SUSE-SU-2026:22717-1 Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....

CVE-2026-48358

creationtimestamp| type| source ---|---|--- 2026-07-14 22:12:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqn7znrkic24 2026-07-15 10:18:15+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqoim4w74e24 2026-07-16 08:37:07+00:00| seen|...

CVE-2026-61458

creationtimestamp| type| source ---|---|--- 2026-07-13 22:50:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrqbq6nf2g...

CVE-2026-36214

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:10+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-14 00:00:19+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-15 00:00:31+00:00| seen| https://t.me/GithubRedTeam/92398 2026-07-16 12:00:07+00:00| seen|...

GHSA-FG23-3346-88F5

creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:06+00:00| seen| https://t.me/GithubRedTeam/92599 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92599 2026-07-15 00:00:33+00:00| seen| https://t.me/GithubRedTeam/92599 2026-07-16 19:00:15+00:00| seen|...

CVE-2026-58499

creationtimestamp| type| source ---|---|--- 2026-07-10 22:00:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqd5jedmj52c...

CVE-2026-58494

creationtimestamp| type| source ---|---|--- 2026-07-08 22:25:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq65xk6ywk2g...

CVE-2026-22874

creationtimestamp| type| source ---|---|--- 2026-07-03 22:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mprl4nq3wo2z 2026-07-04 09:12:44+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mpspsu2h3f23 2026-07-05 21:00:24+00:00| seen|...

CVE-2026-59099

creationtimestamp| type| source ---|---|--- 2026-07-02 22:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpozsoeoil2t 2026-07-03 00:08:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppaxex7xh24 2026-07-03 15:09:49+00:00| seen|...

CVE-2026-44935

creationtimestamp| type| source ---|---|--- 2026-07-02 18:00:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mpomehucbl2t 2026-07-02 19:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mporyehyhq2b 2026-07-03 08:42:38+00:00| seen|...

CVE-2026-14080

creationtimestamp| type| source ---|---|--- 2026-07-02 06:22:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfeopjtz2b 2026-07-02 07:51:45+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-06 07:45:24+00:00| seen|...

DEBIAN-CVE-2026-56363

ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large binomial kernel value causing integer overflow, resulting in division by zero and application crash...

CVE-2026-14161

creationtimestamp| type| source ---|---|--- 2026-06-30 14:12:22+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mpj6oxbel72t 2026-07-01 02:34:08+00:00| seen| https://www.twcert.org.tw/en/cp-139-11012-63761-2.html...

CVE-2026-43740

creationtimestamp| type| source ---|---|--- 2026-06-29 22:26:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mphjswdrsf23 2026-07-01 02:50:31+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818 2026-07-01 16:01:00+00:00| seen|...

BIT-NODE-2026-48928

A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

K000161920: Node.js vulnerability CVE-2026-48619

Security Advisory Description A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26. CVE-2026-48619 Impa...

CVE-2026-48615

A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...

CVE-2026-48930

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48618

CVE-2026-48618 is a Node.js TLS hostname handling issue involving unicode dot separator handling that can bypass wildcard-depth authentication due to resolver/verifier hostname normalization mismatches. Connected updates confirm the vulnerability affects Node.js 22, 24, and 26 across releases. SU...

EUVD-2026-39607

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...