SUSE-SU-2026:23971-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

CVE-2026-93996

The Apache MINA SSHD Java library (versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 ) is vulnerable to a memory exhaustion Denial of Service (DoS) in the sshd-scp component. The root cause is that the protocol handler fails to impose a limit on the length of LF-terminated lines during SCP command pr...

CVE-2026-93996 Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

CVE-2026-93996 Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read

Uncontrolled resource consumption in component ssd-scp in Apache MINA SSHD versions up to 2.19.0 or 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. Component sshd-scp of Apache MINA SSHD provides a Java implementation of SCP. The SCP command protocol ...

OPENSUSE-SU-2026:21977-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

EUVD-2026-89729

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

CVE-2026-97499

A flaw was found in the Linux kernel's CoreSight subsystem. A race condition occurs in the Embedded Trace Macrocell ETM performance event callbacks when accessing device pointers during concurrent device registration and unregistration. A local user could exploit this vulnerability by running...

CVE-2026-97498

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. Memory queue and firmware buffer objects used by user queues were not pinned in memory, allowing them to be evicted during memory pressure. A local user could exploit this issue to cause the graphics hardware to access invalid memory...

SUSE-SU-2026:4399-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap buffer overflow in ntfscheckrestartarea bsc1281759. - Heap buffer overflow in ntfseacheckwsldev bsc1281760. - Heap...

CVE-2026-97989

A flaw was found in the Linux kernel's vDPA Device in Userspace VDUSE subsystem. The driver does not properly validate virtqueue alignment parameters during device configuration, allowing invalid or zero alignment values to pass into internal queue creation routines. A local user could exploit th...

CVE-2026-97988

A flaw was found in the Linux kernel's vhost subsystem. When transitioning device address modes or updating feature settings, cached virtual ring pointers and translation metadata are not properly invalidated, leaving stale memory mappings in use. A local attacker with access to the vhost device...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

DEBIAN-CVE-2026-92871

A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process...

CVE-2026-92870

A stack-based buffer overflow vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal process termination...

DEBIAN-CVE-2026-92867

An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...

CVE-2026-92869

An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...

CVE-2026-97986

A flaw was found in the Linux kernel's virtioinput driver. A race condition during device removal can lead to a Denial of Service DoS via a kernel crash. Because the driver unregisters the input device before resetting the underlying virtual device, in-flight event callbacks may access freed devi...

CVE-2026-102511 Apache PLC4X, Apache PLC4X, Apache PLC4X, Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them

Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X PLC4Go allows an attacker able to send UDP datagrams to the discovering host to redirect subsequent connections to an arbitrary, attacker-chosen address. The discovery result's...

EUVD-2026-89680

Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Apache PLC4X PLC4Go allows an attacker able to send UDP datagrams to the discovering host to redirect subsequent connections to an arbitrary, attacker-chosen address. The discovery result's...

CVE-2026-92871

A NULL pointer dereference vulnerability exists in Pgpool-II . This flaw may allow an unauthenticated attacker to trigger an abnormal termination of the watchdog process . No specific affected versions, root cause files, or remediation details are provided in the documents. Exploitation details a...