbitrary reads/writes bsc1258663. - CVE-2026-23941: improper handling of duplicate Content-Length headers in...

OPENSUSE-SU-2026:20609-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: Update to version 20250506.01 bsc1243254, bsc1243505. Security issues fixed: - CVE-2024-45337: golang.org/x/crypto/ssh: misuse of the ServerConfig.PublicKeyCallback callback can lead to authorization bypass in applications bsc1234563....

OPENSUSE-SU-2026:20613-1 Security update for libcap

This update for libcap fixes the following issues: - CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in capsetfile bsc1261809...

OPENSUSE-FU-2026:20562-1 Feature update for libgcrypt, libgpg-error

This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 jscPED-15059: New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTLFIPSSERVICEINDICATOR control code. - Make SHA-1 non-FIPS internally for the 1.12 API - Add...