OPENSUSE-SU-2018:0543-1 Security update for lame

This update for lame fixes the following issues: Lame was updated to version 3.100: Improved detection of MPEG audio data in RIFF WAVE files. sf3545112 Invalid sampling detection New switch --gain , range -20.0 to +12.0, a more convenient way to apply Gain adjustment in decibels, than the use of...

OPENSUSE-SU-2017:2568-1 Recommended update for openjpeg

This update for openjpeg fixes the following vulnerability: CVE-2016-7445: Null pointer dereference in convert.c could lead to crash bsc999817 The following bug was also fixed: - Programs linked with libopenjpeg1 would expose non-standard math behavior due to usage of -ffast-math in openjpeg...

OPENSUSE-SU-2026:12109-1 guava-33.7.2-1.1 on GA media

These are all security issues fixed in the guava-33.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12097-1 MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12084-1 libsoup-2_4-1-2.74.3-24.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-24.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:22035-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276744. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue...

OPENSUSE-SU-2026:22028-1 Security update for python-fsspec

This update for python-fsspec fixes the following issues: Changes in python-fsspec: - CVE-2026-104851: python-fsspec: remote code execution via server-side template injection in ReferenceFileSystem bsc1284173...

OPENSUSE-SU-2026:12067-1 pgvector-devel-0.8.7-1.1 on GA media

These are all security issues fixed in the pgvector-devel-0.8.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12055-1 ansible-core-2.20-2.20.9-2.1 on GA media

These are all security issues fixed in the ansible-core-2.20-2.20.9-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11989-1 python313-CairoSVG-2.9.0-1.3 on GA media

These are all security issues fixed in the python313-CairoSVG-2.9.0-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21977-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

OPENSUSE-SU-2026:21976-1 Security update for gnome-shell

This update for gnome-shell fixes the following issue: - CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619...

OPENSUSE-SU-2026:21970-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898...

OPENSUSE-SU-2026:11919-1 gnumeric-1.12.62+8-1.1 on GA media

These are all security issues fixed in the gnumeric-1.12.62+8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11914-1 amazon-ecs-init-1.107.0-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21997-1 Security update for aria2

This update for aria2 fixes the following issues: Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0 be1caa2d bsc1257934...

OPENSUSE-SU-2026:11901-1 php8-8.5.11-1.1 on GA media

These are all security issues fixed in the php8-8.5.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21960-1 Security update for perl-DBI

This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704...

OPENSUSE-SU-2026:11874-1 goose-1.51.0-1.1 on GA media

These are all security issues fixed in the goose-1.51.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21944-1 Security update for cjose

This update for cjose fixes the following issues: - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap-based buffer overflow bsc1279844. - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose ca...

OPENSUSE-SU-2026:21938-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

OPENSUSE-SU-2026:21954-1 Security update for osmo-iuh

This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607...

OPENSUSE-SU-2026:11852-1 python313-autobahn-26.7.1-2.1 on GA media

These are all security issues fixed in the python313-autobahn-26.7.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11849-1 openai-codex-0.155.1-1.1 on GA media

These are all security issues fixed in the openai-codex-0.155.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21925-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder...

OPENSUSE-SU-2026:21882-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

OPENSUSE-SU-2026:11825-1 libipa_hbac-devel-2.13.1-3.1 on GA media

These are all security issues fixed in the libipahbac-devel-2.13.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21874-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in Repo.clonefrom URL via os.path.expandvars bsc1273357. - CVE-2026-67323: unguarded Git options passed as keyword arguments in Repo.archive and git.lsremote allow for command injectio...

OPENSUSE-SU-2026:11778-1 mistral-vibe-2.25.4-1.1 on GA media

These are all security issues fixed in the mistral-vibe-2.25.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11772-1 gitea-tea-0.16.0-1.1 on GA media

These are all security issues fixed in the gitea-tea-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11760-1 tomcat10-10.1.59-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.59-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21827-1 Security update for python-jwcrypto

This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens bsc1277639. - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification bsc1278707...

OPENSUSE-SU-2026:11745-1 perl-HTML-FormHandler-0.410.2-1.1 on GA media

These are all security issues fixed in the perl-HTML-FormHandler-0.410.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11746-1 python313-modelscope-hub-0.4.2-1.1 on GA media

These are all security issues fixed in the python313-modelscope-hub-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21820-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

OPENSUSE-SU-2026:21809-1 Security update for helm

This update for helm fixes the following issues: Update to version 3.21.1: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277949. -...

OPENSUSE-SU-2026:21782-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

OPENSUSE-SU-2026:21774-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: OpenLDAP SASL authentication bypass...

OPENSUSE-SU-2026:11680-1 agama-web-ui-24+0.a836cced5-52.1 on GA media

These are all security issues fixed in the agama-web-ui-24+0.a836cced5-52.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21755-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276667...

OPENSUSE-SU-2026:21741-1 Security update for python-ruff

This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged bsc1249011...

OPENSUSE-SU-2026:21786-1 Security update for cadvisor

This update for cadvisor fixes the following issues: Changes in cadvisor: - update vendor: go.opentelemetry.io/[email protected] bsc1276727, CVE-2026-41178 - update to 0.60.5 bsc1266645, CVE-2026-39821: build: discover bootstrap image tag instead of pinning it lib/manager: allow disabling container...

OPENSUSE-SU-2026:11673-1 opencode-1.18.26-1.1 on GA media

These are all security issues fixed in the opencode-1.18.26-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11674-1 glances-common-4.5.6-1.1 on GA media

These are all security issues fixed in the glances-common-4.5.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21692-1 Security update for dhcpcd

This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service bsc1268980. - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte stack out-of-bounds write bsc1268976. -...

OPENSUSE-SU-2026:11629-1 dovecot24-2.4.5-1.1 on GA media

These are all security issues fixed in the dovecot24-2.4.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-RU-2026:21658-1 Recommended update for sequoia-sq

This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only LICENSE.txt confirms it Correct Legal-Review-Notice usage - Update dependencies due to security issues CVE-2026-25541 bsc1274437 - Switch crypto...

OPENSUSE-SU-2026:11565-1 libecpg6-18.6-1.1 on GA media

These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11561-1 chromedriver-151.0.7922.169-1.1 on GA media

These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11570-1 python313-django-allauth-65.19.1-1.1 on GA media

These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed...