OPENSUSE-SU-2026:21213-1 Security update for containerd

This update for containerd fixes the following issues Update to 1.7.33: - CVE-2024-25621: overly broad default permission vulnerability bsc1253126. - CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host bsc1253132. - CVE-2026-33186: google.golang.org/grpc: authorization bypas...

BELL-CVE-2026-53354

Bulletin has no description...

BELL-CVE-2026-53327

Bulletin has no description...

CVE-2025-71231

creationtimestamp| type| source ---|---|--- 2026-07-02 05:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

MINI-59X9-5GMX-V7M3

Bulletin has no description...

MINI-MR33-P69R-G3GQ

Bulletin has no description...

MINI-89V2-2HPM-7J46

Bulletin has no description...

MINI-HM85-47J3-F394

Bulletin has no description...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

PT-2026-54613

Name of the Vulnerable Software and Affected Versions Fluent Forms versions prior to 6.2.5 Description An Insecure Direct Object Reference IDOR exists when the software does not properly restrict the deletion of form submission entries. This allows a user with Manager privileges, who is restricte...

CVE-2026-58653: Authorization Bypass Through User-Controlled Key

PraisonAI before 0.1.7 fails to validate that projectid in issue create and update request bodies belongs to the URL workspace. An attacker can create issues referencing projects from other workspaces, causing cross-tenant data pollution in project statistics aggregation without workspace...

ALSA-2026:34911 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CVE-2026-43112 kernel: rxrpc: Fix potential UAF after skbunshare failure CVE-2026-45998 kernel: drm/gem: Fix inconsistent plan...

PT-2026-55308

Name of the Vulnerable Software and Affected Versions UTT nv518G nv518GV3 version 3.2.7-210919-161313 Description A remote attacker can cause a denial of service through the gohead/sub 445C5C component. Recommendations At the moment, there is no information about a newer version that contains a f...

CVE-2026-50282: Missing Authorization

Craft CMS is a content management system CMS. Versions 5.0.0-RC1 and above, prior to 5.9.21 and versions 4.0.0-RC1 and above prior to 4.17.14 contain an authorization issue where a forced folder move can delete a conflicting destination folder without destination delete permission. Function...

ROS-20260702-73-0084

The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-14428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer...

Linux Distros Unpatched Vulnerability : CVE-2026-53337

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bonding: fix NULL pointer dereference in bonddoioctl In bonddoioctl, slavedev is obtained via devgetbyname which can return NULL if the requested interfac...

Linux Distros Unpatched Vulnerability : CVE-2026-53327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a...

SUSE SLES15 Security Update : python311 (SUSE-SU-2026:2723-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2723-1 advisory. Security issues fixed: - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be...

Oracle Linux 9 : php (ELSA-2026-33449)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-33449 advisory. - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in phpmbcheckencoding via mberegsearchinit CVE-2026-7259 - Fix Stale...