OPENSUSE-SU-2026:20618-1 Security update for haproxy

This update for haproxy fixes the following issues: Security issue: - CVE-2026-33555: Request smuggling via HTTP/3 parser desynchronization bsc1262103. - bug in SLZ compression bsc1261626...

OPENSUSE-SU-2026:20615-1 Security update for qt6-translations

This update for qt6-translations fixes the following issues: Added qt6-translations...

OPENSUSE-SU-2026:10606-1 frr-10.5.1-3.1 on GA media

These are all security issues fixed in the frr-10.5.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10608-1 libXpm-devel-3.5.18-2.1 on GA media

These are all security issues fixed in the libXpm-devel-3.5.18-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10605-1 dnsmasq-2.92-3.1 on GA media

These are all security issues fixed in the dnsmasq-2.92-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10607-1 golang-github-prometheus-prometheus-3.11.2-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-3.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10609-1 libruby4_0-4_0-4.0.3-1.1 on GA media

These are all security issues fixed in the libruby40-40-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20617-1 Security update for python-Pillow

This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks bsc1262184...

OPENSUSE-SU-2026:20606-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-32259: stack out-of-bounds write due to a memory allocation failure in the sixel encoder can lead to a crash bsc1259612. - CVE-2026-32636: out-of-bounds write of a single zero byte due to bug the NewXMLTree method can lead to deni...

OPENSUSE-SU-2026:20611-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OCSP checks sometimes soft-fail...

OPENSUSE-SU-2026:20612-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.54 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...

OPENSUSE-SU-2026:20610-1 Security update for librsvg

This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257922...

OPENSUSE-SU-2026:20607-1 Security update for erlang

This update for erlang fixes the following issues: Security issues fixed: - CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote arbitrary reads/writes bsc1258663. - CVE-2026-23941: improper handling of duplicate Content-Length headers in...

OPENSUSE-SU-2026:20608-1 Security update for fontforge

This update for fontforge fixes the following issues: - CVE-2025-15270: lack of proper validation of user-supplied data when parsing SFD files can lead to OOB writes and arbitrary code execution bsc1256031...

OPENSUSE-SU-2026:20609-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: Update to version 20250506.01 bsc1243254, bsc1243505. Security issues fixed: - CVE-2024-45337: golang.org/x/crypto/ssh: misuse of the ServerConfig.PublicKeyCallback callback can lead to authorization bypass in applications bsc1234563....

OPENSUSE-SU-2026:20613-1 Security update for libcap

This update for libcap fixes the following issues: - CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in capsetfile bsc1261809...

OPENSUSE-SU-2026:20605-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2026-34379: misaligned memory write during file decoding can cause a denial of service bsc1261621. - CVE-2026-34380: lack of proper check can lead to integer overflow in image decoding bsc1261622. - CVE-2026-34588: crafted EXR file can lea...

OPENSUSE-SU-2026:20603-1 Security update for ignition

This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header bsc1260251...

OPENSUSE-SU-2026:20604-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of setuid, setgid or setgroups calls during a mailer privilege drop allows for local privilege escalation bsc1261420...

OPENSUSE-SU-2026:20601-1 Security update for giflib

This update for giflib fixes the following issue: - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption bsc1259502...

OPENSUSE-SU-2026:10603-1 jupyter-nbconvert-7.17.1-1.1 on GA media

These are all security issues fixed in the jupyter-nbconvert-7.17.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10602-1 glances-common-4.5.4-1.1 on GA media

These are all security issues fixed in the glances-common-4.5.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10600-1 csync2-2.0+git.1600444747.83b3644-3.1 on GA media

These are all security issues fixed in the csync2-2.0+git.1600444747.83b3644-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10604-1 ruby4.0-rubygem-rack-session-2.1.2-1.1 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rack-session-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10599-1 cacti-1.2.30+git306.82d5aef5-1.1 on GA media

These are all security issues fixed in the cacti-1.2.30+git306.82d5aef5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10601-1 grafana-11.6.14+security01-1.1 on GA media

These are all security issues fixed in the grafana-11.6.14+security01-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20595-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension bsc1261850. - CVE-2026-25854: Occasionally open redirect bsc1261851. - CVE-2026-29129: TLS cipher order is not preserved bsc1261852. - CVE-2026-29145: OC...

