CVE-2026-74879

openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint of openssl_encrypt_server/server.py (lines 159–175). The endpoint catches database exceptions and returns the full exception string via str(e) in the HTTP response to unauthenticated calle...

kernel: scsi: core: Wake up the error handler when final completions race against each other

Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...

The vulnerability of the FFM-based application server Apache Tomcat allows a attacker to cause a service failure.

The vulnerability of FFM-based application server Apache Tomcat connections is related to deficiencies in error handling when checking host keys. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Linux operating system’s kernel, related to a single-bit offset error, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

unbound security update

1.24.2-18 - Add unit tests for CVE-2026-44690,55973 1.24.2-17 - Fix CVE-2026-55973: dns-error-reporting stack buffer overflow 1.24.2-16 - Fix CVE-2026-44690 - Cross-zone wildcard cache poisoning...

PT-2026-76711

The ARM PL011 UART driver in drivers/serial/uart pl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011 IMSC ERROR MASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears t...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099893)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099893 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100133 advisory. In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dllchange check The code checking whether the specified memory timing...

The vulnerability in the driver/hid/hid-magicmouse.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/hid/hid-magicmouse.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the fs/btrfs/qgroup.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to cause a service failure...

MINI-G2JF-R9CC-QC7X

Bulletin has no description...

MINI-44P3-8QVP-RGFQ

Bulletin has no description...

MINI-X5PP-C9RV-84GG

Bulletin has no description...

SUSE CVE-2026-74495

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

SUSE CVE-2026-74505

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a...

SUSE CVE-2026-74519

In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: don't free uninitialized devname on error path dtrememberorfreemap duplicates devname for each map entry. If kstrdupconst fails, dtfreemap frees devname in all nummaps entries, including entries that have not...

CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

MINI-F2RH-RPHP-35JH

Bulletin has no description...

MINI-3W23-8W6V-MP78

Bulletin has no description...

AZL-96195 CVE-2026-74525 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, initdmadescrings only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function...