Java 17 OpenJDK, Nginx, Firefox, Thunderbird, FFmpeg, and Python Libraries updates for SUSE

SUSE 5720 Published by

The openSUSE security advisory list covers eight distinct packages with severity ratings ranging from important to moderate. The two important priority patches address vulnerabilities in java-17-openjdk and nginx that require immediate installation. Moderate severity fixes arrive for MozillaFirefox, MozillaThunderbird, java-25-openjdk, ffmpeg-7, libsrt1_5, and python313-urwid on general availability media builds. System administrators should apply these updates through the standard package manager to close the disclosed security flaws across their Linux infrastructure.

openSUSE-SU-2026:21440-1: important: Security update for java-17-openjdk
openSUSE-SU-2026:21439-1: important: Security update for nginx
openSUSE-SU-2026:11358-1: moderate: MozillaFirefox-153.0-1.1 on GA media
openSUSE-SU-2026:11359-1: moderate: MozillaThunderbird-140.13.0-1.1 on GA media
openSUSE-SU-2026:11363-1: moderate: java-25-openjdk-25.0.4.0-1.1 on GA media
openSUSE-SU-2026:11361-1: moderate: ffmpeg-7-7.1.4-5.1 on GA media
openSUSE-SU-2026:11357-1: moderate: libsrt1_5-1.5.6-1.1 on GA media
openSUSE-SU-2026:11356-1: moderate: python313-urwid-4.0.5-1.1 on GA media




openSUSE-SU-2026:21440-1: important: Security update for java-17-openjdk


openSUSE security update: security update for java-17-openjdk
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21440-1
Rating: important
References:

* bsc#1264994
* bsc#1272223
* bsc#1272224
* bsc#1272225
* bsc#1272227
* bsc#1272228
* bsc#1272235
* bsc#1272236
* bsc#1272237

Cross-References:

* CVE-2026-41254
* CVE-2026-46917
* CVE-2026-46968
* CVE-2026-47010
* CVE-2026-47021
* CVE-2026-47027
* CVE-2026-47059
* CVE-2026-47063
* CVE-2026-60147

CVSS scores:

* CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46917 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46968 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-46968 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-47010 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-47010 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-47021 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47021 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47027 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47027 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47059 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47059 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47063 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-47063 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-60147 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-60147 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed.

Description:

This update for java-17-openjdk fixes the following issues

- Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU)
- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).
- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).
- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).
- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).
- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).
- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).
- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).
- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1344=1

Package List:

- openSUSE Leap 16.0:

java-17-openjdk-17.0.20.0-160000.1.1
java-17-openjdk-demo-17.0.20.0-160000.1.1
java-17-openjdk-devel-17.0.20.0-160000.1.1
java-17-openjdk-headless-17.0.20.0-160000.1.1
java-17-openjdk-javadoc-17.0.20.0-160000.1.1
java-17-openjdk-jmods-17.0.20.0-160000.1.1
java-17-openjdk-src-17.0.20.0-160000.1.1

References:

* https://www.suse.com/security/cve/CVE-2026-41254.html
* https://www.suse.com/security/cve/CVE-2026-46917.html
* https://www.suse.com/security/cve/CVE-2026-46968.html
* https://www.suse.com/security/cve/CVE-2026-47010.html
* https://www.suse.com/security/cve/CVE-2026-47021.html
* https://www.suse.com/security/cve/CVE-2026-47027.html
* https://www.suse.com/security/cve/CVE-2026-47059.html
* https://www.suse.com/security/cve/CVE-2026-47063.html
* https://www.suse.com/security/cve/CVE-2026-60147.html



openSUSE-SU-2026:21439-1: important: Security update for nginx


openSUSE security update: security update for nginx
-------------------------------------------------------------

Announcement ID: openSUSE-SU-2026:21439-1
Rating: important
References:

* bsc#1265228
* bsc#1267525
* bsc#1268492
* bsc#1268495

Cross-References:

* CVE-2026-40460
* CVE-2026-42055
* CVE-2026-48142

CVSS scores:

* CVE-2026-40460 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
* CVE-2026-40460 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-42055 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
* CVE-2026-48142 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products:

openSUSE Leap 16.0

-------------------------------------------------------------

An update that solves 3 vulnerabilities and has 4 bug fixes can now be installed.

