PT-2026-62033

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 1.9.6-1.1 Description Security issues were identified and subsequently fixed in the libgit2 package. Recommendations Update to version 1.9.6-1.1...

OPENSUSE-SU-2026:11310-1 ImageMagick-7.1.2.27-3.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11318-1 python313-pyasn1-0.6.4-1.1 on GA media

These are all security issues fixed in the python313-pyasn1-0.6.4-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-62031

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 1.9.6-1.1 Description Security issues were identified and subsequently fixed in the libgit2 package. Recommendations Update to version 1.9.6-1.1...

CVE-2026-64123

In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcureadlock. They walk hsr-nodedb through hsrgetnextnode and hsrgetnodedata, but RTMDELLINK teardown remov...

CVE-2026-64123

CVE-2026-64123 concerns the Linux kernel HSR subsystem. The vulnerability arises when HSR node-list/node-status operations run under rcu_read_lock() and RTM_DELLINK teardown frees the same node table immediately via list_del(), allowing a generic-netlink reader to hold a pointer to a freed hsr_no...

EUVD-2026-45573

In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized before access by adding sizeofstruct hsrsuptlv to the pskbmaypull calls. Without this, a truncated frame could cause an...

CVE-2026-64000 net: hsr: fix potential OOB access in supervision frame handling

In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision frame handling Ensure the entire TLV header is linearized before access by adding sizeofstruct hsrsuptlv to the pskbmaypull calls. Without this, a truncated frame could cause an...

PT-2026-61440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the High-availability Seamless Redundancy HSR implementation. The hsr-node db is accessed by generic-netlink operations under rcu read lock via the...

PT-2026-61660

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.128 Description A use after free issue in the Network component allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. Use after free is a memory corruption flaw...

PT-2026-61661

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.128 Description A use after free issue exists in the Cast component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

OPENSUSE-SU-2026:21371-1 Security update for gzip

This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH bsc1269622...

OPENSUSE-SU-2026:11306-1 kbfs-6.6.3-3.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-3.1 package on the GA media of openSUSE Tumbleweed...

Oracle Linux 10 : pcs (ELSA-2026-19008)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19008 advisory. - Fixed CVE-2026-4800 by updating HA Cluster Management add-on to 0.1.24.3 Resolves: RHEL-164079 Tenable has extracted the preceding description block directl...

gomuks-26.03+git.1780250926.564a8707-1.1 on GA media (moderate)

gomuks-26.03+git.1780250926.564a8707-1.1 on GA media Announcement ID: openSUSE-SU-2026:11290-1 Rating: moderate Cross-References: CVE-2026-25681 CVE-2026-27136 CVE-2026-33809 CVE-2026-39821 CVE-2026-42502 CVE-2026-42506 CVSS scores: CVE-2026-25681 SUSE : 6.1...

PT-2026-61511

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description An issue was identified in Suricata that requires a security update. Recommendations Update to version 8.0.6...

OPENSUSE-SU-2026:11305-1 containerized-data-importer1.65-api-1.65.0-2.1 on GA media

These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-50525

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

EUVD-2026-45131

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.0.13 via the 'family' parameter. This makes it possible for authenticated attackers, with editor-level access and above, to delete...

CVE-2026-62220

OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser rate limits on WebSocket authentication attempts. When the affected feature is enabled and reachable by lower-trust input, this can consume gateway resources and reduce service availabili...