CVE-2026-40458 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-48XP-R2J8-CFX4 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-vmware, linux-qemu, linux-aws...

GHSA-JCJ3-VP6R-4J69 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-vmware, linux-qemu, linux-aws...

GHSA-5J7X-34CH-2FXF vulnerabilities

Vulnerabilities for packages: linux-azure, linux-gcp, linux-vmware, linux-qemu, linux-aws...

CVE-2026-5928 vulnerabilities

Vulnerabilities for packages: glibc...

CVE-2026-43018

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in hcileremoteconnparamreqevt hciconn lookup and field access must be covered by hdev lock in hcileremoteconnparamreqevt, otherwise it's possible it is freed concurrently. Extend the...

CVE-2026-43051

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacomintuosbtirq The wacomintuosbtirq function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when...

CVE-2026-31779

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwlmvmndmatchinfohandler The memcpy function assumes the dynamic array notif-matches is at least as large as the number of bytes to copy. Otherwise, results-matches may...

CVE-2026-31714

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fsrename syzbot reported a f2fs bug as below: BUG: memory leak unreferenced object 0xffff888127f70830 size 16: comm "syz.0.23", pid 6144, jiffies 4294943712 hex dump first 16 bytes: 3c af 57 72...

CVE-2026-31709

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl buildsecdesc and idmodetocifsacl derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild the chmod/chown security...

GHSA-WR5X-GH5C-99V2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6761 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6770 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-5WVF-8JJJ-7W99 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6785 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-7320

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1...

CVE-2026-41603

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

SUSE CVE-2026-35328

unknown...

yggdrasil security update

0.4.8-4 - Bump release for rebuild...

CVE-2026-41604

Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...