GHSA-6Q42-8X5P-5C72 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-azure, linux-gcp, linux-aws...

GHSA-XG28-VM4V-PCGP vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-azure, linux-gcp, linux-aws...

SUSE CVE-2026-0882

Use-after-free in the IPC component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2025-70968

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE...

CVE-2026-0877

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2026-0892

Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

CVE-2026-0885

Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

CVE-2026-0881

Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

ROS-20260113-7379

Vulnerability in kernel-lt related to insufficient control of the resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

wireshark: Access of Uninitialized Pointer in Wireshark

An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26

CVE-2025-61661 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-2924 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-2924 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7

CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7. A patched version of the package is available...

CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1

CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4

CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...

GHSA-4F6G-68PF-7VHV vulnerabilities

Vulnerabilities for packages: open-webui...

wireshark: Access of Uninitialized Pointer in Wireshark

An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...

ROS-20260112-7309

A vulnerability in the llcpsock.c component of the Linux kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service as well...