CLSA-2025-1742471200 kernel: Fix of 21 CVEs

net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...

Security update for pacemaker (important)

openSUSE security update: security update for pacemaker ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22069-1 Rating: important References: bsc1180966 bsc1249217 bsc1255371 bsc1259345 bsc1265183 bsc1265201 bsc1268381 bsc1270354 bsc1271652 bsc12724...

Linux Distros Unpatched Vulnerability : CVE-2026-98794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: filter some flags received in the backup server While the IPVS SYNC protocol is not secure by design we can still protect the backup server from messages...

CLSA-2026-1792159914 pacemaker: Fix of CVE-2026-10649

CVE-2026-10649: fix integer overflow and unbounded allocation in remote message handling...

CVE-2026-110889

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

EUVD-2026-103283

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

PT-2026-116394

Name of the Vulnerable Software and Affected Versions Gantry 5 Framework versions prior to 5.6.4 Description The Gantry 5 Framework allows the retrieval of embedded sensitive data through the generation of error messages that contain sensitive information. Recommendations Update Gantry 5 Framewor...

PT-2026-116452

FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyo...

CVE-2026-110889: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 Framework: from n/a through 5.6.4...

PT-2026-116363

Name of the Vulnerable Software and Affected Versions User Registration & Membership versions prior to 5.2.9 Description Insufficient input sanitization in the referrer url branch of the UR Smart Tags::process function allows unauthenticated attackers to execute arbitrary registered shortcodes. T...

CVE-2026-61837

A flaw was found in RabbitMQ. The Advanced Message Queuing Protocol AMQP 1.0 management interface fails to perform proper authorization checks when processing requests for message bindings. An authenticated user without administrative privileges can exploit this issue to enumerate the complete...

CVE-2026-110658

A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...

CVE-2026-67416

A flaw was found in rabbitmq-server, where the Advanced Message Queuing Protocol AMQP parser fails to validate the length of message body descriptors. An authenticated remote attacker with write permissions can exploit this vulnerability by publishing a crafted message with an unrecognized...

CVE-2026-76894

The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via "postMessage". Its inbound "message" listener performs no "event.origin" validation, and its outbound messages are sent with target origin "''". Any window/frame able to...

pgbouncer: pgbouncer: Privilege escalation via secondary startup message during SCRAM authentication

A flaw was found in PgBouncer. An improper authentication vulnerability allows a remote attacker possessing valid credentials for any listed user to impersonate any other user configured with Salted Challenge Response Authentication Mechanism SCRAM, including PgBouncer administrators and backend...

pgbouncer: pgbouncer: Denial of Service via integer overflow in message buffer growth

A flaw was found in PgBouncer. An integer overflow in the message buffer growth logic allows a remote attacker to cause a Denial of Service DoS when a large maximum packet size is configured. By sending a specially crafted packet header declaring an excessively large length, an attacker can trigg...

CVE-2026-111640

DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog that skips the membership check for dialogs with grouptype 'okr'. Authenticated users can supply the dialogid of OKR comment dialogs to msglist, msgone, or msgsend endpoints to read and inject...

CVE-2026-111709 WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId

WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET...

CVE-2026-111709 WhaTicket Community through commit cf04795 IDOR via /tickets/:ticketId and /messages/:ticketId

WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET...

EUVD-2026-103001

WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowTicketService performs no ownership or queue checks. Attackers can supply another agent's ticket id to GET...