SUSE-SU-2026:21631-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2026-34933: reachable assertion in transportflagsfromdomain can crash the avahi-daemon bsc1261546...

fs: init flags_valid before calling vfs_fileattr_get

...

Unbreakable Enterprise kernel security update

5.15.0-319.201.4.6 - xfrm: esp: ipv4: fix up flags setting Greg Kroah-Hartman Orabug: 39342679 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags Kuan-Ting Chen Orabug: 39342679 CVE-2026-43284 5.15.0-319.201.4.5 - iommu/arm-smmu-v3: Handle zeroed A4-2C HTTU override settings...

coop (>=2.10.0, <=2.10.2), meine-stadt-transparent (0.2.9) +15 more potentially affected by CVE-2026-44200 via wagtail (2.10.2)

wagtail PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =2.10.0, =0.3.1, =0.5.4, =3.0.3, =0.23.0, =0.24.2 - wagtail-test 0.0.0 - wagtail-treemodeladmin 1.2.1 - wagtailperson 0.12.0 - wagtailpress...

coderedcms (>=0.5.0, <=0.7.1), coop (>=2.1.0b0, <=2.1.4) +3 more potentially affected by CVE-2026-44200 via wagtail (2.1.3)

wagtail PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.5.0, =2.1.0b0, =0.5.0, =0.0.2, =0.0.5 Source cves: CVE-2026-44200 Source advisory: OSV:GHSA-67RV-MG8Q-5PF3...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2026-44201 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2026-44201 Source advisory: OSV:GHSA-P5GM-92H4-6PV6...

coop (>=2.10.0, <=2.10.2), meine-stadt-transparent (0.2.9) +15 more potentially affected by CVE-2026-44201 via wagtail (2.10.2)

wagtail PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coop =2.10.0, =0.3.1, =0.5.4, =3.0.3, =0.23.0, =0.24.2 - wagtail-test 0.0.0 - wagtail-treemodeladmin 1.2.1 - wagtailperson 0.12.0 - wagtailpress...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2026-44199 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2026-44199 Source advisory: OSV:GHSA-PWM3-7FV4-G6XX...

coderedcms (>=0.18.0, <=0.18.2), coop (>=2.8.0, <=2.8.2) +10 more potentially affected by CVE-2026-44198 via wagtail (2.8.2)

wagtail PYPI version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.18.0, =2.8.0, =0.0.5, =4.1.0, =0.5.0, =1.0.0, =0.22.0, =3.8.0, =3.9.0 Source cves: CVE-2026-44198 Source advisory:...

coderedcms (>=0.11.0, <=0.14.1), coop (>=2.0.0, <=2.4.5) +4 more potentially affected by CVE-2026-44197 via wagtail (2.4.0)

wagtail PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.11.0, =2.0.0, =4.0.3, =0.6.0, =0.1.0.dev8, =0.7.0, =0.16.4 Source cves: CVE-2026-44197 Source advisory: OSV:GHSA-C6WJ-9VCJ-75PJ...

coderedcms (>=0.5.0, <=0.7.1), coop (>=2.1.0b0, <=2.1.4) +3 more potentially affected by CVE-2026-44197 via wagtail (2.1.3)

wagtail PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - coderedcms =0.5.0, =2.1.0b0, =0.5.0, =0.0.2, =0.0.5 Source cves: CVE-2026-44197 Source advisory: OSV:GHSA-C6WJ-9VCJ-75PJ...

K000161181: Linux kernel vulnerabilities CVE-2026-43284 and CVE-2026-43500

Security Advisory Description CVE-2026-43284 Dirty Frag In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSGSPLICEPAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFLSHAREDFRAG after...

UBUNTU-CVE-2026-43474

In the Linux kernel, the following vulnerability has been resolved: fs: init flagsvalid before calling vfsfileattrget syzbot reported a uninit-value bug in 1. Similar to the "get" context where the kernel's internal filekattr structure is initialized before calling vfsfileattrget, we should use t...

CVE-2026-43474

In the Linux kernel, the following vulnerability has been resolved: fs: init flagsvalid before calling vfsfileattrget syzbot reported a uninit-value bug in 1. Similar to the "get" context where the kernel's internal filekattr structure is initialized before calling vfsfileattrget, we should use t...

CVE-2026-43474

In the Linux kernel, the following vulnerability has been resolved: fs: init flagsvalid before calling vfsfileattrget syzbot reported a uninit-value bug in 1. Similar to the "get" context where the kernel's internal filekattr structure is initialized before calling vfsfileattrget, we should use t...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the memfd mechanism’s handling of dirty flags during preservation operations. This vulnerability...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the fact that flagsvalid was not initialized before calling vfsfileattrget, potentially leading t...

Binding to an Unrestricted IP Address

Overview Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address which defaults to 0.0.0.0 when the -port argument is used or the -listen argument is used without specifying a host. An attacker can execute arbitrary code remotely by connecting to the exposed...

EUVD-2026-27872

gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host e.g. :8080, or -port is used, gopls will listen on 0.0.0.0. As a result, users might inadvertently cause gopls to bind 0.0.0.0. This...

CVE-2026-42503

The gopls language server (part of golang.org/x/tools ) contains a vulnerability where it may inadvertently bind to 0.0.0.0 (INADDR_ANY) when debugging flags are used. Specifically, if the -port flag is used, or if the -listen flag is provided without an explicit host (such as :8080), the service...