ALSA-2026:38995 Important: go-toolset:rhel8 security, bug fix, and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang: golang crypto/x509: Deni...

Important: go-toolset:rhel8 security, bug fix, and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 crypto/x509: golang: golang crypto/x509: Deni...

PT-2026-59749

Impact When mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes. cpp Status GraphDefImporter::ConvertNodeDefOpBuilder &builder, ConversionState &s, const NodeDef &node VLOG4 op def; else auto it = function op defs .findnode.op; if it == function op...

Security update for agama (important)

openSUSE security update: security update for agama ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21292-1 Rating: important References: bsc1270526 bsc1270602 bsc1270678 bsc1270784 bsc1270850 bsc1270891 bsc1270992 Cross-References: CVE-2026-41677...

Fedora 44 : breezy (2026-c872d91489)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c872d91489 advisory. Allow PyO3 0.29, which fixes RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Update to 3.3.21, including upstream fixes for compatibility with dulwich 0.25 and late...

kernel security, bug fix, and enhancement update

4.18.0-553.141.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

BIT-NEXTCLOUD-2023-28999 Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files,...

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues The following security issues were fixed: CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats...

CVE-2026-15477 Bahmni bahmnicore Search Endpoint sql additionalParams sql injection

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

Fedora 44 : p11-kit (2026-695fd36daa)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-695fd36daa advisory. - server: fixed stack exhaustion via unbounded recursion in RPC attribute parsing by enforcing a recursion depth limit CVE-2026-13757 - fixed confusing error...

PT-2026-57831

These are all security issues fixed in the libopenbabel8-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57830

These are all security issues fixed in the libxml2-16-2.15.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11256-1 busybox-1.38.0-1.1 on GA media

These are all security issues fixed in the busybox-1.38.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57833

These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11257-1 freetype2-devel-2.14.3-1.1 on GA media

These are all security issues fixed in the freetype2-devel-2.14.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11255-1 afterburn-5.10.0.git73.b97f772-1.1 on GA media

These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-1.1 package on the GA media of openSUSE Tumbleweed...

Chromium: CVE-2026-13785 Use after free in Bluetooth

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Updated libarchive packages fix security vulnerabilities

The updated packages fix bugs including security ones...

MGASA-2026-0241 Updated libarchive packages fix security vulnerabilities

The updated packages fix bugs including security ones...

`rustybuzz` is unmaintained

The current maintainer of rustybuzz has stated that the crate is unmaintained and will not receive further fixes or updates see the referenced issue. Alternatives - harfrust, an actively maintained and updated alternative which is part of the Harfbuzz project...