Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this...

Cyber Insurance, Audit, and Policy: Review, Analysis and Recommendations

Cyber insurance, which protects insured organizations against financial losses from cyberattacks and data breaches, can be difficult and expensive to obtain for many organizations. These difficulties stem from insurers difficulty in understanding and accurately assessing the risks that they are...

PT-2026-6268

Name of the Vulnerable Software and Affected Versions apko versions 0.14.8 through 1.0.9 Description apko is a tool for building and publishing OCI container images from apk packages. A flaw exists in the expandapk.Split function where it drains the first gzip stream of an APK archive without...

OPENSUSE-SU-2026:10141-1 rizin-0.8.2-1.1 on GA media

These are all security issues fixed in the rizin-0.8.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10140-1 patch-2.8-2.1 on GA media

These are all security issues fixed in the patch-2.8-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10134-1 java-17-openj9-17.0.18.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10137-1 java-21-openj9-21.0.10.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the __ns_common_free() function in the include/linux/ns_common.h module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nscommonfree function in the include/linux/nscommon.h module of the Linux operating system’s kernel is related to incorrect initialization of a resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

OPENSUSE-SU-2026:10132-1 freerdp-3.22.0-1.1 on GA media

These are all security issues fixed in the freerdp-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10142-1 traefik-3.6.7-1.1 on GA media

These are all security issues fixed in the traefik-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-22229

A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device,...

CVE-2026-1738 Open5GS SGWC context.c sgwc_tunnel_add assertion

A flaw has been found in Open5GS up to 2.7.6. The impacted element is the function sgwctunneladd of the file /src/sgwc/context.c of the component SGWC. Executing a manipulation of the argument pdr can lead to reachable assertion. The attack can be executed remotely. The exploit has been published...

OPENSUSE-SU-2026:10131-1 trivy-0.69.0-1.1 on GA media

These are all security issues fixed in the trivy-0.69.0-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of ASDA-Soft’s software for configuring and maintaining servo drives lies in the possibility of operations going beyond the buffer in memory, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of ASDA-Soft software for configuring and maintaining servo drives is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

EUVD-2026-5006

LobeHub Vulnerable to Improper Authorization in Presigned Upload...

chromedriver-144.0.7559.109-1.1 on GA media (moderate)

chromedriver-144.0.7559.109-1.1 on GA media Announcement ID: openSUSE-SU-2026:10121-1 Rating: moderate Cross-References: CVE-2026-1504 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python315-3.15.0~a3-3.1 on GA media (moderate)

python315-3.15.0a3-3.1 on GA media Announcement ID: openSUSE-SU-2026:10126-1 Rating: moderate Cross-References: CVE-2025-11468 CVE-2026-0672 CVSS scores: CVE-2025-11468 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-11468 SUSE : 7.1...

icinga2-2.15.2-1.1 on GA media (moderate)

icinga2-2.15.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10113-1 Rating: moderate Cross-References: CVE-2026-24413 CVSS scores: CVE-2026-24413 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2026-24413 SUSE : 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N...

python314-3.14.2-2.1 on GA media (moderate)

python314-3.14.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:10117-1 Rating: moderate Cross-References: CVE-2025-11468 CVSS scores: CVE-2025-11468 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2025-11468 SUSE : 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:...

logback-1.2.13-2.1 on GA media (moderate)

logback-1.2.13-2.1 on GA media Announcement ID: openSUSE-SU-2026:10114-1 Rating: moderate Cross-References: CVE-2026-1225 CVSS scores: CVE-2026-1225 SUSE : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...