OPENSUSE-SU-2026:11664-1 apptainer-1.5.3-3.1 on GA media

These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11670-1 mcphost-0.34.0-10.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11667-1 hauler-2.1.0-1.1 on GA media

These are all security issues fixed in the hauler-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11669-1 helm3-3.21.3-7.1 on GA media

These are all security issues fixed in the helm3-3.21.3-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11676-1 trivy-0.74.0-2.1 on GA media

These are all security issues fixed in the trivy-0.74.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21733-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - Update CVE-2026-66757 patch. The original patch wasn't allocating enough bytes...

OPENSUSE-SU-2026:21731-1 Security update for gegl

This update for gegl fixes the following issues: Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229...

OPENSUSE-SU-2026:21721-1 Security update for c-ares

This update for c-ares fixes the following issues: Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via aresgetaddrinfo over TCP bsc1270416. - CVE-2026-69184: CPU exhaustion denial of service via unbounded DNS name compression...

OPENSUSE-SU-2026:21720-1 Security update for dovecot24

This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: submission-login: panic when mailmaxuseripconnections is reached bsc1276794. - CVE-2026-27852: DoS by sending mail with bad header bsc1276799. - CVE-2026-33604: SMTP smuggling via missing dot-stuffing after...

OPENSUSE-SU-2026:21728-1 Security update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb

This update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb fixes the following issues: Changes in orthanc: - Version 1.13.0 Highlights: complete rewrite of how DICOM files are retrieved from the storage area, parsed, and transcoded. The configuration file has been split...

OPENSUSE-SU-2026:21717-1 Security update for apache2-mod_auth_openidc

This update for apache2-modauthopenidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of modauthopenidc bsc1276217...

OPENSUSE-SU-2026:21724-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 152.0.7977.64 boo1276749, stable released 2026-08-25: CVE-2026-79282: Use after free in ANGLE CVE-2026-79290: Use after free in Aura CVE-2026-79054: Use after free in Chromecast CVE-2026-79121: Improper input...

OPENSUSE-SU-2026:21716-1 Security update for wicked2nm

This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - serdewith: KeyValueMap serialization panics on empty sequence or map entries bsc1271848. Other updates and bugfixes: Builddeps: bump serdewith from 3.18.0 to 3.21.0. Fix flaky tests. Fix teamlacpethtoo...

OPENSUSE-SU-2026:11659-1 ffmpeg-9-libavcodec-devel-9.0.1-3.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11656-1 aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 on GA media

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.0git0.2950b36-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11657-1 dracut-112+suse.47.gec0b378-1.1 on GA media

These are all security issues fixed in the dracut-112+suse.47.gec0b378-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11660-1 glibc-2.44-1.1 on GA media

These are all security issues fixed in the glibc-2.44-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11658-1 exiv2-0.28.9-1.1 on GA media

These are all security issues fixed in the exiv2-0.28.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11661-1 grafana-12.4.5-5.1 on GA media

These are all security issues fixed in the grafana-12.4.5-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11662-1 openai-codex-0.152.0-1.1 on GA media

These are all security issues fixed in the openai-codex-0.152.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11663-1 perl-URI-5.360.0-1.1 on GA media

These are all security issues fixed in the perl-URI-5.360.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21714-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70906: OpenJDK: Improve font loading bsc1275763. - CVE-2026-70907: OpenJDK: Enhance TLS server...

OPENSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. Fixed: Various security fixes. MFSA 2026-77 bsc1274867: CVE-2026-74934 Site isolation issue in the Graphics: CanvasWebGL...

OPENSUSE-SU-2026:21711-1 Security update for emacs

This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when a crafted image with large dimensions an...

OPENSUSE-SU-2026:21498-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.186 boo1272460: CVE-2026-16807: Out of bounds write in Codecs CVE-2026-16806: Use after free in WebMCP CVE-2026-16805: Use after free in Blink CVE-2026-16804: Use after free in Input - Chromium...

