GHSA-PPM8-GJFW-8977 vulnerabilities

Vulnerabilities for packages: ffmpeg...

python314-3.14.2-1.1 on GA media (moderate)

python314-3.14.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10011-1 Rating: moderate Cross-References: CVE-2025-12084 CVE-2025-13836 CVE-2025-13837 CVSS scores: CVE-2025-12084 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2025-12084 SUSE : 6.3...

OPENSUSE-SU-2026:10014-1 python311-cbor2-5.8.0-2.1 on GA media

These are all security issues fixed in the python311-cbor2-5.8.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10010-1 python311-filelock-3.20.2-1.1 on GA media

These are all security issues fixed in the python311-filelock-3.20.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10009-1 log4j-2.20.0-1.1 on GA media

These are all security issues fixed in the log4j-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10011-1 python314-3.14.2-1.1 on GA media

These are all security issues fixed in the python314-3.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10007-1 c-ares-devel-1.34.6-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.34.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10005-1 python312-Django6-6.0-1.1 on GA media

These are all security issues fixed in the python312-Django6-6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10004-1 fluidsynth-2.5.2-1.1 on GA media

These are all security issues fixed in the fluidsynth-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10003-1 python311-marshmallow-3.26.2-1.1 on GA media

These are all security issues fixed in the python311-marshmallow-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed...

libmatio-devel-1.5.29-1.1 on GA media (moderate)

libmatio-devel-1.5.29-1.1 on GA media Announcement ID: openSUSE-SU-2026:10002-1 Rating: moderate Cross-References: CVE-2025-2337 CVE-2025-2338 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in t...

PT-2026-25095

Name of the Vulnerable Software and Affected Versions qemu affected versions not specified Description The description provides information about security issues that were resolved in the qemu-10.2.2-1.1 package on openSUSE Tumbleweed. The nature of these security issues is not detailed in the...

OPENSUSE-SU-2026:10001-1 dirmngr-2.5.16-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.16-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2022-50851

In the Linux kernel, the following vulnerability has been resolved: vhostvdpa: fix the crash in unmap a large memory While testing in vIOMMU, sometimes Guest will unmap very large memory, which will cause the crash. To fix this, add a new function vhostvdpageneralunmap. This function will only...

WordPress GDPR Cookie Compliance plugin < 4.15.7 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin GDPR Cookie Compliance versions 4.15.7...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992818 advisory. In the Linux kernel, the following vulnerability has been resolved: fs: fix UAF/GPF bug in nilfsmdtdestroy In allocinode, inodeinitalways could return -ENOMEM if...

WordPress GDPR Cookie Compliance plugin < 4.15.9 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin GDPR Cookie Compliance versions 4.15.9...

CVE-2025-66080

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.3...

CVE-2025-66080 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.0.3...

CVE-2025-66080

CVE-2025-66080 affects Cookie Banner for GDPR / CCPA – WPLP Cookie Consent (WordPress plugin) and is a Missing Authorization vulnerability. Wordfence reports affected versions up to 4.0.3 with Patched status in later updates; exploitation would involve access-control bypass via misconfigured secu...