OPENSUSE-SU-2026:20251-1 Security update for cockpit-repos

This update for cockpit-repos fixes the following issues: Update to version 4.7. Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257325. - CVE-2025-64718: js-yaml prototype pollution in merge bsc1255425...

OPENSUSE-SU-2026:20249-1 Security update for docker

This update for docker fixes the following issues: - CVE-2025-58181: not validating the number of mechanisms can cause unlimited memory consumption bsc1253904...

OPENSUSE-SU-2026:10223-1 python313-3.13.12-1.1 on GA media

These are all security issues fixed in the python313-3.13.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10220-1 istioctl-1.28.4-1.1 on GA media

These are all security issues fixed in the istioctl-1.28.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10221-1 python311-3.11.14-4.1 on GA media

These are all security issues fixed in the python311-3.11.14-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10222-1 python312-3.12.12-5.1 on GA media

These are all security issues fixed in the python312-3.12.12-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10218-1 MozillaThunderbird-140.7.2-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10224-1 rclone-1.73.1-1.1 on GA media

These are all security issues fixed in the rclone-1.73.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10219-1 dnsdist-2.0.2-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20244-1 Security update for cockpit-machines, cockpit

This update for cockpit-machines, cockpit fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. bsc1257324 Changes in cockpit-machines: - Update to 346 346 - Performance improvements - Translation updates 345 - New virtual machines don't get SPI...

OPENSUSE-SU-2026:20245-1 Security update for wicked2nm

This update for wicked2nm fixes the following issues: - Update to version 1.4.1 - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257908...

OPENSUSE-SU-2026:20239-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: - CVE-2026-25547: Fixed an unbounded brace range expansion leading to excessive CPU and memory consumption. bsc1257841 - CVE-2026-1615: Fixed arbitrary code injection due to unsafe evaluation of user-supplied JSON Pat...

OPENSUSE-SU-2026:10217-1 traefik-3.6.8-1.1 on GA media

These are all security issues fixed in the traefik-3.6.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10211-1 azure-cli-core-2.83.0-2.1 on GA media

These are all security issues fixed in the azure-cli-core-2.83.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10214-1 mupdf-1.27.1-1.1 on GA media

These are all security issues fixed in the mupdf-1.27.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10216-1 python311-asgiref-3.11.1-1.1 on GA media

These are all security issues fixed in the python311-asgiref-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10212-1 firefox-esr-140.7.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10213-1 libxml2-16-2.14.5-4.1 on GA media

These are all security issues fixed in the libxml2-16-2.14.5-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10215-1 owntone-29.0-2.1 on GA media

These are all security issues fixed in the owntone-29.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10208-1 libsoup-3_0-0-3.6.5-13.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.5-13.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10209-1 libsoup-2_4-1-2.74.3-16.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-16.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10207-1 frr-10.2.1-4.1 on GA media

These are all security issues fixed in the frr-10.2.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10210-1 python311-pip-26.0.1-1.1 on GA media

These are all security issues fixed in the python311-pip-26.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20236-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: Update to 22.22.0: - CVE-2025-55130: file system permissions bypass via crafted symlinks bsc1256569. - CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from previous operations and lead to exposure ...

OPENSUSE-SU-2026:20235-1 Security update for fontforge

This update for fontforge fixes the following issues: Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing bsc1256013. - CVE-2025-15269: remote code execution via use-after-free in SFD file parsing bsc1256032...

OPENSUSE-SU-2026:10202-1 himmelblau-2.3.5+git0.9dd526c-1.1 on GA media

These are all security issues fixed in the himmelblau-2.3.5+git0.9dd526c-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10206-1 python314-3.14.3-1.1 on GA media

These are all security issues fixed in the python314-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10203-1 libssh-config-0.11.4-1.1 on GA media

These are all security issues fixed in the libssh-config-0.11.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10205-1 python311-cryptography-46.0.5-1.1 on GA media

These are all security issues fixed in the python311-cryptography-46.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10204-1 openjfx-17.0.18.0-1.1 on GA media

These are all security issues fixed in the openjfx-17.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10201-1 chromedriver-145.0.7632.45-1.1 on GA media

These are all security issues fixed in the chromedriver-145.0.7632.45-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20233-1 Security update for openCryptoki

This update for openCryptoki fixes the following issues: Upgrade openCryptoki to 3.26 jscPED-14609 Security fixes: - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-service bsc1256673. - CVE-2026-23893: Privilege Escalation or Data Exposure vi...

OPENSUSE-SU-2026:20227-1 Security update for patch

This update for patch fixes the following issues: - CVE-2021-45261: invalid pointer via anotherhunk function can cause a denial-of-service bsc1194037...

OPENSUSE-SU-2026:20798-1 Security update for trivy

This update for trivy fixes the following issues: Update to version 0.68.2: Security fixes: - CVE-2024-3817: hashicorp/go-getter: argument injection when fetching remote default git branches bsc1227010. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause...

OPENSUSE-SU-2026:20219-1 Security update for htmldoc

This update for htmldoc fixes the following issues: Changes in htmldoc: - CVE-2024-46478: Fixed buffer overflow when handling tabs through the parsepre function bsc1232380. - version update to 1.9.23: Fixed a regression in list handling that caused a crash for empty list items Issue 553 Fixed a...

OPENSUSE-SU-2026:20220-1 Security update for go1.24

This update for go1.24 fixes the following issues: Update to version 1.24.13. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling bsc1257692. - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session...

OPENSUSE-SU-2026:20214-1 Security update for go1.25

This update for go1.25 fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling bsc1257692. - CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session...

OPENSUSE-SU-2026:20206-1 Security update for kepler

This update for kepler fixes the following issues: Update to version 0.11.3. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents bsc1251427. - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption...

OPENSUSE-SU-2026:10200-1 python310-3.10.19-4.1 on GA media

These are all security issues fixed in the python310-3.10.19-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10194-1 cargo-audit-advisory-db-20260213-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20260213-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10195-1 gimp-3.0.8-2.1 on GA media

These are all security issues fixed in the gimp-3.0.8-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10199-1 python311-pymssql-2.3.12-1.1 on GA media

These are all security issues fixed in the python311-pymssql-2.3.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10198-1 python311-Pillow-12.1.1-1.1 on GA media

These are all security issues fixed in the python311-Pillow-12.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10196-1 matrix-synapse-1.147.1-1.1 on GA media

These are all security issues fixed in the matrix-synapse-1.147.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10197-1 libecpg6-18.2-1.1 on GA media

These are all security issues fixed in the libecpg6-18.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20205-1 Security update for rust1.93

This update for rust1.93 fixes the following issues: Rust is shipped in 1.93.0 version. Please see https://github.com/rust-lang/rust/releases/tag/1.93.0 for changes...

OPENSUSE-SU-2026:20204-1 Security update for python-aiohttp, python-Brotli

This update for python-aiohttp, python-Brotli fixes the following issues: Changes in python-aiohttp: - CVE-2025-69228: Fixed denial of service through large payloads bsc1256022. - CVE-2025-69226: Fixed brute-force leak of internal static file path components bsc1256020. - CVE-2025-69224: Fixed...

OPENSUSE-SU-2026:10185-1 cargo-c-0.10.15-2.1 on GA media

These are all security issues fixed in the cargo-c-0.10.15-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10183-1 build-20260202-2.1 on GA media

These are all security issues fixed in the build-20260202-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10189-1 libowncloudsync-devel-6.0.3-1.1 on GA media

These are all security issues fixed in the libowncloudsync-devel-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed...