CVE-2026-84304 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-84304 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package kubernetes for versions less than 1.30.10-31

CVE-2026-84304 affecting package kubernetes for versions less than 1.30.10-31. A patched version of the package is available...

CVE-2026-84304 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-84304 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-56855 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-56855 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-84304 affecting package moby-containerd-cc for versions less than 1.7.7-18

CVE-2026-84304 affecting package moby-containerd-cc for versions less than 1.7.7-18. A patched version of the package is available...

CVE-2026-84445 affecting package docker-compose for versions less than 2.27.0-15

CVE-2026-84445 affecting package docker-compose for versions less than 2.27.0-15. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package cri-tools for versions less than 1.32.0-9

CVE-2026-84304 affecting package cri-tools for versions less than 1.32.0-9. A patched version of the package is available...

CVE-2026-78662 affecting package moby-engine for versions less than 25.0.3-21

CVE-2026-78662 affecting package moby-engine for versions less than 25.0.3-21. A patched version of the package is available...

CVE-2026-84445 affecting package kubevirt for versions less than 1.8.4-3

CVE-2026-84445 affecting package kubevirt for versions less than 1.8.4-3. A patched version of the package is available...

CVE-2026-84304 affecting package docker-buildx for versions less than 0.14.0-18

CVE-2026-84304 affecting package docker-buildx for versions less than 0.14.0-18. A patched version of the package is available...

Updated xdg-dbus-proxy package fixes a security vulnerability

Message filtering bypass via reply serial. CVE-2026-94422...

Updated freetype2 package fixes a security vulnerability

An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TTGetVarDesign implementation used by FTGetVarDesignCoordinates. CVE-2026-50811...

Updated tomcat-native package fixes security vulnerabilities

DoS via TLS handshake. CVE-2026-86243 Insecure OpenSSL options enabled. CVE-2026-86246 Client certificate requirements can be down-graded. CVE-2026-86247...

Updated chirp packages fix a security vulnerability

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver...

SUSE CVE-2026-98251

In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovsctgetconnlabels adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may reallocate...

SUSE CVE-2026-98253

In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copytouser failure rdmajoinmulticast queues RoCE work that later reads the ucmamulticast through event-param.ud.privatedata, then listadds the CMA multicast at the head of idpriv-mclist...

SUSE CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

SUSE CVE-2026-98383

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpfskbpulldata for LWTSEG6LOCAL An LWTSEG6LOCAL program can invalidate its cached SRH with bpflwtseg6adjustsrh and then call bpfskbpulldata. The latter may reallocate skb-head, leaving the per-CPU SRH pointer...

SUSE CVE-2026-103663

Ollama is vulnerable to path traversal in the /api/pull endpoint due to insufficient validation of layer digests by the digestToPath function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious binary to be written outside the model...

CVE-2026-108093

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...