Description:

This update for nginx fixes the following issues

- CVE-2026-40460: bypass of authorization and bypass of rate limiting when NGINX is configured to use the HTTP/3 QUIC module (bsc#1265228).
- CVE-2026-42055: heap-based buffer overflow in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules (bsc#1268492).
- CVE-2026-48142: heap buffer over-read in the ngx_http_charset_module module (bsc#1268495).
- HTTP2-BOMB denial of service (bsc#1267525).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-1343=1

Package List:

- openSUSE Leap 16.0:

nginx-1.27.2-160000.6.1
nginx-source-1.27.2-160000.6.1

References:

* https://www.suse.com/security/cve/CVE-2026-40460.html
* https://www.suse.com/security/cve/CVE-2026-42055.html
* https://www.suse.com/security/cve/CVE-2026-48142.html



openSUSE-SU-2026:11358-1: moderate: MozillaFirefox-153.0-1.1 on GA media


# MozillaFirefox-153.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11358-1
Rating: moderate

Cross-References:

* CVE-2026-16349
* CVE-2026-16350
* CVE-2026-16351
* CVE-2026-16352
* CVE-2026-16353
* CVE-2026-16354
* CVE-2026-16355
* CVE-2026-16356
* CVE-2026-16357
* CVE-2026-16358
* CVE-2026-16359
* CVE-2026-16360
* CVE-2026-16362
* CVE-2026-16363
* CVE-2026-16364
* CVE-2026-16365
* CVE-2026-16366
* CVE-2026-16367
* CVE-2026-16368
* CVE-2026-16369
* CVE-2026-16370
* CVE-2026-16371
* CVE-2026-16372
* CVE-2026-16373
* CVE-2026-16374
* CVE-2026-16375
* CVE-2026-16376
* CVE-2026-16377
* CVE-2026-16378
* CVE-2026-16379
* CVE-2026-16380
* CVE-2026-16381
* CVE-2026-16382
* CVE-2026-16383
* CVE-2026-16384
* CVE-2026-16385
* CVE-2026-16386
* CVE-2026-16387
* CVE-2026-16388
* CVE-2026-16389
* CVE-2026-16390
* CVE-2026-16391
* CVE-2026-16392
* CVE-2026-16393
* CVE-2026-16394
* CVE-2026-16395
* CVE-2026-16396
* CVE-2026-16397
* CVE-2026-16398
* CVE-2026-16399
* CVE-2026-16400
* CVE-2026-16401
* CVE-2026-16402
* CVE-2026-16403
* CVE-2026-16404
* CVE-2026-16405
* CVE-2026-16406
* CVE-2026-16407
* CVE-2026-16408
* CVE-2026-16409
* CVE-2026-16410
* CVE-2026-16411
* CVE-2026-16412

Affected Products:

