CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2

CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2. A patched version of the package is available...

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

CVE-2026-5107 affecting package frr for versions less than 10.5.0-2

CVE-2026-5107 affecting package frr for versions less than 10.5.0-2. A patched version of the package is available...

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17

CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17. A patched version of the package is available...

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-4647 affecting package crash for versions less than 9.0.0-2

CVE-2026-4647 affecting package crash for versions less than 9.0.0-2. A patched version of the package is available...

CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

SUSE CVE-2026-39817

The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: tempo, mesosphere-vsphere-csi, flyte, certificate-transparency, sftpgo-plugin-pubsub, thanos, helm, lazydocker, redpanda, kubernetes, metrics-server, cloudnative-pg, zot, argo-workflows, tetragon, runc, apache-exporter, lvm-driver, aws-flb-cloudwatch, contour, grafan...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: tempo, mesosphere-vsphere-csi, flyte, certificate-transparency, sftpgo-plugin-pubsub, thanos, helm, lazydocker, victoriametrics, local-static-provisioner, pdfcpu, consul-k8s, ratify, kbld, kubernetes, litefs, redpanda, metrics-server, cloudnative-pg, zot,...

GHSA-3V3M-WC6V-X4X3 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3control, cert-exporter-fips, addon-resizer, lvm-driver-fips, tekton-chains-fips, gcp-compute-persistent-disk-csi-driver, nfs-subdir-external-provisioner-fips, wazero-fips, helm-operator, ipfs-cluster-fips,...

CVE-2026-42880 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater...

GHSA-3V3M-WC6V-X4X3 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater...

GHSA-VF5J-865M-MQ7C vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

CVE-2026-43471

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix possible NULL pointer dereference in ufshcdaddcommandtrace The kernel log indicates a crash in ufshcdaddcommandtrace, due to a NULL pointer dereference when accessing hwq-id. This can happen if...

CVE-2026-43446

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix runtime suspend deadlock when there is pending job The runtime suspend callback drains the running job workqueue before suspending the device. If a job is still executing and calls pmruntimeresumeandget, it can...