PT-2026-90938

These are all security issues fixed in the zstd-jni-1.5.7.16-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11767-1 bson-devel-2.5.3-1.1 on GA media

These are all security issues fixed in the bson-devel-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-78030

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the dbmtype and dbmmldbm...

CVE-2026-44210 affecting package kata-containers-cc for versions less than 3.15.0.aks0-20

CVE-2026-44210 affecting package kata-containers-cc for versions less than 3.15.0.aks0-20. A patched version of the package is available...

CVE-2026-6383 affecting package kubevirt for versions less than 1.8.4-1

CVE-2026-6383 affecting package kubevirt for versions less than 1.8.4-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6

CVE-2026-19654 affecting package rsyslog for versions less than 8.2308.0-6. A patched version of the package is available...

CVE-2026-77219 affecting package emacs for versions less than 29.4-6

CVE-2026-77219 affecting package emacs for versions less than 29.4-6. A patched version of the package is available...

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

NPM: FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix vulnerability discovered by ? in WordPress Npm frontmcp versions = 1.2.1, 1.5.0...

CLSA-2026-1789162879 TuxCare security update for validator (1 CVE)

TuxCare rebuilt validator to address 1 CVE. Fixed in 4.4.0-tuxcare.2...

EUVD-2026-42968

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover...

GHSA-99H5-JHH7-V3R3 Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

CLSA-2026-1789161495 TuxCare security update for mout (1 CVE)

TuxCare rebuilt mout to address 1 CVE. Fixed in 0.11.1-tuxcare.2...

CLSA-2026-1789159763 TuxCare security update for fresh (1 CVE)

TuxCare rebuilt fresh to address 1 CVE. Fixed in 0.2.2-tuxcare.1...

CLSA-2026-1789159265 TuxCare security update for 123 packages (1 CVE)

TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 11.0.31.tuxcare0001...

AZL-100118 CVE-2026-89708 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...

CVE-2026-89667

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

DEBIAN-CVE-2026-89570

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-free in the MCE handler. The notifier was registered per memory device a...

UBUNTU-CVE-2026-89667

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...

CVE-2026-89667 nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache

In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsdfile from the rhashtable and then call nfsdfiledisposelistdelayed to move it to the...