OPENSUSE-SU-2026:11647-1 httpcomponents-client-4.5.14-2.1 on GA media

These are all security issues fixed in the httpcomponents-client-4.5.14-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-83530

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.6.29 Description A remote cross site scripting issue exists within the Hidden Album Update Endpoint in the db input.php file. Cross site scripting is a technique where malicious scripts are injected...

CVE-2026-82483: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown function of the file dbinput.php of the component Hidden Album Update Endpoint. The manipulation results in cross site scripting. The attack can be launched remotely. The exploit is n...

grafana-12.4.5-4.1 on GA media (moderate)

grafana-12.4.5-4.1 on GA media Announcement ID: openSUSE-SU-2026:11619-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-21723 CVE-2026-33814 CVE-2026-39882 CVE-2026-8609 CVE-2026-9029 CVSS scores: CVE-2026-1229 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CVE-2026-1229 SUSE :...

Security update for v2ray-core (important)

openSUSE Security Update: Security update for v2ray-core Announcement ID: openSUSE-SU-2026:0307-1 Rating: important References: 1258546 1266787 1276119 Cross-References: CVE-2026-27017 CVE-2026-39821 CVE-2026-72815 CVE-2026-72816 CVE-2026-72817 CVSS scores: CVE-2026-39821 SUSE: 9.1...

MGASA-2026-0340 Updated python-nltk packages fix security vulnerabilities

Updated packages fix security vulnerabilities. Please see the links...

Updated python-nltk packages fix security vulnerabilities

Updated packages fix security vulnerabilities. Please see the links...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.9-0.4.hum1 aarch64, x8664 grafana12.4-12.4.9-0.4.hum1.src src Security Fixes: grafana12.4: CVE-2026-73501 CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: glibc: compat-libpthread-nonshared-2.43-8.3.hum1 aarch64, x8664 glibc-2.43-8.3.hum1 aarch64, x8664 glibc-all-langpacks-2.43-8.3.hum1 aarch64, x8664 glibc-benchtests-2.43-8.3.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.2: grafana13.2-13.2.0-0.1.2.hum1 aarch64, x8664 grafana13.2-13.2.0-0.1.2.hum1.src src Security Fixes: grafana13.2: CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.159.0-0.1.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.159.0-0.1.1.hum1.src src Security Fixes:...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libevent: libevent-2.1.12-19.1.hum1 aarch64, x8664 libevent-devel-2.1.12-19.1.hum1 aarch64, x8664 libevent-doc-2.1.12-19.1.hum1 noarch libevent-2.1.12-19.1.hum1.src src Security Fixes: libevent:...

RHSA-2026:57986 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:57021 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

RHSA-2026:42825 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2026-77008 HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users to overwrite them and repoint every online classroom, along with the shared secret those sessions...

CVE-2026-77008 HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update

The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or authentication check when saving its settings, allowing unauthenticated users to overwrite them and repoint every online classroom, along with the shared secret those sessions...

WordPress HEL Online Classroom: AI-powered Online Classrooms plugin <= 1.0.3 - Unauthenticated Plugin Settings Update vulnerability

Unauthenticated Plugin Settings Update vulnerability discovered by kimsunghoon in WordPress Plugin HEL Online Classroom: AI-powered Online Classrooms versions = 1.0.3...

WordPress Booking for Appointments and Events Calendar plugin 1.2.32-2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval vulnerability

Amelia Customer+ Appointment Status Update and Self-Approval vulnerability discovered by Louise in WordPress Plugin Amelia versions 1.2.32-2.4.8...

CVE-2026-17522 Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRF

The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its settings screens, and writes every submitted parameter into its own options, allowing attackers to make a logged in administrator overwrite arbitrary Newsletters WordPress plugin...