OPENSUSE-SU-2026:21887-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

OPENSUSE-SU-2026:21886-1 Security update for mcphost

This update for mcphost fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279274. - CVE-2026-84304: google.golang.org/grpc: heap memory...

OPENSUSE-SU-2026:21884-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library bsc1278681. - CVE-2026-71556: github.com/go-git/go-git/v5: arbitrary file read/write via symbolic lin...

OPENSUSE-SU-2026:21883-1 Security update for freeipmi

This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem bsc1278722. - CVE-2026-85506: Arbitrary code execution via...

OPENSUSE-SU-2026:21882-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

OPENSUSE-SU-2026:11820-1 helm-4.3.0-1.1 on GA media

These are all security issues fixed in the helm-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11823-1 libsoup-3_0-0-3.6.6-9.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11819-1 fake-gcs-server-1.56.1-1.1 on GA media

These are all security issues fixed in the fake-gcs-server-1.56.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11821-1 kbfs-6.6.3-5.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-5.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11825-1 libipa_hbac-devel-2.13.1-3.1 on GA media

These are all security issues fixed in the libipahbac-devel-2.13.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11824-1 python313-PyMuPDF-1.28.2-1.1 on GA media

These are all security issues fixed in the python313-PyMuPDF-1.28.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11822-1 kyverno-1.19.1-1.1 on GA media

These are all security issues fixed in the kyverno-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21878-1 Security update for ruby3.4

This update for ruby3.4 fixes the following issues: - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. - CVE-2026-27820: insufficient checks in zstreambufferungets can lead to a buffer overflow bsc1259239. - CVE-2026-41316: erb: @init...

OPENSUSE-SU-2026:21918-1 Security update for warewulf4

This update for warewulf4 fixes the following issues: Changes in warewulf4: - updating to v4.7.1 with the following changes wwctl power no longer falls back to the local BMC for nodes with no ipmi: ipaddr:, which could power off the Warewulf server itself wwclient is built with GOAMD64=v1 and no...

OPENSUSE-SU-2026:21877-1 Security update for ffmpeg-7

This update for ffmpeg-7 fixes the following issues: - CVE-2023-6602: HLS Force TTY Demuxer bsc1220546. - CVE-2023-6604: HLS XBIN Demuxer DoS Amplification bsc1220549. - CVE-2024-35367: FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dspaltivec.c, static const vecs8...

OPENSUSE-SU-2026:21879-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118. - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ss...

OPENSUSE-SU-2026:21875-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

OPENSUSE-SU-2026:21874-1 Security update for python-GitPython

This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in Repo.clonefrom URL via os.path.expandvars bsc1273357. - CVE-2026-67323: unguarded Git options passed as keyword arguments in Repo.archive and git.lsremote allow for command injectio...

OPENSUSE-SU-2026:21913-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 153.0.8010.47 boo1280687: CVE-2026-91726: Out of bounds read in WebGL CVE-2026-91721: Use after free in Internals CVE-2026-91749: Use after free in Workers CVE-2026-91724: Use after free in Input CVE-2026-91728:...

OPENSUSE-SU-2026:11816-1 python313-weasyprint-70.0-1.1 on GA media

These are all security issues fixed in the python313-weasyprint-70.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11815-1 python313-ansi2html-1.9.5-1.1 on GA media

These are all security issues fixed in the python313-ansi2html-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11814-1 jsch-2.28.7-1.1 on GA media

These are all security issues fixed in the jsch-2.28.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11818-1 shadowsocks-rust-1.25.0-1.1 on GA media

These are all security issues fixed in the shadowsocks-rust-1.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11811-1 amazon-ssm-agent-3.3.5390.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.5390.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11817-1 python313-3.13.15-1.1 on GA media

These are all security issues fixed in the python313-3.13.15-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11813-1 cloudflared-2026.9.1-1.1 on GA media

These are all security issues fixed in the cloudflared-2026.9.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11812-1 chromedriver-153.0.8010.47-1.1 on GA media

These are all security issues fixed in the chromedriver-153.0.8010.47-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21873-1 Security update for opensc

This update for opensc fixes the following issues: - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation bsc1267246. - CVE-2026-40528: stack and heap buffer overrun in the dokeyvalue function due to missing length check allows for memory...

