GHSA-JPCW-4WR7-C3VQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, grafana, crossplane-provider-aws-s3, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sns, terraform-provider-grafana, crossplane-provider-aws-sqs, timoni, crossplane-provider-aws-firehos...

GHSA-R277-6W6Q-XMQW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, grafana, crossplane-provider-aws-s3, crossplane-provider-aws-cloudformation, crossplane-provider-aws-sns, terraform-provider-grafana, crossplane-provider-aws-sqs, timoni, crossplane-provider-aws-firehos...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: debezium-connector-spanner, spark, cassandra-reaper, druid, opensearch, cassandra, debezium-connector-informix, wildfly, debezium-connector-vitess, kafka, sonarqube, logstash, thingsboard, apache-nifi, debezium-connector-ibmi, apache-pulsar, strimzi-kafka-operator,...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: debezium-connector-spanner, spark, cassandra-reaper, druid, opensearch, cassandra, debezium-connector-informix, wildfly, debezium-connector-vitess, kafka, sonarqube, logstash, thingsboard, apache-nifi, debezium-connector-ibmi, apache-pulsar, strimzi-kafka-operator,...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: cassandra, hadoop-fips, apache-pulsar-fips, thingsboard, commercial-elasticsearch, cassandra-reaper, wazuh-indexer, elasticsearch, kafbat-ui-fips, knative-kafka-broker-fips, dependency-track-apiserver, debezium-connector-spanner, kafbat-ui, debezium-connector-ibmi,...

GHSA-XX22-P4CH-683R vulnerabilities

Vulnerabilities for packages: cassandra, hadoop-fips, apache-pulsar-fips, thingsboard, commercial-elasticsearch, cassandra-reaper, wazuh-indexer, elasticsearch, kafbat-ui-fips, knative-kafka-broker-fips, dependency-track-apiserver, debezium-connector-spanner, kafbat-ui, debezium-connector-ibmi,...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-64386

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix queryinfo replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit fails before the next send, cleanup retains the previous buffer type and...

CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

CVE-2026-64528

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged 1. When console flow control is enabled UPFCONSFLOW, s3c24xxserialstoptx calls...

CVE-2026-64526

In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnlopscomplete tsconfigpreparedata calls ethnlopsbegin, we need to call ethnlopscomplete before returning the error...

CVE-2026-64524

In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolutioncount and fix WIN8 fallback A SYNTHVIDRESOLUTIONRESPONSE with resolutioncount 64 walks past the supportedresolutionSYNTHVIDMAXRESOLUTIONCOUNT array in the parse loop. Bound resolutioncount against t...

CVE-2026-64523

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Take a long-lived file reference at submit handshakenlacceptdoit needs the file pointer backing req-hrsk-sksocket to survive the window between handshakereqnext and the subsequent FDPREPARE and getfile. The...

CVE-2026-64520

In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Bound PARTITIONINFOGETREGS copies The register-based PARTITIONINFOGET path trusted the firmware-provided indices when copying partition descriptors into the caller buffer. Reject inconsistent counts or index...

CVE-2026-64521

In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconfpinsshow holds pctldev-mutex, and the platform driver calls pinctrlfindgpiorangefrompin, which tries to acquire the same...

CVE-2026-64519

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocation findonesbstid skips stids whose scstatus is non-zero, but the SCTYPELAYOUT case in nfsd4revokestates never sets scstatus before calling nfsd4closelayout. The retry loop therefore...

CVE-2026-64518

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcpaoestablishedkey. lockdepsockisheld was added in tcpaoestablishedkey by the cited commit. It can be called from tcpv46timewaitack with twsk. Since it does not have sk-sklock, the lockd...

CVE-2026-64516

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCPU BO contains the actual FW at an offset, but it was not calculated into the VCPU BO size. Subtract this from the FW size to make sure there is no out of bounds access...

CVE-2026-64517

In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xegscinitposthwconfig explicitly frees a BO allocated with xemanagedbocreatepinmap via xebounpinmapnovm. Since the managed BO already has a devm cleanup...