GHSA-JPVF-6235-4RH8 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

GHSA-PW9R-H2M6-6VVG vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

GHSA-WXVQ-PWV2-XPC3 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53180 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53184 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53186 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53189 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53195 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53196 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

GHSA-38RG-2RJC-3RMJ vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

GHSA-3J78-PF43-6MVQ vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-qemu, linux-azure, linux-vmware, linux-gcp...

PT-2026-56676

Overview The Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation task operations. It is not restricted to any particular base path, meaning that any path writable by the DSpace often 'tomcat' user is allowed...

PT-2026-56539

Name of the Vulnerable Software and Affected Versions PasswordPusher versions prior to 2.8.1 Description Insufficient validation in the valid url function allows the application to accept data URI schemes in URL push payloads. This enables attackers to create malicious pushes containing...

Security update for apache2 (important)

openSUSE security update: security update for apache2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21235-1 Rating: important References: bsc1267503 bsc1267955 bsc1267956 bsc1267962 bsc1267963 bsc1267965 bsc1267969 bsc1267970 bsc1267971 bsc1267972...

Important: firefox

Issue Overview: Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12. CVE-2026-12289 Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firef...

PT-2026-56640

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115 Description A use after free issue exists in WebRTC, which occurs when a program continues to use a pointer after it has been freed, potentially leading to memory corruption. This flaw allows a...

PT-2026-56630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115 Description A use after free issue exists in Views, which can lead to heap corruption. A remote attacker can exploit this by convincing a user to perform specific UI gestures while visiting a...

PT-2026-56410

Name of the Vulnerable Software and Affected Versions Mediküm Web versions prior to 08072026 Description Mediküm Web contains an SQL injection flaw resulting from improper neutralization of special elements used in SQL commands. This occurs due to inadequate input validation or parameterization,...

PT-2026-56412

Name of the Vulnerable Software and Affected Versions Mediküm Web versions through 08072026 Description Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting XSS, a condition where malicious scripts are permanently stored on the target server and serve...

PT-2026-56466

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.16 Description An issue exists in the ScopedFs component where the system validates the nearest existing ancestor of a dangling symlink as being within scope and subsequently follows that symlink during file...