SUSE Package Hub Updates

Update ID Severity Type Issued Description Packages
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1660 low security 2026-04-29 This update for libheif fixes the following issues: - CVE-2026-3949: Manipulation of the argument size of a malicious frame can lead to out-of-bounds read (bsc#1259541).
  • libheif-1.19.5-150700.3.8.1
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1653 moderate security 2026-04-29 This update for protobuf fixes the following issues: Refresh fixes: - CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages can l ...
  • protobuf-3.9.2-150200.4.33.1
SUSE-PackageHub-16.0-packagehub-225 critical security 2026-04-29 This update for grafana fixes the following issues: Changes in grafana: - Update to version 11.6.11: Features and enhancements: * Alerting: Add limits for the size of expanded notification t ...
  • grafana-11.6.11-bp160.1.1
SUSE-PackageHub-16.0-packagehub-224 critical security 2026-04-29 This update for radare2 fixes the following issues: Changes in radare2: - Update to version 6.1.4 (bsc#1262142, CVE-2026-40499): * Analysis: improve autoname scoring, jmptbl detection, and perform ...
  • radare2-6.1.4-bp160.1.1
SUSE-PackageHub-16.0-660 important security 2026-04-29 This update for openexr fixes the following issues: - CVE-2026-40244: integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (bsc#1262426). - CVE-2026-40250: integer overflow in DWA ...
  • openexr-3.2.2-160000.7.1
SUSE-PackageHub-16.0-656 important recommended 2026-04-29 This update for crmsh fixes the following issues: - Update to version 5.0.0+20260420.f7e8ecad: * Dev: utils: Improve check_port_open to concurrently try all addresses (bsc#1262094) * Dev: qde ...
  • crmsh-5.0.0+20260420.f7e8ecad-160000.1.1
SUSE-PackageHub-16.0-655 moderate security 2026-04-29 This update for libssh fixes the following issues: - Update to version 0.11.4: - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049) - CVE-2026-0965: Possible Denial of ...
  • libssh-0.11.4-160000.1.1
SUSE-PackageHub-16.0-654 important security 2026-04-29 This update for PackageKit fixes the following issues: - CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE (bsc#1262220).
  • PackageKit-1.2.8-160000.4.1
SUSE-PackageHub-16.0-packagehub-223 moderate recommended 2026-04-28 This update for f3 fixes the following issues: Introducing f3.
  • f3-9.0-bp160.1.1
SUSE-PackageHub-16.0-packagehub-222 moderate recommended 2026-04-28 This update for nginx-module-rtmp fixes the following issues: Introducing nginx-module-rtmp.
  • nginx-module-rtmp-1.2.2-bp160.1.1