SUSE Package Hub Updates

Update ID Severity Type Issued Description Packages
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4765 moderate security 2026-10-20 This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled ho ...
  • python-WebOb-1.7.4-150000.3.9.1
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4763 moderate security 2026-10-20 This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669).
  • libXpm-3.5.12-150000.3.13.1
SUSE-PackageHub-16.0-packagehub-689 important security 2026-10-20 This update for yt-dlp fixes the following issues: Changes in yt-dlp: Update to version 2026.08.19: * utils: float_or_none: Catch OverflowError * americastestkitchen: Fix season/series extracti ...
  • yt-dlp-2026.08.19-bp160.1.1
SUSE-PackageHub-16.0-1946 moderate recommended 2026-10-20 This update for scanner-databases fixes the following issues: Changes in scanner-databases: - database refresh on 2026-10-19 (bsc#1084929)
  • scanner-databases-202610191247-160000.22.1
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4738 important security 2026-10-19 This update for python fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content d ...
  • python-2.7.18-150000.136.1
  • python-base-2.7.18-150000.136.1
SUSE-PackageHub-16.0-packagehub-688 important security 2026-10-19 This update for hashcat fixes the following issues: Changes in hashcat: Update to snapshot v7.1.2-942-gef3508ed8: * Addressed CVE-2026-68768 [boo#1276256], CVE-2026-68767 [boo#1276255], CVE-2 ...
  • hashcat-7.1.2+git942-bp160.1.1
SUSE-PackageHub-16.0-packagehub-687 moderate recommended 2026-10-19 This update for cadvisor fixes the following issues: Changes in cadvisor: - CVE-2026-78669, bsc#1285500, cadvisor: golang.org/x/net/http2: excessive CPU consumption from repeated initial window ch ...
  • cadvisor-0.60.6-bp160.2.1
SUSE-PackageHub-16.0-packagehub-686 critical security 2026-10-19 This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-102946: JWS signature verification can be bypassed via empty signatures array (bsc#1285840)
  • python-joserfc-1.1.0-bp160.5.1
SUSE-PackageHub-16.0-packagehub-685 important security 2026-10-19 This update for coredns fixes the following issues: Changes in coredns: - Bump vendored google.golang.org/grpc from 1.83.0 to 1.83.1: * CVE-2026-84304: heap memory exhaustion via HTTP/2 DATA fram ...
  • coredns-1.14.7-bp160.2.1
SUSE-PackageHub-16.0-packagehub-684 critical security 2026-10-19 This update for gh fixes the following issues: Changes in gh: - Update to version 2.102.0, fixing four security issues (GHSA-39wj-f2f4-978v, GHSA-4mq3-hpgx-9cx8, GHSA-qcwj-mr2r-2cx7, GHSA-wjmr-j ...
  • gh-2.102.0-bp160.1.1