Packages / openSUSE Tumbleweed / Source / Unspecified / owntone

Source Package: owntone (29.0-2.8)

DAAP server for iTunes and Chromecast with MPD and RSP support

The following binary packages are built from this source package:

owntone
DAAP server for iTunes and Chromecast with MPD and RSP support

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2026-26828] Published: Oct 21, 2026, 12:00:00 AM UTC owntone-29.3-1.1 on GA media	Unknown	Affected Details (1) `29.0-2.8` · x86_64 · tumbleweed Affected · Fixed: `29.3-1.1` pypi · owntone · opensuse · tumbleweed
[CVE-2026-41458] Published: Apr 22, 2026, 3:16:01 AM UTC owntone-29.3-1.1 on GA media	High(8.2)	Affected Details (1) `29.0-2.8` · x86_64 · tumbleweed Affected · Fixed: `29.3-1.1` pypi · owntone · opensuse · tumbleweed
[CVE-2026-41457] Published: Apr 22, 2026, 3:16:00 AM UTC owntone-29.3-1.1 on GA media	Medium(6.9)	Affected Details (1) `29.0-2.8` · x86_64 · tumbleweed Affected · Fixed: `29.3-1.1` pypi · owntone · opensuse · tumbleweed

[CVE-2026-26828]

Published: Oct 21, 2026, 12:00:00 AM UTC

owntone-29.3-1.1 on GA media

Unknown

Affected

Details (1)

29.0-2.8 · x86_64 · tumbleweed
Affected · Fixed: 29.3-1.1
pypi · owntone · opensuse · tumbleweed

[CVE-2026-41458]

Published: Apr 22, 2026, 3:16:01 AM UTC

owntone-29.3-1.1 on GA media

High(8.2)

Affected

Details (1)

29.0-2.8 · x86_64 · tumbleweed
Affected · Fixed: 29.3-1.1
pypi · owntone · opensuse · tumbleweed

[CVE-2026-41457]

Published: Apr 22, 2026, 3:16:00 AM UTC

owntone-29.3-1.1 on GA media

Medium(6.9)

Affected

Details (1)

29.0-2.8 · x86_64 · tumbleweed
Affected · Fixed: 29.3-1.1
pypi · owntone · opensuse · tumbleweed

Fixed and unaffected versions (2)

CVE Severity Version impact

CVE	Severity	Version impact
[CVE-2025-63648] Published: Feb 17, 2026, 12:00:00 AM UTC owntone-29.0-2.1 on GA media	Unknown	Fixed Details (1) `29.0-2.8` · x86_64 · tumbleweed Fixed · Fixed: `29.0-2.1` pypi · owntone · opensuse · tumbleweed
[CVE-2021-38383] Published: Jun 15, 2024, 12:00:00 AM UTC owntone-28.2-1.2 on GA media	Unknown	Fixed Details (1) `29.0-2.8` · x86_64 · tumbleweed Fixed · Fixed: `28.2-1.2` pypi · owntone · opensuse · tumbleweed

[CVE-2025-63648]

Published: Feb 17, 2026, 12:00:00 AM UTC

owntone-29.0-2.1 on GA media

Unknown

Fixed

Details (1)

29.0-2.8 · x86_64 · tumbleweed
Fixed · Fixed: 29.0-2.1
pypi · owntone · opensuse · tumbleweed

[CVE-2021-38383]

Published: Jun 15, 2024, 12:00:00 AM UTC

owntone-28.2-1.2 on GA media

Unknown

Fixed

Details (1)

29.0-2.8 · x86_64 · tumbleweed
Fixed · Fixed: 28.2-1.2
pypi · owntone · opensuse · tumbleweed

Last synced: Oct 28, 2026, 2:23:56 AM UTC

[CVE catalog]

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable