GHSA-GFWX-W7GR-FVH7 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, py3-nltk, label-studio, apache-beam-python-3.11-sdk, nemo, open-webui, kubeflow-pipelines-visualization-server...

golang security update

1.25.8-1 - Update to Go 1.25.8 fips-1...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: nats, k3s, kine, nats-top, telegraf...

CVE-2026-33218 vulnerabilities

Vulnerabilities for packages: nats, k3s, kine, nats-top, telegraf...

GHSA-FCJP-H8CC-6879 vulnerabilities

Vulnerabilities for packages: nats, k3s, kine, nats-top, telegraf...

GHSA-V722-JCV5-W7MC vulnerabilities

Vulnerabilities for packages: nats, k3s, kine, nats-top, telegraf...

GHSA-52JH-2XXH-PWH6 vulnerabilities

Vulnerabilities for packages: nats, k3s, kine, nats-top, telegraf...

CVE-2025-64324 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64433 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PWX7-FX9R-HR4H vulnerabilities

Vulnerabilities for packages: nats-fips, telegraf, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter, milvus, kine, nats-top-fips, k3s, rke2-runtime, nats, rke2-runtime-fips...

GHSA-JXXM-27VP-C3M5 vulnerabilities

Vulnerabilities for packages: nats-fips, telegraf, prometheus-nats-exporter-fips, nats-top, prometheus-nats-exporter, milvus, kine, nats-top-fips, k3s, rke2-runtime, nats, rke2-runtime-fips...

SUSE CVE-2026-4690

Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

SUSE CVE-2026-4751

NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0...

CVE-2026-23389

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in icesetringparam In icesetringparam, txrings and xdprings are allocated before rxrings. If the allocation of rxrings fails, the code jumps to the done label leaking both txrings and xdprings. Furthermore, i...

CVE-2026-23382

In the Linux kernel, the following vulnerability has been resolved: HID: Add HIDCLAIMEDINPUT guards in rawevent callbacks missing them In commit 2ff5baa9b527 "HID: appleir: Fix potential NULL dereference at raw event handle", we handle the fact that raw event callbacks can happen even for a HID...

CVE-2026-23380

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARNON in tracingbuffersmmapclose When a process forks, the child process copies the parent's VMAs but the usermapped reference count is not incremented. As a result, when both the parent and child processes exit,...

CVE-2026-23345

In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTESHARED on GCS mappings if FEATLPA2 is enabled When FEATLPA2 is enabled, bits 8-9 of the PTE replace the shareability attribute with bits 50-51 of the output address. The PAGEGCS,RO definitions include th...

CVE-2026-23342

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPTRT On PREEMPTRT kernels, the per-CPU xdpbulkqueue bq can be accessed concurrently by multiple preemptible tasks on the same CPU. The original code assumes bqenqueue and cpumapflush run atomically...

CVE-2026-23341

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context If userspace issues an ioctl to destroy a hardware context that has already been automatically suspended, the driver may crash because the mailbox channel...

CVE-2026-23325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible oob access in mt7996macwritetxwi80211 Check frame length before accessing the mgmt fields in mt7996macwritetxwi80211 in order to avoid a possible oob access...