CLEANSTART-2026-JZ98536 Security fixes in kumactl 2.14.0-r3

Package kumactl version 2.14.0-r3 fixes 1 vulnerabilities: ghsa-gcjh-h69q-9w9g...

CLEANSTART-2026-CQ39898 Security fixes in velero-fips 1.18.2-r6

Package velero-fips version 1.18.2-r6 fixes 13 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-QC88061 Security fixes in weaviate-fips 1.38.6-r2

Package weaviate-fips version 1.38.6-r2 fixes 1 vulnerabilities: CVE-2026-14362...

OPENSUSE-SU-2026:11505-1 jetty-annotations-9.4.58-5.1 on GA media

These are all security issues fixed in the jetty-annotations-9.4.58-5.1 package on the GA media of openSUSE Tumbleweed...

[slackware-security] openssh

New openssh packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssh-10.5p1-i586-1slack15.0.txz: Upgraded. This release contains a number of security fixes and small bugfixes. For more...

UBUNTU-CVE-2026-19546

A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...

RHSA-2026:52928 Red Hat Security Advisory: postgresql-jdbc security update

Bulletin has no description...

ROOT-OS-ALPINE-322-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root

Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-21353 CVE-2021-21353 in pug - Patched by Root

Root has patched CVE-2021-21353 in the pug package for Root:npm. Multiple fixed versions available...

Critical: Red Hat Security Advisory: RHOAI 3.4.3 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.4.3 provides these changes:...

chromedriver-151.0.7922.108-1.1 on GA media (moderate)

chromedriver-151.0.7922.108-1.1 on GA media Announcement ID: openSUSE-SU-2026:11484-1 Rating: moderate Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145 CVE-2026-19146 CVE-2026-19147...

MGASA-2026-0329 Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

CVE-2026-68406

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range. Reject out-of-range values before using them in the parser capability bit test using...

CVE-2026-68392

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpairdevice/disconnectsync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Take hdev-lock for hciconn lookup and hciabortconn. Don't use RCU to ensur...

CVE-2026-68426

CVE-2026-68426 affects the Linux kernel xfrm subsystem. A bug in async crypto handling can leave skb->prev pointing to freed memory when GSO segments are stolen, causing a use-after-free. Reported impact includes potential denial of service or, in some cases, arbitrary code execution. The fix ...

CVE-2026-68417

The CVE-2026-68417 issue affects the Linux kernel RDMA/siw component. Root cause: siw_create_qp() calls siw_qp_add() before QP state/queues/CQs/completion/device list are fully initialized, allowing a QPN lookup to reach a QP still under construction. The remediation implemented in the public des...

EUVD-2026-55561

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

CVE-2026-68311 wifi: mt76: mt7925: guard link STA in decap offload

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925stasetdecapoffload iterates over the vif validlinks mask when updating decap offload state for an MLO station. The station may not have a link STA for every valid link of...

CVE-2026-68279

The CVE-2026-68279 issue affects the Linux kernel DRM/DP MST path. Specifically, drm_dp_sideband_parse_remote_dpcd_read() and drm_dp_sideband_parse_remote_i2c_read_ack() read num_bytes from raw->msg and then memcpy(bytes, &raw->msg[idx], num_bytes) without validating that idx + num_bytes cu...