CLSA-2026-1777941038 LibRaw: Fix of CVE-2026-21413

CVE-2026-21413: fix heap-based buffer overflow in LibRaw::losslessjpegloadraw by adding unsignedcol rawwidth bounds check before the RAWrow, col write...

CLSA-2026-1777939719 sudo: Fix of CVE-2026-35535

CVE-2026-35535: make privilege drop failure fatal before running the mailer...

PT-2026-37366

These are all security issues fixed in the grafana-11.6.14+security01-3.1 package on the GA media of openSUSE Tumbleweed...

Moderate: python-tornado security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

dpkg-1.22.22-1.1 on GA media (moderate)

dpkg-1.22.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10675-1 Rating: moderate Cross-References: CVE-2026-2219 CVSS scores: CVE-2026-2219 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-2219 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

ALSA-2026:13642 Important: image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For more details about the security issues, including the impact, a CVSS score,...

PT-2026-37067

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dmaengine idxd component where the workqueue associated with a Data Streaming Accelerator DSA or Intel Analytics Accelerator IAA device is not released when t...

Moderate: systemd security update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

curl-8.20.0-1.1 on GA media (moderate)

curl-8.20.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10674-1 Rating: moderate Cross-References: CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVSS scores: CVE-2026-4873 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-4873 SUSE : 6.3...

[slackware-security] httpd

New httpd packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/httpd-2.4.67-i586-1slack15.0.txz: Upgraded. This release fixes bugs and the following security issues: modproxyajp: Heap Over-Read and...

EUVD-2026-27109

n8n is an open source workflow automation platform. Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create or modify workflows containing a Python Code Node could escape the sandbox and achieve arbitrary code execution on the task runner container. This...

CVE-2026-42091

CVE-2026-42091 affects goshs (Go SimpleHTTPServer). Prior to v2.0.2, the PUT upload handler lacks CSRF validation (unlike POST), and the preflight OPTIONS handler uses Access-Control-Allow-Origin: *. Combined, this enables cross-origin writes of arbitrary files to a goshs instance via the victim’...

OPENSUSE-SU-2026:10670-1 avahi-0.8-43.1 on GA media

These are all security issues fixed in the avahi-0.8-43.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10675-1 dpkg-1.22.22-1.1 on GA media

These are all security issues fixed in the dpkg-1.22.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10686-1 libwireshark19-4.6.5-1.1 on GA media

These are all security issues fixed in the libwireshark19-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-31670 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31670 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-23302 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31672 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31672 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

RLSA-2026:12310 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Privilege escalation due to failu...

OESA-2026-2181 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light Magic for use in computer imaging applications. Security Fixes: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture...