SUSE CVE-2026-64189

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ipsetlist resize The release path of ipsetdumpdo and ipsetdumpdone read inst-ipsetlist via ipsetrefnetlink, a plain rcudereferenceraw of the array pointer. These run from netlinkrecvmsg...

SUSE CVE-2026-64190

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in teamxmit during mode change teamchangemode clears team-ops with memset before restoring safe dummy handlers via teamadjustops. A concurrent teamxmit running under RCU on another CPU can...

SUSE-SU-2026:22769-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

SUSE-SU-2026:22742-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

SUSE-SU-2026:22835-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

SUSE-SU-2026:22812-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

OPENSUSE-SU-2026:21388-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions bsc1266290. - CVE-2025-39894: netfilter: brnetfilter: do not check confirmed bit in brnflocalin after confirm...

CVE-2026-64190

A flaw was found in the Linux kernel's team driver. A local attacker with CAPNETADMIN capabilities could exploit a race condition during a team device mode change. This occurs when the teamchangemode function clears internal operation pointers before safely restoring them, while the teamxmit...

PT-2026-62399

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via multiple protocols to compromise the system. Successful exploitation can le...

PT-2026-62200

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Ja...

PT-2026-62274

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

PT-2026-62257

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows low privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise...

CVE-2026-60317: Improper Access Control

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2026-47040: Missing Authentication for Critical Function

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services...

CVE-2026-46876: Improper Access Control

Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can...

The vulnerability of the devl_rate_nodesdestroy() function in the net/devlink/rate.c module, a implementation of networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the devlratenodesdestroy function in the net/devlink/rate.c module, which is part of the Linux kernel’s networking functions, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-41894)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41894 advisory. 8.0.129-1.0.1 - Add support for Oracle Linux 8.0.129-1 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 8.0.128-2 - Reduce time...

git-lfs security update

3.7.1-6 - Rebuild with new Golang 3.7.1-5 - Fix CVE-2026-39821 in vendored golang.org/x/net idna package 3.7.1-4 - Rebuild with new Golang...

CVE-2026-47038: Missing Authentication for Critical Function

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows high privileged attacker having None privilege with network access via Oracle Net to compromise RDBMS...

PT-2026-62275

Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/Net versions 9.7.0 through 9.7.1 Description A flaw in the MySQL Connectors product allows a low privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead t...