PT-2026-56861

Name of the Vulnerable Software and Affected Versions openSUSE Tumbleweed suricata package versions prior to 8.0.5-2.1 Description A UNIX Symbolic Link Symlink Following issue exists where the suricata user can escalate privileges to root. A symlink is a special type of file that serves as a...

PT-2026-56159

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, Excelize parses shared-string cell values with strconv.Atoi and checks only the upper bound before indexing the shared string slice, allowing an XLSX file containing a shared-string cell with ...

xwayland -- Multiple vulnerabilities

X.Org project reports: Multiple issues have been found in the X server and Xwayland implementations published by X.Org for which we are releasing security fixes for in xorg-server-21.1.24 and xwayland-24.1.13...

xorg-server -- Multiple vulnerabilities

X.Org project reports: Multiple issues have been found in the X server and Xwayland implementations published by X.Org for which we are releasing security fixes for in xorg-server-21.1.24 and xwayland-24.1.13...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tcp: fix potential race in tcpv6synrecvsock CVE-2026-43198 kernel: netfilter: nfnetlinkcthelper: fix OOB read in nfnlcthelperdumptable CVE-2026-43450 kernel: sctp: revalidate list cursor...

PT-2026-56151

Name of the Vulnerable Software and Affected Versions Excelize versions prior to 2.11.0 Description The checkSheet function in the library uses an attacker-controlled XML attribute value directly as the length argument to makexlsxRow, row without validating it against the Excel row limit. A...

OPENSUSE-SU-2026:11201-1 pam-1.7.2+git12-2.1 on GA media

These are all security issues fixed in the pam-1.7.2+git12-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11197-1 apptainer-1.5.1-3.1 on GA media

These are all security issues fixed in the apptainer-1.5.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11207-1 libsuricata8_0_5-8.0.5-2.1 on GA media

These are all security issues fixed in the libsuricata805-8.0.5-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11209-1 tomcat10-10.1.56-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.56-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11200-1 heroic-games-launcher-2.22.0-4.1 on GA media

These are all security issues fixed in the heroic-games-launcher-2.22.0-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11202-1 python313-Protego-0.6.2-1.1 on GA media

These are all security issues fixed in the python313-Protego-0.6.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11208-1 tomcat-9.0.119-1.1 on GA media

These are all security issues fixed in the tomcat-9.0.119-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media

These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11206-1 sccache-0.16.0~0-2.1 on GA media

These are all security issues fixed in the sccache-0.16.00-2.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2026:36049 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 kernel: gfs2: Fix use-after-free in iomap inline...

OPENSUSE-SU-2026:11205-1 rustup-1.28.2~0-4.1 on GA media

These are all security issues fixed in the rustup-1.28.20-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11204-1 ruby4.0-rubygem-uri-1.1.1-1.1 on GA media

These are all security issues fixed in the ruby4.0-rubygem-uri-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56158

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. Prior to 2.11.0, the streaming worksheet reader used by Rows and GetRows does not enforce the TotalRows limit on the row r attribute, allowing a small XLSX file with a row number above 1048576 and no cell...

Important: Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update

An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...