Security update for ffmpeg

This update for ffmpeg fixes the following issue CVE-2025-10256: NULL pointer dereference in Firequalizer filter bsc1249431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

CVE-2026-16409

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16409

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

CVE-2026-16409 Invalid pointer in the Security: PSM component

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...

EUVD-2026-46247

Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153...

CVE-2026-63997

A flaw was found in the ethtool module of the Linux kernel. The moduleflashfwschedule function fails to properly undo the setting of the 'inprogress' flag and the taking of the netdev reference during module flash errors. This oversight can lead to a resource leak, preventing the device from bein...

[SECURITY] [DLA 4692-1] samba security update

Debian LTS Advisory DLA-4692-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 21, 2026 https://wiki.debian.org/LTS Package : samba Version : 2:4.13.13+dfsg-1deb11u8 CVE ID : CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480 Several...

CVE-2026-64138

A flaw was found in the ksmbd module of the Linux kernel. This vulnerability arises from improper validation of Security Identifiers SIDs within the NT Security Descriptor smbntsd during Access Control List ACL inheritance. An attacker could exploit this to bypass intended security restrictions,...

postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module

A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as ...

CVE-2026-63844

A flaw was found in the drm/amdgpu/jpeg module of the Linux kernel. A local user could trigger a Denial of Service DoS by submitting commands with 64-bit user fences to the JPEG rings, which do not support such operations. This could lead to system instability or a crash. The vulnerability has be...

CVE-2026-63805

A flaw was found in the Linux kernel's cryptographic module. An issue with how the nxcryptoctxexit function handles arguments can cause the kernel to crash. This vulnerability could be exploited by a local user, leading to a Denial of Service DoS for the affected system...

CVE-2026-53385

A flaw was found in the Linux kernel's vcscreen module. A race condition in the vcswrite function can lead to a null pointer dereference. This occurs when the vcdata pointer becomes stale during concurrent write operations, and a subsequent call attempts to use the now-invalid pointer. A local...

CVE-2026-64092

A flaw was found in the Linux kernel's batman-adv module, specifically within the tpmeter component. The batadvtpreceivershutdown function, responsible for releasing tpvars references, contains flawed logic for coordinating this release during receiver shutdown. This can lead to a reference leak,...

CVE-2026-64095

A flaw was found in the Linux kernel's batman-adv module, which handles bridge loop avoidance. A race condition allows the bla.numrequests counter to be decremented multiple times due to non-atomic operations. This can lead to an inconsistent state within the kernel, potentially enabling a local...

CVE-2026-64140

A flaw was found in the Linux kernel's ksmbd module. A local user, or a remote authenticated user, could trigger a null pointer dereference by reading the /proc/fs/ksmbd/files entry after an SMB2 client with a durable handle logs off. This vulnerability can lead to a kernel panic, resulting in a...

CVE-2026-64044

A flaw was found in the Linux kernel's OpenVPN ovpn module. An error in the ovpnnlpeernewdoit function's error handling for TCP connections can lead to a use-after-free vulnerability. This occurs because the peer's memory is prematurely released while userspace processes may still hold active...

CVE-2026-64043

A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial...

CVE-2026-64147

A flaw was found in the Linux kernel's pdscore module. This vulnerability can lead to a resource leak due to unreleased dentry references during firmware reset recovery. Furthermore, improper error handling when the debug file system debugfs is disabled could cause the system to crash, resulting ...

CVE-2026-64089

A flaw was found in the Linux kernel's batman-adv module. An integer overflow vulnerability in the lastchangesetlen field can cause it to become a negative value. This leads to a buffer being improperly initialized, potentially exposing sensitive information. A local attacker could exploit this t...

CVE-2026-64045

A flaw was found in the Linux kernel's OpenVPN ovpn TCP module. A race condition in the ovpntcpclose function allows it to access memory after it has been freed. This vulnerability arises when the function attempts to use a socket peer pointer after its associated socket object has been...