OPENSUSE-SU-2026:21915-1 Security update for budgie-backgrounds

This update for budgie-backgrounds fixes the following issues: Changes in budgie-backgrounds: - Convert images to JXL, add submission format policy, drop jhead dep because of CVE-2025-44906 bsc1243819...

OPENSUSE-SU-2026:21872-1 Security update for memcached

This update for memcached fixes the following issue: - heap buffer overflows in default-config LRU-crawler metadump and proxy backend-response length truncation bsc1270716...

OPENSUSE-SU-2026:21871-1 Security update for libsoup

This update for libsoup fixes the following issues - CVE-2026-0716: out-of-bounds read when processing a crafted unmasked frame with a payload length near UINT64MAX sent by a WebSocket server bsc1256418...

OPENSUSE-SU-2026:11809-1 valkey-9.1.2-2.1 on GA media

These are all security issues fixed in the valkey-9.1.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11804-1 jetty-annotations-9.4.58-6.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-6.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11808-1 python313-pymongo-4.18.1-1.1 on GA media

These are all security issues fixed in the python313-pymongo-4.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11802-1 NetworkManager-applet-l2tp-1.52.6-1.1 on GA media

These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11806-1 kit-0.107.0-1.1 on GA media

These are all security issues fixed in the kit-0.107.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11805-1 kernel-devel-7.2.6-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11801-1 ImageMagick-7.1.2.31-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.31-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11810-1 warewulf4-4.7.1-1.1 on GA media

These are all security issues fixed in the warewulf4-4.7.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11807-1 nginx-1.31.6-1.1 on GA media

These are all security issues fixed in the nginx-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11803-1 alloy-1.19.2-1.1 on GA media

These are all security issues fixed in the alloy-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21870-1 Security update for openai-codex

This update for openai-codex fixes the following issues: Changes in openai-codex: Update to version 0.154.0: Experimental worktree support for isolated checkouts of new or forked sessions, with browse and resume Answer questions inline while Codex keeps working, keeping the main draft Vim R repla...

OPENSUSE-SU-2026:21869-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations bsc1277378 - CVE-2026-78475: unbounded variable-length stack allocations in the PIX loader can cause stack exhaustion...

OPENSUSE-SU-2026:21867-1 Security update for mkvtoolnix

This update for mkvtoolnix fixes the following issues: Changes in mkvtoolnix: - CVE-2026-90783: heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic boo1280126...

OPENSUSE-SU-2026:21865-1 Security update for mbedtls

This update for mbedtls fixes the following issues: Changes in mbedtls: - Update to version 3.6.7: CVE-2026-25832: TLS 1.3 client accepted HRR selecting unadvertised group boo1280186 Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was not advertised in the original ClientHe...

OPENSUSE-SU-2026:21863-1 Security update for live555

This update for live555 fixes the following issues: Changes in live555: - Update to version 2026.08.25: Fixed a bug in "VorbisAudioRTPSource" that could have caused a malicious SDP description to crash a RTP client. - update to 2026.08.14: Fixed a bug that could cause a problem with subclassed...

OPENSUSE-SU-2026:21866-1 Security update for chirp

This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memories with AM mode Unify Baofeng setting descriptions across drivers Add Yaesu FT5D uvb5: Fix Rever...

OPENSUSE-SU-2026:21864-1 Security update for mbedtls-2

This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - CVE-2025-52496: race condition in AESNI support detection, AES key disclosure / GCM forgery in multithreaded programs boo1245810 - CVE-2025-59438: padding oracle through timing of cipher error reporting boo1252454...

OPENSUSE-SU-2026:21856-1 Security update for rpm

This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: rpm-plugin-selinux if selinux-policy - harden ndb code bsc1269584 CVE-2026-44605 - split all plugins into subpackages this allows for an easy way to g...

OPENSUSE-SU-2026:21858-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: Chromium 153.0.8010.36 boo1279840: CVE-2026-87464: Use after free in WebGL CVE-2026-87488: Use after free in WebGL CVE-2026-87438: Out of bounds write in WebGL CVE-2026-87527: Buffer overflow in WebGL CVE-2026-87628: Use...