OPENSUSE-SU-2026:11412-1 evince-48.4-2.1 on GA media

These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21490-1 Security update for tomcat11

This update for tomcat11 fixes the following issues - Update to Tomcat 11.0.24 - CVE-2026-59083: Incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements not clearly documented bsc1271398...

OPENSUSE-SU-2026:21489-1 Security update for bind

This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-10822: Key Record using PRIVATEDNS algorithm may lead to unexpected exit bsc1271983. - CVE-2026-11331: Potential wildcard CNAME RPZ policy...

OPENSUSE-SU-2026:21487-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Oth...

OPENSUSE-SU-2026:21488-1 Security update for openvpn

This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled bsc1270413. - CVE-2026-13698: denial of service via memory leak triggered by remote attackers with a valid...

OPENSUSE-SU-2026:21486-1 Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Other...

OPENSUSE-SU-2026:21485-1 Security update for valkey

This update for valkey fixes the following issues: Update to version 8.0.10. - CVE-2026-56684: RCE via CLIENT KILL due to use-after-free in TLS connection handling bsc1272443. - CVE-2026-63639: RCE via corrupt stream RDB files due to use-after-free when loading a stream consumer group from RDB...

OPENSUSE-SU-2026:21483-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj GO-2026-4761 CVE-2026-33211 GHSA-j5q5-j9gm-2w5c...

OPENSUSE-SU-2026:21484-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: - CVE-2026-42616: heap buffer overflow in cat of cat.c can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image bsc1271102. - CVE-2026-42617: heap buffer overflow in ntfsirtoib of index.c can lead to heap...

OPENSUSE-SU-2026:21482-1 Security update for ignition

This update for ignition fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266606. - CVE-2026-56852: golang.org/x/text/unicode/norm: handling of input containing inval...

OPENSUSE-SU-2026:21481-1 Security update for vexctl

This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

OPENSUSE-SU-2026:21480-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation bsc1272488. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and...

OPENSUSE-SU-2026:21479-1 Security update for libpng16

This update for libpng16 fixes the following issues: Changes in libpng16: Version update to 1.6.58 jscPED-16190 see CHANGES for other upstream changes...

OPENSUSE-SU-2026:21502-1 Security update for nsd

This update for nsd fixes the following issues: Changes in nsd: - Update nsd.keyring - update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD4143REL/doc/ChangeLog CVE-2026-12490: Bypass of client certificate verification with transfer over TLS bsc1269563 CVE-2026-12246: Out of bounds stack...

OPENSUSE-SU-2026:21501-1 Security update for s2n

This update for s2n fixes the following issues: Changes in s2n: - CVE-2026-16318: Denial of Service due to memory leak in QUIC transport parameters handler bsc1272352 - CVE-2026-16317: man-in-the-middle attack can silently discard individual application data records...

OPENSUSE-SU-2026:21500-1 Security update for yq

This update for yq fixes the following issues: Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good bsc1267199. - update to v4.53.3 Add --ini-preserve-quotes flag for INI round-trip quote preservation. Fix: reset INI decoder state on init. Fix:...

OPENSUSE-SU-2026:21499-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO message. Bind getopt from the host when usi...

OPENSUSE-SU-2026:21497-1 Security update for perl-YAML-Syck

This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - updated to 1.470.0 1.47 Security - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load path on untrusted input with no special flags reported by Paul Johnson via CPANSec, PR 213: -...

OPENSUSE-SU-2026:21496-1 Security update for perl-Mojolicious

This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - updated to 9.480.0 9.48 - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every request, instead of being reused for the whole...

OPENSUSE-SU-2026:21494-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...

OPENSUSE-SU-2026:21492-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels...

OPENSUSE-SU-2026:21477-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when sftp server:/path . is used with an attacker-controlled server bsc1271044. - CVE-2026-59996: scp: file placed in the parent directory of an intended target...

OPENSUSE-SU-2026:21476-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of inp...

OPENSUSE-SU-2026:21475-1 Security update for samba

This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-by...

OPENSUSE-SU-2026:11407-1 rsyslog-8.2606.0-1.1 on GA media

These are all security issues fixed in the rsyslog-8.2606.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11408-1 libblkid-devel-2.42.2-1.1 on GA media

These are all security issues fixed in the libblkid-devel-2.42.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11406-1 PackageKit-1.3.6-1.1 on GA media

These are all security issues fixed in the PackageKit-1.3.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11405-1 ImageMagick-7.1.2.28-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.28-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11409-1 libxmlrpc++9-1.64.03-2.1 on GA media

These are all security issues fixed in the libxmlrpc++9-1.64.03-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21470-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. - CVE-2026-46968: unauthorized creation, deletion or modification...

OPENSUSE-SU-2026:21467-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. - CVE-2026-46968: unauthorized creation, deletion or modification...

OPENSUSE-SU-2026:21468-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue - CVE-2026-61464: Heap Buffer Over-Write in X11 import with crafted window title bsc1271496...

OPENSUSE-SU-2026:21474-1 Security update for s2n

This update for s2n fixes the following issues: Changes in s2n: - CVE-2026-16318: Denial of Service due to memory leak in QUIC transport parameters handler bsc1272352 - CVE-2026-16317: man-in-the-middle attack can silently discard individual application data records...

OPENSUSE-SU-2026:21464-1 Security update for libkrun

This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in ssl::selectnextproto due to improper lifetime handling bsc1270429. - CVE-2026-41676: openssl: short buffer overflow via Deriver:derive and PkeyCtxRef:derive when using OpenSSL 1.1.1 bsc1270198. -...

OPENSUSE-SU-2026:21471-1 Security update for keybase-client

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels...

OPENSUSE-SU-2026:21459-1 Security update for python313, python3

This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error...

OPENSUSE-SU-2026:21457-1 Security update for hawk-apiserver

This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: - Bump ClusterLabs/go-pacemaker v0.0.0-20260609131737-256130b189e0 bsc1267454 Version 0.1.0+git.1773234993.db3c82f: handle /cib/live/primitives//edit in hawk-apiserver - Bump github.com/stretchr/testify.v1.11.0...

OPENSUSE-SU-2026:21473-1 Security update for apptainer

This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO message. Bind getopt from the host when usi...

OPENSUSE-SU-2026:21456-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266603. - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of...

OPENSUSE-SU-2026:21455-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128...

OPENSUSE-SU-2026:21453-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.186 boo1272460: CVE-2026-16807: Out of bounds write in Codecs CVE-2026-16806: Use after free in WebMCP CVE-2026-16805: Use after free in Blink CVE-2026-16804: Use after free in Input...

OPENSUSE-SU-2026:11400-1 tomcat10-10.1.57-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.57-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11401-1 tomcat11-11.0.24-1.1 on GA media

These are all security issues fixed in the tomcat11-11.0.24-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11385-1 freerdp-3.30.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.30.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11389-1 kubernetes1.34-apiserver-1.34.10-1.1 on GA media

These are all security issues fixed in the kubernetes1.34-apiserver-1.34.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11393-1 logcli-3.7.4-1.1 on GA media

These are all security issues fixed in the logcli-3.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11398-1 tekton-cli-0.45.1-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.45.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11386-1 helm-4.2.3-4.1 on GA media

These are all security issues fixed in the helm-4.2.3-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11404-1 warewulf4-4.7.0-4.1 on GA media

These are all security issues fixed in the warewulf4-4.7.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11392-1 kubevirt1.8-container-disk-1.8.4-3.1 on GA media

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-3.1 package on the GA media of openSUSE Tumbleweed...