* openSUSE Tumbleweed

An update that solves 63 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the MozillaFirefox-153.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* MozillaFirefox 153.0-1.1
* MozillaFirefox-branding-upstream 153.0-1.1
* MozillaFirefox-devel 153.0-1.1
* MozillaFirefox-translations-common 153.0-1.1
* MozillaFirefox-translations-other 153.0-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-16349.html
* https://www.suse.com/security/cve/CVE-2026-16350.html
* https://www.suse.com/security/cve/CVE-2026-16351.html
* https://www.suse.com/security/cve/CVE-2026-16352.html
* https://www.suse.com/security/cve/CVE-2026-16353.html
* https://www.suse.com/security/cve/CVE-2026-16354.html
* https://www.suse.com/security/cve/CVE-2026-16355.html
* https://www.suse.com/security/cve/CVE-2026-16356.html
* https://www.suse.com/security/cve/CVE-2026-16357.html
* https://www.suse.com/security/cve/CVE-2026-16358.html
* https://www.suse.com/security/cve/CVE-2026-16359.html
* https://www.suse.com/security/cve/CVE-2026-16360.html
* https://www.suse.com/security/cve/CVE-2026-16362.html
* https://www.suse.com/security/cve/CVE-2026-16363.html
* https://www.suse.com/security/cve/CVE-2026-16364.html
* https://www.suse.com/security/cve/CVE-2026-16365.html
* https://www.suse.com/security/cve/CVE-2026-16366.html
* https://www.suse.com/security/cve/CVE-2026-16367.html
* https://www.suse.com/security/cve/CVE-2026-16368.html
* https://www.suse.com/security/cve/CVE-2026-16369.html
* https://www.suse.com/security/cve/CVE-2026-16370.html
* https://www.suse.com/security/cve/CVE-2026-16371.html
* https://www.suse.com/security/cve/CVE-2026-16372.html
* https://www.suse.com/security/cve/CVE-2026-16373.html
* https://www.suse.com/security/cve/CVE-2026-16374.html
* https://www.suse.com/security/cve/CVE-2026-16375.html
* https://www.suse.com/security/cve/CVE-2026-16376.html
* https://www.suse.com/security/cve/CVE-2026-16377.html
* https://www.suse.com/security/cve/CVE-2026-16378.html
* https://www.suse.com/security/cve/CVE-2026-16379.html
* https://www.suse.com/security/cve/CVE-2026-16380.html
* https://www.suse.com/security/cve/CVE-2026-16381.html
* https://www.suse.com/security/cve/CVE-2026-16382.html
* https://www.suse.com/security/cve/CVE-2026-16383.html
* https://www.suse.com/security/cve/CVE-2026-16384.html
* https://www.suse.com/security/cve/CVE-2026-16385.html
* https://www.suse.com/security/cve/CVE-2026-16386.html
* https://www.suse.com/security/cve/CVE-2026-16387.html
* https://www.suse.com/security/cve/CVE-2026-16388.html
* https://www.suse.com/security/cve/CVE-2026-16389.html
* https://www.suse.com/security/cve/CVE-2026-16390.html
* https://www.suse.com/security/cve/CVE-2026-16391.html
* https://www.suse.com/security/cve/CVE-2026-16392.html
* https://www.suse.com/security/cve/CVE-2026-16393.html
* https://www.suse.com/security/cve/CVE-2026-16394.html
* https://www.suse.com/security/cve/CVE-2026-16395.html
* https://www.suse.com/security/cve/CVE-2026-16396.html
* https://www.suse.com/security/cve/CVE-2026-16397.html
* https://www.suse.com/security/cve/CVE-2026-16398.html
* https://www.suse.com/security/cve/CVE-2026-16399.html
* https://www.suse.com/security/cve/CVE-2026-16400.html
* https://www.suse.com/security/cve/CVE-2026-16401.html
* https://www.suse.com/security/cve/CVE-2026-16402.html
* https://www.suse.com/security/cve/CVE-2026-16403.html
* https://www.suse.com/security/cve/CVE-2026-16404.html
* https://www.suse.com/security/cve/CVE-2026-16405.html
* https://www.suse.com/security/cve/CVE-2026-16406.html
* https://www.suse.com/security/cve/CVE-2026-16407.html
* https://www.suse.com/security/cve/CVE-2026-16408.html
* https://www.suse.com/security/cve/CVE-2026-16409.html
* https://www.suse.com/security/cve/CVE-2026-16410.html
* https://www.suse.com/security/cve/CVE-2026-16411.html
* https://www.suse.com/security/cve/CVE-2026-16412.html



openSUSE-SU-2026:11359-1: moderate: MozillaThunderbird-140.13.0-1.1 on GA media


# MozillaThunderbird-140.13.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11359-1
Rating: moderate

Cross-References:

