OPENSUSE-SU-2026:21045-1 Security update for perl-libwww-perl

This update for perl-libwww-perl fixes the following issue - CVE-2026-8368: authorization and proxy-authorization headers are leaked on cross-origin redirects bsc1265156...

OPENSUSE-SU-2026:21043-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issue Update to Firefox 140.12.0 ESR MFSA 2026-58, bsc1268071: - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12. - CVE-2026-12291: Use-after-free in the...

OPENSUSE-SU-2026:21040-1 Security update for sg3_utils

This update for sg3utils fixes the following issues: - sginq: --export output conformance for SCSI name string and ATA fields bsc1267823 - rescan-scsi-bus.sh: quote $idserial in findmultipath call bsc1268201...

OPENSUSE-SU-2026:21014-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in transportflagsfromdomain can crash the avahi-daemon bsc1261546. - CVE-2026-24401: unsolicited mDNS responses containing a recursive CNAME record can crash the avahi-daemon bsc1257235...

OPENSUSE-SU-2026:21012-1 Security update for perl-Config-IniFiles

This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open of the -file argument in makefilehandle bsc1268236...

OPENSUSE-SU-2026:21024-1 Security update for sed

This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file bsc1262144...

OPENSUSE-SU-2026:11100-1 python312-3.12.13-6.1 on GA media

These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11095-1 ofono-2.19-3.1 on GA media

These are all security issues fixed in the ofono-2.19-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20994-1 Security update for helm

This update for helm fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266598. Changes for helm: - Update to version 3.21.1: Fixed nil pointer panic that could happen wi...

OPENSUSE-SU-2026:20993-1 Security update for python-pip

This update for python-pip fixes the following issue - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite bsc1266669...

OPENSUSE-SU-2026:21118-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write bsc1266459...

OPENSUSE-SU-2026:21125-1 Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit bsc1267857...

OPENSUSE-SU-2026:21136-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - Update to version 0.28.1 jscPED-13285: Improved performance of inhibition rules when using Equal labels. Improve the documentation on escaping in UTF-8 matchers...

OPENSUSE-SU-2026:11059-1 lemon-3.53.2-2.1 on GA media

These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11045-1 traefik2-2.11.50-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.50-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20985-1 Security update for hostapd

This update for hostapd fixes the following issues: Changes in hostapd: - bsc1268083 - hostapd segmentation fault during fast restart cycles. - CVE-2025-24912: hostapd fails to process crafted RADIUS packets properly bsc1239461...

OPENSUSE-SU-2026:11038-1 stgit-2.6.0-1.1 on GA media

These are all security issues fixed in the stgit-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11021-1 kitty-0.47.3-1.1 on GA media

These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11011-1 golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media

These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11000-1 perl-Crypt-PasswdMD5-1.430.0-1.1 on GA media

These are all security issues fixed in the perl-Crypt-PasswdMD5-1.430.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10985-1 libIex-3_4-33-3.4.12-1.1 on GA media

These are all security issues fixed in the libIex-34-33-3.4.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10974-1 python311-pypdf-6.13.0-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20910-1 Security update for uriparser

This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption bsc1255000...

OPENSUSE-SU-2026:10963-1 python311-aiohttp-3.14.0-1.1 on GA media

These are all security issues fixed in the python311-aiohttp-3.14.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20898-1 Security update for frr

This update for frr fixes the following issues: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler bsc1261013. - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths bsc1263859. - CVE-2026-37457: Fix off-by-one error in FlowSpec operator array bounds...

OPENSUSE-SU-2026:10943-1 amazon-ssm-agent-3.3.4624.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.4624.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20891-1 Security update for vorbis-tools

This update for vorbis-tools fixes the following issues: Changes in vorbis-tools: - CVE-2026-34253: Fix buffer underflow in the ogg123 utility in function remotethread of remote.c bsc1265361:...

OPENSUSE-SU-2026:20864-1 Security update for evolution-data-server

This update for evolution-data-server fixes the following issues: - CVE-2026-2604: Canonicalize path before local cache file removal. bsc1258307...

OPENSUSE-SU-2026:20863-1 Security update for tree-sitter

This update for tree-sitter fixes the following issue - CVE-2026-44216: wasmtime: allocation of a table exceeding the size of the host's address space leads to panic bsc1265300...

OPENSUSE-SU-2026:10930-1 yq-4.53.2-2.1 on GA media

These are all security issues fixed in the yq-4.53.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10921-1 google-guest-agent-20260529.00-1.1 on GA media

These are all security issues fixed in the google-guest-agent-20260529.00-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20852-1 Security update for roundcubemail

This update for roundcubemail fixes the following issues: Changes in roundcubemail: - update to 1.6.16 + Fix potential too long value in IMAP ID command 10136 + Security: Fix stored XSS/HTML/CSS injection in subject field of the draft restore dialog CVE-2026-48849 bsc1266337 + Security: Fix CSS...

OPENSUSE-SU-2026:10917-1 libsoup-2_4-1-2.74.3-21.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-21.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10905-1 LibVNCServer-devel-0.9.15-3.1 on GA media

These are all security issues fixed in the LibVNCServer-devel-0.9.15-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10891-1 gsasl-2.2.3-1.1 on GA media

These are all security issues fixed in the gsasl-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10894-1 kpt-cli-1.0.0~beta.64-1.1 on GA media

These are all security issues fixed in the kpt-cli-1.0.0beta.64-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10887-1 apptainer-1.4.5-6.1 on GA media

These are all security issues fixed in the apptainer-1.4.5-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10896-1 libzypp-17.38.10-1.1 on GA media

These are all security issues fixed in the libzypp-17.38.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10871-1 amazon-ecs-init-1.103.2-1.1 on GA media

These are all security issues fixed in the amazon-ecs-init-1.103.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10868-1 libyang-devel-3.13.6-2.1 on GA media

These are all security issues fixed in the libyang-devel-3.13.6-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10859-1 kernel-devel-7.0.10-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10843-1 hauler-1.4.3-3.1 on GA media

These are all security issues fixed in the hauler-1.4.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20786-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...

OPENSUSE-SU-2026:20759-1 Security update for emacs

This update for emacs fixes the following issue: - CVE-2026-6861: memory corruption when processing specially crafted SVG CSS data bsc1262611. - Build with tree-sitter-0.26.8 security update bsc1262007...

OPENSUSE-SU-2026:10798-1 python311-urllib3-2.7.0-1.1 on GA media

These are all security issues fixed in the python311-urllib3-2.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20755-1 Security update for openexr

This update for openexr fixes the following issues - CVE-2026-41142: integer overflow in ImageChannel: resize can lead to a heap out-of-bounds write via OpenEXRUtil public API bsc1264356. - CVE-2026-42216: missing checks in IDManifest: init can lead to out-of-bounds read during prefix expansion...

OPENSUSE-SU-2026:10766-1 dovecot24-2.4.4-1.1 on GA media

These are all security issues fixed in the dovecot24-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10762-1 rclone-1.74.1-1.1 on GA media

These are all security issues fixed in the rclone-1.74.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10748-1 jupyter-jupyterlab-4.5.7-1.1 on GA media

These are all security issues fixed in the jupyter-jupyterlab-4.5.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20711-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 1.4.3 bsc1262353, CVE-2026-39984, bsc1262942, CVE-2026-34986: 1.4 Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in the gomodules group across 1 directory 1.4 Bump github.com/sigstore/timestamp-authority/v2...