OPENSUSE-SU-2026:20593-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability bsc1261957...

OPENSUSE-SU-2026:20591-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: out-of-bounds write of a zero byte in the X11 display interaction path can lead to a crash bsc1260874...

OPENSUSE-SU-2026:20592-1 Security update for ghostscript

This update for ghostscript fixes the following issues: Update to version 10.06.0. Security issues fixed: - CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocrline8 bsc1250355. - CVE-2025-59799: a large size value can cause a stack-based buffer overflow in...

OPENSUSE-SU-2026:20598-1 Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2026-40260: crafted PDF can lead to large memory usage bsc1262284...

OPENSUSE-SU-2026:20590-1 Security update for gnome-remote-desktop

This update for gnome-remote-desktop fixes the following issues: Update to version 48.3. Security issues fixed: - CVE-2025-5024: an unauthenticated attacker can exhaust system resources bsc1244053. Other updates and bugfixes: - Version update to 48.3: + Fix image corruption on some NVIDIA GPUs. -...

OPENSUSE-SU-2026:10586-1 ImageMagick-7.1.2.19-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.19-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10593-1 openCryptoki-3.26.0-6.1 on GA media

These are all security issues fixed in the openCryptoki-3.26.0-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10588-1 capnproto-1.4.0-2.1 on GA media

These are all security issues fixed in the capnproto-1.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10595-1 php8-8.5.5-1.1 on GA media

These are all security issues fixed in the php8-8.5.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10594-1 openbao-2.5.3-1.1 on GA media

These are all security issues fixed in the openbao-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10598-1 libtree-sitter0_26-0.26.8-1.1 on GA media

These are all security issues fixed in the libtree-sitter026-0.26.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10587-1 calibre-9.7.0-1.1 on GA media

These are all security issues fixed in the calibre-9.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10597-1 python311-python-multipart-0.0.26-1.1 on GA media

These are all security issues fixed in the python311-python-multipart-0.0.26-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10596-1 python-lxml-doc-6.1.0-1.1 on GA media

These are all security issues fixed in the python-lxml-doc-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10585-1 GraphicsMagick-1.3.46-6.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.46-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10590-1 flatpak-builder-1.4.8-1.1 on GA media

These are all security issues fixed in the flatpak-builder-1.4.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10592-1 libcoap-devel-4.3.5b-1.1 on GA media

These are all security issues fixed in the libcoap-devel-4.3.5b-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10591-1 kissfft-131.2.0-2.1 on GA media

These are all security issues fixed in the kissfft-131.2.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10589-1 cups-2.4.17-1.1 on GA media

These are all security issues fixed in the cups-2.4.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20589-1 Security update for tor

This update for tor fixes the following issues: Changes in tor: - update to 0.4.8.23: Fix a memory compare using the wrong length. This could lead to a remote crash when using the conflux subsystem TROVE-2026-004, boo1262302 Fix a series of defense in depth security issues found across the codeba...

OPENSUSE-SU-2026:20572-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow bsc1252073. - CVE-2025-40253: s390/ctcm: Fix double-kfree bsc1255084. -...

OPENSUSE-SU-2026:20574-1 Security update for libraw

This update for libraw fixes the following issues: - CVE-2026-5342: crafted TIFF/NEF file can cause an out-of-bounds read bsc1261499. - CVE-2026-20884: integer overflow vulnerability in the deflatedngloadraw bsc1261671. - CVE-2026-20889: heap-based buffer overflow vulnerability in the...

OPENSUSE-SU-2026:20479-1 Security update for clamav

This update for clamav fixes the following issues: Update to clamav 1.5.2: Security issue: - CVE-2026-20031: improper error handling in the HTML CSS module when splitting UTF-8 strings can lead to denial of service conditions via a crafted HTML file bsc1259207. Non security issue: - Support...