* CVE-2026-14899
* CVE-2026-15718
* CVE-2026-15719
* CVE-2026-16349
* CVE-2026-16350
* CVE-2026-16351
* CVE-2026-16352
* CVE-2026-16353
* CVE-2026-16354
* CVE-2026-16355
* CVE-2026-16356
* CVE-2026-16357
* CVE-2026-16358
* CVE-2026-16359
* CVE-2026-16360
* CVE-2026-16361
* CVE-2026-16362
* CVE-2026-16363
* CVE-2026-16368
* CVE-2026-16369
* CVE-2026-16371
* CVE-2026-16374
* CVE-2026-16375
* CVE-2026-16377
* CVE-2026-16379
* CVE-2026-16381
* CVE-2026-16383
* CVE-2026-16387
* CVE-2026-16390
* CVE-2026-16391
* CVE-2026-16396
* CVE-2026-16405
* CVE-2026-16412

Affected Products:

* openSUSE Tumbleweed

An update that solves 33 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the MozillaThunderbird-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* MozillaThunderbird 140.13.0-1.1
* MozillaThunderbird-openpgp-librnp 140.13.0-1.1
* MozillaThunderbird-translations-common 140.13.0-1.1
* MozillaThunderbird-translations-other 140.13.0-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-14899.html
* https://www.suse.com/security/cve/CVE-2026-15718.html
* https://www.suse.com/security/cve/CVE-2026-15719.html
* https://www.suse.com/security/cve/CVE-2026-16349.html
* https://www.suse.com/security/cve/CVE-2026-16350.html
* https://www.suse.com/security/cve/CVE-2026-16351.html
* https://www.suse.com/security/cve/CVE-2026-16352.html
* https://www.suse.com/security/cve/CVE-2026-16353.html
* https://www.suse.com/security/cve/CVE-2026-16354.html
* https://www.suse.com/security/cve/CVE-2026-16355.html
* https://www.suse.com/security/cve/CVE-2026-16356.html
* https://www.suse.com/security/cve/CVE-2026-16357.html
* https://www.suse.com/security/cve/CVE-2026-16358.html
* https://www.suse.com/security/cve/CVE-2026-16359.html
* https://www.suse.com/security/cve/CVE-2026-16360.html
* https://www.suse.com/security/cve/CVE-2026-16361.html
* https://www.suse.com/security/cve/CVE-2026-16362.html
* https://www.suse.com/security/cve/CVE-2026-16363.html
* https://www.suse.com/security/cve/CVE-2026-16368.html
* https://www.suse.com/security/cve/CVE-2026-16369.html
* https://www.suse.com/security/cve/CVE-2026-16371.html
* https://www.suse.com/security/cve/CVE-2026-16374.html
* https://www.suse.com/security/cve/CVE-2026-16375.html
* https://www.suse.com/security/cve/CVE-2026-16377.html
* https://www.suse.com/security/cve/CVE-2026-16379.html
* https://www.suse.com/security/cve/CVE-2026-16381.html
* https://www.suse.com/security/cve/CVE-2026-16383.html
* https://www.suse.com/security/cve/CVE-2026-16387.html
* https://www.suse.com/security/cve/CVE-2026-16390.html
* https://www.suse.com/security/cve/CVE-2026-16391.html
* https://www.suse.com/security/cve/CVE-2026-16396.html
* https://www.suse.com/security/cve/CVE-2026-16405.html
* https://www.suse.com/security/cve/CVE-2026-16412.html



openSUSE-SU-2026:11363-1: moderate: java-25-openjdk-25.0.4.0-1.1 on GA media


# java-25-openjdk-25.0.4.0-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11363-1
Rating: moderate

Cross-References:

* CVE-2026-41254
* CVE-2026-46917
* CVE-2026-46968
* CVE-2026-47010
* CVE-2026-47021
* CVE-2026-47027
* CVE-2026-47059
* CVE-2026-47063
* CVE-2026-60147

CVSS scores:

* CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-46917 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-46968 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-46968 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-47010 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-47010 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-47021 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47021 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47027 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47027 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47059 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-47059 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-47063 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-47063 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-60147 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-60147 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Products:

* openSUSE Tumbleweed

An update that solves 9 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the java-25-openjdk-25.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* java-25-openjdk 25.0.4.0-1.1
* java-25-openjdk-demo 25.0.4.0-1.1
* java-25-openjdk-devel 25.0.4.0-1.1
* java-25-openjdk-headless 25.0.4.0-1.1
* java-25-openjdk-javadoc 25.0.4.0-1.1
* java-25-openjdk-jmods 25.0.4.0-1.1
* java-25-openjdk-src 25.0.4.0-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-41254.html
* https://www.suse.com/security/cve/CVE-2026-46917.html
* https://www.suse.com/security/cve/CVE-2026-46968.html
* https://www.suse.com/security/cve/CVE-2026-47010.html
* https://www.suse.com/security/cve/CVE-2026-47021.html
* https://www.suse.com/security/cve/CVE-2026-47027.html
* https://www.suse.com/security/cve/CVE-2026-47059.html
* https://www.suse.com/security/cve/CVE-2026-47063.html
* https://www.suse.com/security/cve/CVE-2026-60147.html



openSUSE-SU-2026:11361-1: moderate: ffmpeg-7-7.1.4-5.1 on GA media


# ffmpeg-7-7.1.4-5.1 on GA media

Announcement ID: openSUSE-SU-2026:11361-1
Rating: moderate

Cross-References:

* CVE-2026-12706

CVSS scores:

* CVE-2026-12706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the ffmpeg-7-7.1.4-5.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* ffmpeg-7 7.1.4-5.1
* ffmpeg-7-libavcodec-devel 7.1.4-5.1
* ffmpeg-7-libavdevice-devel 7.1.4-5.1
* ffmpeg-7-libavfilter-devel 7.1.4-5.1
* ffmpeg-7-libavformat-devel 7.1.4-5.1
* ffmpeg-7-libavutil-devel 7.1.4-5.1
* ffmpeg-7-libpostproc-devel 7.1.4-5.1
* ffmpeg-7-libswresample-devel 7.1.4-5.1
* ffmpeg-7-libswscale-devel 7.1.4-5.1
* libavcodec61 7.1.4-5.1
* libavdevice61 7.1.4-5.1
* libavfilter10 7.1.4-5.1
* libavformat61 7.1.4-5.1
* libavutil59 7.1.4-5.1
* libpostproc58 7.1.4-5.1
* libswresample5 7.1.4-5.1
* libswscale8 7.1.4-5.1

## References:

* https://www.suse.com/security/cve/CVE-2026-12706.html



openSUSE-SU-2026:11357-1: moderate: libsrt1_5-1.5.6-1.1 on GA media


# libsrt1_5-1.5.6-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11357-1
Rating: moderate

Cross-References:

* CVE-2026-55868
* CVE-2026-55869

Affected Products:

* openSUSE Tumbleweed

An update that solves 2 vulnerabilities can now be installed.

## Description:

These are all security issues fixed in the libsrt1_5-1.5.6-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* libsrt1_5 1.5.6-1.1
* libsrt1_5-32bit 1.5.6-1.1
* srt 1.5.6-1.1
* srt-devel 1.5.6-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-55868.html
* https://www.suse.com/security/cve/CVE-2026-55869.html



openSUSE-SU-2026:11356-1: moderate: python313-urwid-4.0.5-1.1 on GA media


# python313-urwid-4.0.5-1.1 on GA media

Announcement ID: openSUSE-SU-2026:11356-1
Rating: moderate

Cross-References:

* CVE-2026-9323

CVSS scores:

* CVE-2026-9323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the python313-urwid-4.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* python313-urwid 4.0.5-1.1
* python314-urwid 4.0.5-1.1

## References:

* https://www.suse.com/security/cve/CVE-2026-9323.html


Java-17-openjdk security update for Rocky Linux 8

Linux Kernel 7.2 RC5 Released: Massive Networking Patch Push Targets Stable on Aug 16

Windows

Linux

macOS

Community

  • gavindi
    Mt. Sync is a native GNOME desktop application that puts ...
  • Lexonight
    Hey everyone,Wanted to share a project I've been b ...
  • SeveG
    need some help here... situationPC= Packard BellOS= win1 ...