| SUSE-PackageHub-16.0-1869 |
moderate |
security |
2026-10-08 |
This update for libXpm fixes the following issue:
- CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
|
|
| SUSE-PackageHub-16.0-1868 |
moderate |
security |
2026-10-08 |
This update for libX11 fixes the following issues:
- CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653).
- CVE-2026-94284: out-of-bounds
...
|
|
| SUSE-PackageHub-16.0-1867 |
moderate |
security |
2026-10-08 |
This update for libXi fixes the following issues:
- CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605).
- CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes
...
|
|
| SUSE-PackageHub-16.0-1865 |
moderate |
security |
2026-10-08 |
This update for libheif fixes the following issues:
- CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829).
- AV1/libaom path allows allocation before libheif rejects mismat
...
|
- libheif-1.23.5-160000.1.1
|
| SUSE-PackageHub-16.0-1864 |
important |
security |
2026-10-08 |
This update for librsvg fixes the following issues:
- CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612).
Changes for librsvg:
- Update to version 2.60.3:
- De
...
|
- librsvg-2.60.3-160000.1.1
|
| SUSE-PackageHub-16.0-1862 |
important |
security |
2026-10-07 |
This update for bind fixes the following issues:
- CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430).
- CVE-2026-19662: qpcache NOQNAME p
...
|
|
| SUSE-PackageHub-16.0-1861 |
moderate |
security |
2026-10-07 |
This update for swtpm fixes the following issues:
Security issue fixed:
- CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch
(bsc#12756
...
|
|
| SUSE-PackageHub-16.0-1860 |
important |
security |
2026-10-07 |
This update for qemu fixes the following issues:
Security issues fixed:
- CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to
bypas
...
|
- qemu-10.0.13-160000.2.1
- qemu-linux-user-10.0.13-160000.2.1
|
| SUSE-PackageHub-16.0-1858 |
important |
security |
2026-10-07 |
This update for php8 fixes the following issues:
- CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981).
- CVE-2025-14181: Integer overflow
...
|
- php8-test-8.4.26-160000.1.1
|
| openSUSE-2026-346 |
moderate |
recommended |
2026-10-07 |
This update for openQA, os-autoinst fixes the following issues:
Changes in openQA:
- Update to version 5.1790713243.ef39a05e:
* feat: Keep reserved workers usable for verification jobs
* fix(tes
...
|
- openQA-5.1790713243.ef39a05e-bp157.2.39.1
- openQA-client-test-5.1790713243.ef39a05e-bp157.2.39.3
- openQA-test-5.1790713243.ef39a05e-bp157.2.39.3
- openQA-worker-test-5.1790713243.ef39a05e-bp157.2.39.2
- os-autoinst-5.1790705326.6badaca-bp157.2.27.1
- os-autoinst-openvswitch-test-5.1790705326.6badaca-bp157.2.27.1
- os-autoinst-test-5.1790705326.6badaca-bp157.2.27.2
|