OPENSUSE-SU-2026:21950-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

OPENSUSE-SU-2026:21946-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

OPENSUSE-SU-2026:21945-1 Security update for expat

This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service bsc1262263. - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XM...

OPENSUSE-SU-2026:11887-1 libtesseract5-5.5.3-2.1 on GA media

These are all security issues fixed in the libtesseract5-5.5.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11884-1 pi-coding-agent-0.87.1-1.1 on GA media

These are all security issues fixed in the pi-coding-agent-0.87.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11883-1 pcapplusplus-devel-26.07-1.1 on GA media

These are all security issues fixed in the pcapplusplus-devel-26.07-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11885-1 libpoppler-cpp3-26.09.0-2.1 on GA media

These are all security issues fixed in the libpoppler-cpp3-26.09.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11886-1 python311-3.11.16-2.1 on GA media

These are all security issues fixed in the python311-3.11.16-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11878-1 jackson-dataformat-cbor-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-cbor-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11882-1 netty-4.1.138-1.1 on GA media

These are all security issues fixed in the netty-4.1.138-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11874-1 goose-1.51.0-1.1 on GA media

These are all security issues fixed in the goose-1.51.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11879-1 jackson-dataformat-csv-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-dataformat-csv-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11873-1 flatpak-1.18.3-1.1 on GA media

These are all security issues fixed in the flatpak-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11872-1 distribution-registry-3.1.1-8.1 on GA media

These are all security issues fixed in the distribution-registry-3.1.1-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11875-1 helm-4.3.0-3.1 on GA media

These are all security issues fixed in the helm-4.3.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11871-1 cosign-3.1.3-1.1 on GA media

These are all security issues fixed in the cosign-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11876-1 jackson-core-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-core-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11877-1 jackson-databind-2.18.11-1.1 on GA media

These are all security issues fixed in the jackson-databind-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11881-1 kubectl-cnpg-1.30.1-1.1 on GA media

These are all security issues fixed in the kubectl-cnpg-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11880-1 kernel-devel-7.2.7-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21939-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

OPENSUSE-SU-2026:21944-1 Security update for cjose

This update for cjose fixes the following issues: - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap-based buffer overflow bsc1279844. - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose ca...

OPENSUSE-SU-2026:21940-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. - CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k...

OPENSUSE-SU-2026:21938-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

OPENSUSE-SU-2026:21952-1 Security update for openSUSE-signkey-cert

This update for openSUSE-signkey-cert fixes the following issues: Adds the UEFI signing key of Leap 16.0. This needs to be imported via the MOK dialog on boot...

OPENSUSE-SU-2026:21953-1 Security update for python-asyncssh

This update for python-asyncssh fixes the following issues: Changes in python-asyncssh: - CVE-2026-62949: denial of service via infinite loop when processing zero-sized SSH packets bsc1280972...

OPENSUSE-SU-2026:21935-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078...

OPENSUSE-SU-2026:21954-1 Security update for osmo-iuh

This update for osmo-iuh fixes the following issues: Changes in osmo-iuh: - CVE-2026-75894: iuclient: reject oversized RANAP NAS-PDU boo1281607...

OPENSUSE-SU-2026:21933-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues: Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. - CVE-2026-41677: out-of-bounds read in PEM password callback when returning an oversized length in...

OPENSUSE-SU-2026:11854-1 ImageMagick-7.1.2.31-2.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.31-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11864-1 python-WebOb-doc-1.8.11-1.1 on GA media

These are all security issues fixed in the python-WebOb-doc-1.8.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11866-1 python313-soupsieve-2.9.2-1.1 on GA media

These are all security issues fixed in the python313-soupsieve-2.9.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11870-1 libblkid-devel-2.42.3-1.1 on GA media

These are all security issues fixed in the libblkid-devel-2.42.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11855-1 PackageKit-1.4.0-1.1 on GA media

These are all security issues fixed in the PackageKit-1.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11859-1 gdk-pixbuf-loader-libheif-1.23.5-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11863-1 perl-XS-Parse-Keyword-0.500.0-1.1 on GA media

These are all security issues fixed in the perl-XS-Parse-Keyword-0.500.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11856-1 ansible-lint-26.9.0-1.1 on GA media

These are all security issues fixed in the ansible-lint-26.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11860-1 libsoup-2_4-1-2.74.3-23.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-23.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11862-1 libp11-kit0-0.26.5-1.1 on GA media

These are all security issues fixed in the libp11-kit0-0.26.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11861-1 obs-service-cargo-7.2.2-3.1 on GA media

These are all security issues fixed in the obs-service-cargo-7.2.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11869-1 rsync-3.5.1-1.1 on GA media

These are all security issues fixed in the rsync-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11868-1 python314-3.14.7-2.1 on GA media

These are all security issues fixed in the python314-3.14.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11867-1 python313-vllm-0.30.0-1.1 on GA media

These are all security issues fixed in the python313-vllm-0.30.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11857-1 gitoxide-0.58.0-2.1 on GA media

These are all security issues fixed in the gitoxide-0.58.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11865-1 python313-sglang-0.5.20-1.1 on GA media

These are all security issues fixed in the python313-sglang-0.5.20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11858-1 hplip-3.26.6-1.1 on GA media

These are all security issues fixed in the hplip-3.26.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21929-1 Security update for cyrus-imapd

This update for cyrus-imapd fixes the following issues: Changes in cyrus-imapd: Update to 3.8.8 bugfix release: - CVE-2026-61907: JMAP snooze bypasses destination-mailbox ACL bsc1279908 - CVE-2026-61908: JMAP email-header blob ID out-of-bounds index bsc1279975 - CVE-2026-61909: CalDAV/CardDAV...

OPENSUSE-SU-2026:21910-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull...

OPENSUSE-SU-2026:21912-1 Security update for python-PyMuPDF

This update for python-PyMuPDF fixes the following issues: Changes in python-PyMuPDF: - CVE-2026-82035: a path traversal vulnerability in the font branch of extractobjects in src/main.py bsc1280486...

OPENSUSE-SU-2026:21911-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of Service via memory leak in MSL decoder bsc1279711. - CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetLis...