OPENSUSE-SU-2025:15812-1 libpoppler-cpp2-25.09.1-4.1 on GA media

These are all security issues fixed in the libpoppler-cpp2-25.09.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15808-1 apache2-2.4.66-1.1 on GA media

These are all security issues fixed in the apache2-2.4.66-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:20148-1 Security update for openexr

This update for openexr fixes the following issues: Changes in openexr: - CVE-2025-12495: Fixed a file parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability bsc1253714 - CVE-2025-12839: Fixed a file parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability bsc1253715...

OPENSUSE-SU-2025:20153-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-64459: Fixed a potential SQL injection via connector keyword argument in QuerySet and Q objects bsc1252926 - CVE-2025-13372,CVE-2025-64460: Fixed Denial of Service in 'django.core.serializers.xmlserializer.getInnerText' bsc12544...

OPENSUSE-SU-2025:15806-1 python311-Django4-4.2.27-1.1 on GA media

These are all security issues fixed in the python311-Django4-4.2.27-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15803-1 krb5-1.22.1-1.1 on GA media

These are all security issues fixed in the krb5-1.22.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15805-1 python311-Django-5.2.9-1.1 on GA media

These are all security issues fixed in the python311-Django-5.2.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15807-1 regclient-0.11.1-1.1 on GA media

These are all security issues fixed in the regclient-0.11.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15804-1 nvidia-open-driver-G07-signed-check-590.44.01-1.1 on GA media

These are all security issues fixed in the nvidia-open-driver-G07-signed-check-590.44.01-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15800-1 kdeconnect-kde-25.11.90-1.1 on GA media

These are all security issues fixed in the kdeconnect-kde-25.11.90-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15801-1 libpng16-16-1.6.52-1.1 on GA media

These are all security issues fixed in the libpng16-16-1.6.52-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15802-1 corepack24-24.11.1-2.1 on GA media

These are all security issues fixed in the corepack24-24.11.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15798-1 rhino-1.7.15.1-1.1 on GA media

These are all security issues fixed in the rhino-1.7.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15799-1 libwireshark19-4.6.2-1.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:20143-1 Security update for git-bug

This update for git-bug fixes the following issues: Changes in git-bug: - Revendor to include fixed version of depending libraries: - GO-2025-4116 CVE-2025-47913, bsc1253506 upgrade golang.org/x/crypto to v0.43.0 - GO-2025-3900 GHSA-2464-8j7c-4cjm upgrade github.com/go-viper/mapstructure/v2 to...

OPENSUSE-SU-2025:20138-1 Security update for act

This update for act fixes the following issues: - CVE-2025-47913: Prevent panic in embedded golang.org/x/crypto/ssh/agent client when receiving unexpected message types for key listing or signing requests boo1253608...

OPENSUSE-SU-2025:15797-1 libpng12-0-1.2.59-4.1 on GA media

These are all security issues fixed in the libpng12-0-1.2.59-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15796-1 go1.24-1.24.11-1.1 on GA media

These are all security issues fixed in the go1.24-1.24.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025-20135-1 Security update for mozjs128

This update for mozjs128 fixes the following issues: - Update to version 128.14.0 bsc1248162: + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component + CVE-2025-9181: Uninitialized memo...

OPENSUSE-SU-2025:20135-1 Security update for mozjs128

This update for mozjs128 fixes the following issues: - Update to version 128.14.0 bsc1248162: + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component + CVE-2025-9181: Uninitialized memo...

OPENSUSE-SU-2025:15794-1 chromedriver-143.0.7499.40-2.1 on GA media

These are all security issues fixed in the chromedriver-143.0.7499.40-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15795-1 go1.25-1.25.5-1.1 on GA media

These are all security issues fixed in the go1.25-1.25.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:20133-1 Security update for python-cbor2

This update for python-cbor2 fixes the following issues: - CVE-2025-64076: Fixed bug in decodedefinitelongstring that causes incorrect chunk length calculation bsc1253746. Already fixed in release 5.6.3: - CVE-2024-26134: Fixed potential crash when hashing a CBORTag bsc1220096...

OPENSUSE-SU-2025:20132-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...

OPENSUSE-SU-2025:15793-1 gegl-0.4.64-3.1 on GA media

These are all security issues fixed in the gegl-0.4.64-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15792-1 python39-3.9.24-2.1 on GA media

These are all security issues fixed in the python39-3.9.24-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15790-1 python-mistralclient-doc-6.1.0-1.1 on GA media

These are all security issues fixed in the python-mistralclient-doc-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15789-1 libecpg6-18.1-1.1 on GA media

These are all security issues fixed in the libecpg6-18.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15791-1 python315-3.15.0~a1-2.1 on GA media

These are all security issues fixed in the python315-3.15.0a1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15788-1 lightdm-kde-greeter-6.0.5-1.1 on GA media

These are all security issues fixed in the lightdm-kde-greeter-6.0.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:20125-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.17+10 October 2025 CPU: - CVE-2025-53066: Fixed enhance path factories bsc1252417. - CVE-2025-53057: Fixed enhance certificate handling bsc1252414. Other bug fixes: - Do not embed rebuild counter bsc12468...

OPENSUSE-SU-2025:20123-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 October 2025 CPU: - CVE-2025-53066: Fixed enhance path factories bsc1252417. - CVE-2025-61748: Fixed enhance string handling bsc1252418. - CVE-2025-53057: Fixed enhance certificate handling bsc1252414...

OPENSUSE-SU-2025:20122-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used bsc1251198. - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used bsc1251199...

OPENSUSE-SU-2025:15787-1 python311-salt-3006.0-52.1 on GA media

These are all security issues fixed in the python311-salt-3006.0-52.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15785-1 postgresql16-16.11-1.1 on GA media

These are all security issues fixed in the postgresql16-16.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15786-1 postgresql17-17.7-1.1 on GA media

These are all security issues fixed in the postgresql17-17.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15784-1 postgresql15-15.15-1.1 on GA media

These are all security issues fixed in the postgresql15-15.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15783-1 postgresql14-14.20-1.1 on GA media

These are all security issues fixed in the postgresql14-14.20-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15781-1 libpng16-16-1.6.51-1.1 on GA media

These are all security issues fixed in the libpng16-16-1.6.51-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15780-1 libcoap-devel-4.3.5a-1.1 on GA media

These are all security issues fixed in the libcoap-devel-4.3.5a-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15782-1 postgresql13-13.23-1.1 on GA media

These are all security issues fixed in the postgresql13-13.23-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15779-1 helm3-3.19.2-1.1 on GA media

These are all security issues fixed in the helm3-3.19.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025-20113-1 Security update for dovecot24

This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove proxyalways field. - config: Change settings history parsing to use python3. - doveadm: Print...

OPENSUSE-SU-2025:20113-1 Security update for dovecot24

This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled bsc1252839 - Changes - auth: Remove proxyalways field. - config: Change settings history parsing to use python3. - doveadm: Print...

OPENSUSE-SU-2025:20114-1 Security update for himmelblau

This update for himmelblau fixes the following issues: - Update to version 0.9.23+git.0.9776141: CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation bsc1250687 depsrust: bump the all-cargo-updates group CVE-2025-58160: tracing-subscriber: Fixed log pollution...

OPENSUSE-SU-2025-20114-1 Security update for himmelblau

This update for himmelblau fixes the following issues: - Update to version 0.9.23+git.0.9776141: CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation bsc1250687 depsrust: bump the all-cargo-updates group CVE-2025-58160: tracing-subscriber: Fixed log pollution...

OPENSUSE-SU-2025:20106-1 Security update for tomcat11

This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled bsc1252753. - CVE-2025-55754: Fixed Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomc...

OPENSUSE-SU-2025:20116-1 Security update for rnp

This update for rnp fixes the following issues: - update to 0.18.1: CVE-2025-13470: PKESK public-key encrypted session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only boo1253957, CVE-2025-13402...

OPENSUSE-SU-2025:20118-1 Security update for gitea-tea

This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.11.1: 61d4e57 Fix Pr Create crash 823 4f33146 add test for matching logins 820 08b8398 Update README.md 819 - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by html.ParseFragment when...

OPENSUSE-SU-2025:20119-1 Security update for tcpreplay

This update for tcpreplay fixes the following issues: - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket support - tcpreplay -w write into a pcap file - tcpreplay --fixhdrlen - --include and --exclude options -...