OPENSUSE-SU-2026:20397-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap bsc1252337...

OPENSUSE-SU-2026:10394-1 python313-3.13.12-2.1 on GA media

These are all security issues fixed in the python313-3.13.12-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10391-1 GraphicsMagick-1.3.46-3.1 on GA media

These are all security issues fixed in the GraphicsMagick-1.3.46-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10395-1 qemu-10.2.2-1.1 on GA media

These are all security issues fixed in the qemu-10.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10392-1 python311-pyOpenSSL-26.0.0-1.1 on GA media

These are all security issues fixed in the python311-pyOpenSSL-26.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10393-1 python311-pyasn1-0.6.3-1.1 on GA media

These are all security issues fixed in the python311-pyasn1-0.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20394-1 Security update for mumble

This update for mumble fixes the following issues: Changes in mumble: - CVE-2025-71264: opus incorrect size calculations allow for an out-of-bounds array access and can lead to a client crash boo1259721 - Update to version 1.5.857: fixes for undesired ACL behavior Client bug fixes: UI, memory...

OPENSUSE-SU-2026:20390-1 Security update for protobuf

This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError bsc1244663. - CVE-2026-0994: Fixed google.protobuf.A...

OPENSUSE-SU-2026:20392-1 Security update for python-Authlib

This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-27962: JWS deserializecompact allows for signature bypass by accepting user-controlled embedded JWK as verification key bsc1259738 - CVE-2026-28490: cryptographic padding oracle in JWE RSA15 key...

OPENSUSE-SU-2026:20393-1 Security update for python-simpleeval

This update for python-simpleeval fixes the following issues: Changes in python-simpleeval: - CVE-2026-32640: Objects including modules can leak dangerous modules through to direct access inside the sandbox bsc1259685...

OPENSUSE-SU-2026:20388-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - Update to version 17.9. bsc1258754 - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector bsc1258008 - CVE-2026-2004: Harden selectivity estimators against being attached to operators that accept unexpected data type...

OPENSUSE-SU-2026:20387-1 Security update for busybox

This update for busybox fixes the following issues: Changes in busybox: - CVE-2026-26157: Fixed arbitrary file overwrite and potential code execution via incomplete path sanitization. bsc1258163 - CVE-2026-26158: Fixed arbitrary file modification and privilege escalation via unvalidated tar archi...

OPENSUSE-SU-2026:20391-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.8.1 ESR Add mail.openpgp.loaduntestedgpgmeversion to load untested GPGME version - Mozilla Thunderbird 140.8.0 ESR MFSA 2026-17 boo1258568 CVE-2026-2757 bmo2001637 Incorrect...

OPENSUSE-SU-2026:20386-1 Security update for cosign

This update for cosign fixes the following issues: Update to version 3.0.5: - CVE-2026-24122: Fixed improper validation of certificates that outlive expired CA certificates bsc1258542 - CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize receiver in MultiScalarMult can produce...

OPENSUSE-SU-2026:20385-1 Security update for libjxl

This update for libjxl fixes the following issues: Update to libjxl 0.11.2: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory bsc1258090. - CVE-2026-1837: a specially crafted file can cause the decoder to write pixel data to...

OPENSUSE-SU-2026:20384-1 Security update for libsoup

This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion bsc1252555. - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy bsc1254876. - CVE-2025-32049:...

OPENSUSE-SU-2026:20383-1 Security update for net-snmp

This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow bsc1255491...

OPENSUSE-SU-2026:20131-1 Security update for postgresql17 and postgresql18

This update for postgresql17 and postgresql18 fixes the following issues: Changes in postgresql17, postgresql18: Update to 17.7: https://www.postgresql.org/about/news/p-3171/ https://www.postgresql.org/docs/release/17.7/ bsc1253332, CVE-2025-12817: Missing check for CREATE privileges on the schem...

OPENSUSE-SU-2026:10389-1 python311-salt-3006.0-56.1 on GA media

These are all security issues fixed in the python311-salt-3006.0-56.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10390-1 tempo-cli-2.10.3-1.1 on GA media

These are all security issues fixed in the tempo-cli-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10386-1 ImageMagick-7.1.2.17-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.17-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10388-1 mumble-1.5.857-2.1 on GA media

These are all security issues fixed in the mumble-1.5.857-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10387-1 kernel-devel-6.19.8-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.19.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20380-1 Security update for snpguest

This update for snpguest fixes the following issues: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257927. - Update to version 0.10.0 bsc1257877: chore: updating tool version to 0.10.0 refactorcerts: remove redundant branch in...

OPENSUSE-SU-2026:20375-1 Security update for python-PyPDF2

This update for python-PyPDF2 fixes the following issues: Changes in python-PyPDF2: - CVE-2025-31826: Fixed denial of service due to excessive memory consumption via crafted PDF bsc1259508...

OPENSUSE-SU-2026:20378-1 Security update for libpng16

This update for libpng16 fixes the following issues: - CVE-2026-25646: Heap buffer overflow vulnerability in pngsetdither/pngsetquantize bsc1258020 - CVE-2025-28162: Fixed a memory leaks when running pngimage. bsc1257364 - CVE-2025-28164: Fixed a memory leaks when running pngimage. bsc1257365...

OPENSUSE-SU-2026:20374-1 Security update for krb5-appl

This update for krb5-appl fixes the following issues: Changes in krb5-appl: - CVE-2026-32746: Remote Pre-Auth Buffer Overflow in GNU Inetutils telnetd LINEMODE bsc1259691...

OPENSUSE-SU-2026:20373-1 Security update for python-Django

This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-25674: Fixed race condition which can lead to potential incorrect permissions on newly created file system objects bsc1259142...

OPENSUSE-SU-2026:20377-1 Security update for python-maturin

This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257918...

OPENSUSE-SU-2026:20368-1 Security update for ocaml

This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock can lead to arbitrary code execution bsc1258992...

OPENSUSE-SU-2026:20372-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.80: CVE-2026-3909: Out of bounds write in Skia boo1259659 - Chromium 146.0.7680.75 released 2026-03-12 boo1259648 CVE-2026-3910: Inappropriate implementation in V8. - Chromium 146.0.7680.71 released...

OPENSUSE-SU-2026:10384-1 cargo1.94-1.94.0-2.1 on GA media

These are all security issues fixed in the cargo1.94-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10382-1 cargo1.92-1.92.0-2.1 on GA media

These are all security issues fixed in the cargo1.92-1.92.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10383-1 cargo1.93-1.93.0-3.1 on GA media

These are all security issues fixed in the cargo1.93-1.93.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10380-1 python311-uv-0.10.11-1.1 on GA media

These are all security issues fixed in the python311-uv-0.10.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10379-1 python311-CairoSVG-2.9.0-1.1 on GA media

These are all security issues fixed in the python311-CairoSVG-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10378-1 ovmf-202602-5.1 on GA media

These are all security issues fixed in the ovmf-202602-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10385-1 traefik-3.6.10-2.1 on GA media

These are all security issues fixed in the traefik-3.6.10-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10381-1 python311-3.11.15-2.1 on GA media

These are all security issues fixed in the python311-3.11.15-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20365-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.8.0 ESR bsc1258568 - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free in the JavaScript: GC component - CVE-2026-2759: Incorrect...

OPENSUSE-SU-2026:20366-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2025-58181: Fixed unbounded memory consumption. bsc1253904 - CVE-2025-30204: Fixed a bug in jwt-go which allows excessive memory allocation during header parsing. bsc1240513...

OPENSUSE-SU-2026:20364-1 Security update for rust-keylime

This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. bsc1257908...

OPENSUSE-SU-2026:10377-1 python312-3.12.13-2.1 on GA media

These are all security issues fixed in the python312-3.12.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10376-1 chromedriver-146.0.7680.80-1.1 on GA media

These are all security issues fixed in the chromedriver-146.0.7680.80-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10375-1 coturn-4.9.0-1.1 on GA media

These are all security issues fixed in the coturn-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10372-1 python311-black-26.3.1-1.1 on GA media

These are all security issues fixed in the python311-black-26.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10373-1 python311-simpleeval-1.0.5-1.1 on GA media

These are all security issues fixed in the python311-simpleeval-1.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10374-1 python311-tornado6-6.5.5-1.1 on GA media

These are all security issues fixed in the python311-tornado6-6.5.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10371-1 curl-8.19.0-1.1 on GA media

These are all security issues fixed in the curl-8.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20357-1 Security update for qemu

This update for qemu fixes the following issues: - Update to version 10.0.8 - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. bsc1255400 - CVE-2026-0665: Fixed PIRQ bounds check in xenphysdevmappirq. bsc1256484...