openSUSE Addresses XSS Vulnerability in openQA with Security Update

openSUSE has released a security update (2026-0235) to address a moderate Cross-Site Scripting (XSS) vulnerability in openQA, affecting multiple architectures including aarch64, ppc64le, s390x, and x86_64. The vulnerability could allow attackers to execute arbitrary scripts in the context of the user's session. Users are advised to apply the patch using recommended methods such as YaST online_update or 'zypper patch'. This update follows a recent advisory (2026-0232-1) regarding a separate issue in the Go programming language package, go-sendxmpp. Both vulnerabilities highlight the ongoing need for timely updates to maintain system security. The openQA vulnerability has been assigned a moderate severity rating, indicating it is not currently exploited in the wild but requires prompt attention.

Key Points: • openSUSE released a patch for a moderate XSS vulnerability in openQA. • The vulnerability affects multiple architectures including x86_64 and aarch64. • Users are urged to apply the security update using recommended installation methods.