OpenSUSE has released four moderate security updates for openSUSE Tumbleweed, addressing vulnerabilities in the oras, nginx, gomuks, and blender packages. The updates include fixes for several high-scoring flaws such as CVE-2026-42533 in nginx with a score of 9.2 and CVE-2026-39821 in gomuks with a score of 9.1. Users are advised to install the latest package versions: oras-1.3.3-2.1, nginx-1.31.3-1.1, gomuks-26.03+git.1780250926.564a8707-1.1, and blender-5.2.0-1.1 to mitigate these security risks. Detailed information on the vulnerabilities and their CVSS scores can be found on the SUSE security website

Oras, Nginx, Gomuks, and Blender updates for OpenSUSE

OpenSUSE issued four moderate security updates for openSUSE Tumbleweed, patching vulnerabilities in the oras, nginx, gomuks, and blender packages. The nginx-1.31.3-1.1 release resolves three flaws including CVE-2026-42533 scored at 9.2, while the gomuks update fixes six vulnerabilities with CVE-2026-39821 rated at 9.1. Tumbleweed users should install package versions oras-1.3.3-2.1, nginx-1.31.3-1.1, gomuks-26.03+git.1780250926.564a8707-1.1, and blender-5.2.0-1.1 to address the identified security risks. SUSE provides full scoring data for these flaws at suse.com/security/cve alongside references for CVE-2026-50163, CVE-2026-42533, CVE-2026-56434, CVE-2026-60005, CVE-2026-25681, CVE-2026-27136, CVE-2026-33809, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506, CVE-2022-0544, CVE-2022-0545, and CVE-2022-0546.

openSUSE-SU-2026:11297-1: moderate: oras-1.3.3-2.1 on GA media
openSUSE-SU-2026:11295-1: moderate: nginx-1.31.3-1.1 on GA media
openSUSE-SU-2026:11290-1: moderate: gomuks-26.03+git.1780250926.564a8707-1.1 on GA media
openSUSE-SU-2026:11288-1: moderate: blender-5.2-5.2.0-1.1 on GA media

Oras, Nginx, Gomuks, and Blender updates for OpenSUSE @ Linux Compatible