OPENSUSE-SU-2026:11333-1 helm-4.2.3-3.1 on GA media

These are all security issues fixed in the helm-4.2.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11338-1 jline3-3.30.15-3.1 on GA media

These are all security issues fixed in the jline3-3.30.15-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11324-1 afterburn-5.10.0.git73.b97f772-2.1 on GA media

These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11341-1 python313-pandas-3.0.3-1.2 on GA media

These are all security issues fixed in the python313-pandas-3.0.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11332-1 grafana-12.4.5-3.1 on GA media

These are all security issues fixed in the grafana-12.4.5-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11326-1 apache-ivy-2.6.0-1.1 on GA media

These are all security issues fixed in the apache-ivy-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11334-1 helm3-3.21.3-3.1 on GA media

These are all security issues fixed in the helm3-3.21.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11339-1 kernel-devel-7.1.4-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11328-1 distribution-registry-3.1.1-4.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21399-1 Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions

This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global prototyp...

OPENSUSE-SU-2026:21401-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails bsc1271293...

OPENSUSE-SU-2026:21400-1 Security update for radvd

This update for radvd fixes the following issue - CVE-2026-48715: crafted ICMPv6 Router Advertisement can lead to a stack-based buffer overflow bsc1268641. Changes for radvd: - Update to version 2.21. feat: RFC8319 support: Increase max AdvDefaultLifetime and MaxRtrAdvInterval. feat: Add DHCPv6-P...

OPENSUSE-SU-2026:21388-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

OPENSUSE-SU-2026:11320-1 libntfs-3g-devel-2022.10.3-8.1 on GA media

These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11322-1 python313-Js2Py-0.74-6.1 on GA media

These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11319-1 7zip-26.02-1.1 on GA media

These are all security issues fixed in the 7zip-26.02-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11323-1 python313-bleach-6.4.0-1.1 on GA media

These are all security issues fixed in the python313-bleach-6.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11321-1 perl-YAML-1.320.0-1.1 on GA media

These are all security issues fixed in the perl-YAML-1.320.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21395-1 Security update for trivy

This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation bsc1266495. - CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during...

OPENSUSE-SU-2026:21383-1 Security update for beets

This update for beets fixes the following issues: Changes in beets: - CVE-2026-42052: Prior to version 2.10.0, the bundled web UI uses Underscore template interpolation mode for untrusted metadata fields. boo1263988...

OPENSUSE-SU-2026:21393-1 Security update for gawk

This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free vulnerability within the dogetlineredir routine could lead to a program crash bsc1271351. - CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permit heap metadata manipulation and host memory...

OPENSUSE-SU-2026:21392-1 Security update for python-pyasn1

This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs bsc1271464. - CVE-2026-59885: quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service bsc1271465. -...

OPENSUSE-SU-2026:21382-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.128 boo1271656: CVE-2026-15899: Use after free in CameraCapture CVE-2026-15900: Use after free in GPU CVE-2026-15901: Use after free in Network CVE-2026-15902: Use after free in Cast CVE-2026-15903: Ou...

OPENSUSE-SU-2026:21391-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache bsc1271100. - CVE-2026-56366: ME...

OPENSUSE-SU-2026:21386-1 Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. - CVE-2026-41677: openssl: out-of-bounds read in PEM passwor...

OPENSUSE-SU-2026:21387-1 Security update for libgcrypt

This update for libgcrypt fixes the following issue - CVE-2026-41989: crafted ECDH ciphertext can lead denial of service bsc1262684...

OPENSUSE-SU-2026:21385-1 Security update for gpg2

This update for gpg2 fixes the following issue: - CVE-2026-57062: CMS parsing in gpgsm mishandles the CMS format for AES-GCM bsc1269279...

OPENSUSE-SU-2026:11310-1 ImageMagick-7.1.2.27-3.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11311-1 MozillaFirefox-152.0.6-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-152.0.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11315-1 libgit2-1_9-1.9.6-1.1 on GA media

These are all security issues fixed in the libgit2-19-1.9.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11317-1 iscsiuio-0.7.8.8-112.1 on GA media

These are all security issues fixed in the iscsiuio-0.7.8.8-112.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11316-1 libsoup-3_0-0-3.6.6-7.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11312-1 acl-2.4.0-1.1 on GA media

These are all security issues fixed in the acl-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11313-1 avahi-0.8-45.1 on GA media

These are all security issues fixed in the avahi-0.8-45.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11318-1 python313-pyasn1-0.6.4-1.1 on GA media

These are all security issues fixed in the python313-pyasn1-0.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11314-1 kubevirt1.8-container-disk-1.8.4-2.1 on GA media

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11309-1 chromedriver-150.0.7871.128-1.1 on GA media

These are all security issues fixed in the chromedriver-150.0.7871.128-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21380-1 Security update for opam

This update for opam fixes the following issues: Changes in opam: - Update to version 2.5.2 CVE-2026-57825 see included CHANGES file for details - Update to version 2.5.1 CVE-2026-41082 bsc1262281 see included CHANGES file for details - Update to version 2.5.0 see included CHANGES file for detail...

OPENSUSE-SU-2026:21379-1 Security update for ctop

This update for ctop fixes the following issues: Changes in ctop embedded dependencies: - CVE-2022-21698: clientgolang: Denial of service using InstrumentHandlerCounter bsc1248710 - CVE-2024-45310: runc: runc can be tricked into creating empty files bsc1257431 - CVE-2026-10722: ebpf: Crash when...

OPENSUSE-SU-2026:21375-1 Security update for jackson-annotations, jackson-core, jackson-databind

This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions bsc1268902. - CVE-2026-59889: missing view guard when deserializi...

OPENSUSE-SU-2026:21374-1 Security update for vim

This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping bsc1271194. - CVE-2026-59857: out-of-bounds write in SAL soundfolding due to improper bounds check...

OPENSUSE-SU-2026:21372-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues - CVE-2026-50269: improper validation of user-controlled strings allows for CRLF injection in multipart headers bsc1268398. - CVE-2026-54273: no limit in the HTTP/1 pipelined request queue can lead to excessive resource consumption...

OPENSUSE-SU-2026:21371-1 Security update for gzip

This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH bsc1269622...

OPENSUSE-SU-2026:21370-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues - CVE-2026-12891: unchecked aspectratioidc value used as an array index in the H.266 parser could cause a global out- of-bounds read bsc1268872. - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser...

OPENSUSE-SU-2026:11306-1 kbfs-6.6.3-3.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11308-1 libsuricata8_0_6-8.0.6-1.1 on GA media

These are all security issues fixed in the libsuricata806-8.0.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11307-1 kubevirt1.8-container-disk-1.8.4-1.1 on GA media

These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11305-1 containerized-data-importer1.65-api-1.65.0-2.1 on GA media

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21368-1 Security update for cyrus-imapd

This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: - Update to 3.8.7 bugfix release - CVE-2026-47081: XAPPLEPUSHSERVICE folder existence oracle and push hijack bsc1271617 - CVE-2026-47083: ESEARCH cross-user content oracle bsc1271619 - CVE-2026-47082: Vacation "fcc"...

OPENSUSE-SU-2026:21367-1 Security update for lux

This update for lux fixes the following issues: Changes in lux: - CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506: Issues when parsing HTML files bsc1267110 - CVE-2024-45338: Denial of service due to non-linear parsing of case-insensitive content bsc1235304 -...