OPENSUSE-SU-2026:11580-1 MozillaFirefox-154.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-154.0-1.1 package on the GA media of openSUSE Tumbleweed...

Debian dsa-6461 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6461 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/securit...

perl-Net-OAuth-0.330.0-1.1 on GA media (moderate)

perl-Net-OAuth-0.330.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11551-1 Rating: moderate Cross-References: CVE-2026-72887 CVE-2026-72888 CVE-2026-72889 CVE-2026-75589 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These a...

OPENSUSE-SU-2026:11581-1 chromedriver-151.0.7922.173-1.1 on GA media

These are all security issues fixed in the chromedriver-151.0.7922.173-1.1 package on the GA media of openSUSE Tumbleweed...

firefox-esr-153.1.0-1.1 on GA media (moderate)

firefox-esr-153.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11546-1 Rating: moderate Cross-References: CVE-2026-74934 CVE-2026-74935 CVE-2026-74936 CVE-2026-74937 CVE-2026-74938 CVE-2026-74939 CVE-2026-74940 CVE-2026-74941 CVE-2026-74942 CVE-2026-74943 CVE-2026-74944 CVE-2026-74945...

CVE-2026-74732

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110setavmute Some older DCE timing generators do not implement istgenabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference o...

UBUNTU-CVE-2026-74693

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...

UBUNTU-CVE-2026-74718

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlinknlreloaddoit calls devlinknetnsget, which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not...

UBUNTU-CVE-2026-74618

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinary file descriptor. Nothing ties the task that calls...

UBUNTU-CVE-2026-74619

In the Linux kernel, the following vulnerability has been resolved: ovl: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinary file descriptor. Nothing ties the task that calls fsconfigFSCONFIGCMDCREAT...

UBUNTU-CVE-2026-74719

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix qentry overwrite for CONFIRMLINK and ADDLINKCONT in smcllceventhandler The SMCLLCCONFIRMLINK / SMCLLCADDLINKCONT branch in smcllceventhandler stores an incoming qentry into the local LLC flow without first checking...

UBUNTU-CVE-2026-74679

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: Use unsigned int for ndpindex The variable ndpindex is declared as a signed integer, but it stores the return value of getncm, which is unsigned. A malicious host can supply a large offset that overflows the...

UBUNTU-CVE-2026-74682

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter: u-packets = urbpacks; u-buffersize = maxsize u-packets; if fmt-fmttype ==...

UBUNTU-CVE-2026-74732

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110setavmute Some older DCE timing generators do not implement istgenabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference o...

UBUNTU-CVE-2026-74622

In the Linux kernel, the following vulnerability has been resolved: net: atlantic: free RX pages of consumed but not refilled buffers aqringrxdeinit only walks swhead, swtail, the region posted to hardware. Since the page reuse strategy was added, a cleaned RX buffer keeps its page and its DMA...

CVE-2026-74618

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: don't warn when the mount is completed from another user namespace fsopen records the caller's user namespace in fc-userns and hands back an ordinary file descriptor. Nothing ties the task that calls...

CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74602

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...

CVE-2026-74672

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: acquire initmm lock on huge vmap to avoid ptdump UAF Patch series "mm: fix UAF caused by race between ptdump and vmap pgtable freeing", v6. Kernel page table walkers fall into two broad categories - those ranges where...

CVE-2026-74693

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...