OPENSUSE-SU-2026:21135-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 149.0.7827.155 boo1268373: CVE-2026-12437: Use after free in WebShare CVE-2026-12438: Inappropriate implementation in WebView CVE-2026-12439: Use after free in Digital Credentials CVE-2026-12440: Use after free i...

OPENSUSE-SU-2026:20849-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 148.0.7778.215 boo1266471: CVE-2026-9872: Out of bounds write in GPU CVE-2026-9873: Use after free in Network CVE-2026-9874: Use after free in Dawn CVE-2026-9875: Out of bounds read in WebGL CVE-2026-9876: Use...

OPENSUSE-SU-2026:20460-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.177 boo1261249 CVE-2026-5273: Use after free in CSS CVE-2026-5272: Heap buffer overflow in GPU CVE-2026-5274: Integer overflow in Codecs CVE-2026-5275: Heap buffer overflow in ANGLE CVE-2026-5276:...

OPENSUSE-SU-2026:20660-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 147.0.7727.137 boo1263158 CVE-2026-7363: Use after free in Canvas CVE-2026-7361: Use after free in iOS CVE-2026-7344: Use after free in Accessibility CVE-2026-7343: Use after free in Views CVE-2026-7333: Use afte...

OPENSUSE-SU-2026:20183-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 144.0.7559.132 boo1257650 CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

OPENSUSE-SU-2026:20332-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 145.0.7632.159 boo1259213 CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerVR CVE-2026-3538: Integer overflow in Skia CVE-2026-3539: Object lifecycle issue in DevTools...

OPENSUSE-SU-2026:20020-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 boo1256067: CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 stable released 2025-12-18 no cve listed yet Chromium 143.0.7499.146 boo1255115: CVE-2025-14765:...

OPENSUSE-SU-2025:20076-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: Chromium 142.0.7444.175 boo1253698: CVE-2025-13223: Type Confusion in V8 CVE-2025-13224: Type Confusion in V8 Chromium 142.0.7444.162 boo1253267: CVE-2025-13042: Inappropriate implementation in V8 Chromium 142.0.7444.134...

OPENSUSE-SU-2025:20032-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 141.0.7390.122: CVE-2025-12036: Inappropriate implementation in V8 boo1252402 Chromium 141.0.7390.107: CVE-2025-11756: Use after free in Safe Browsing boo1252013 Chromium 141.0.7390.76: Do not send URLs as AIM input. This is to resolve...

OPENSUSE-SU-2026:21706-1 Security update for libgpg-error

This update for libgpg-error fixes the following issue: - Out-of-bounds read in gpgrtvfnameconcat of stringutils.c when the GPGRTFCONCATSYSCONF flag is used bsc1263078...

OPENSUSE-SU-2026:11654-1 snphost-0.7.0-3.1 on GA media

These are all security issues fixed in the snphost-0.7.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11655-1 libtree-sitter0_26-0.26.8-5.1 on GA media

These are all security issues fixed in the libtree-sitter026-0.26.8-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11649-1 Botan-3.13.0-1.1 on GA media

These are all security issues fixed in the Botan-3.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11652-1 java-1_8_0-openjdk-1.8.0.504-1.1 on GA media

These are all security issues fixed in the java-180-openjdk-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11653-1 snpguest-0.10.0-3.1 on GA media

These are all security issues fixed in the snpguest-0.10.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11651-1 incus-7.4-1.1 on GA media

These are all security issues fixed in the incus-7.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11650-1 gopass-1.17.0-1.1 on GA media

These are all security issues fixed in the gopass-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21701-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

OPENSUSE-SU-2026:21700-1 Security update for postgresql15

This update for postgresql15 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

OPENSUSE-SU-2026:21702-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

OPENSUSE-SU-2026:21699-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

OPENSUSE-SU-2026:21703-1 Security update for postgresql18

This update for postgresql18 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

OPENSUSE-SU-2026:21705-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

OPENSUSE-SU-2026:21704-1 Security update for udisks2

This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the as-user option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method can lead to local privilege escalation bsc1274430...

OPENSUSE-SU-2026:21696-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...