PT-2026-67222

Name of the Vulnerable Software and Affected Versions asteval versions prior to 1.0.9 Description An attacker can trigger a Denial of Service DoS by supplying specific expressions to the asteval.Interpreter.eval function. The issue occurs because the FROM PY list in asteval/astutils.py exposes...

OPENSUSE-SU-2026:11416-1 gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11429-1 python315-3.15.0~b4-1.1 on GA media

These are all security issues fixed in the python315-3.15.0b4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media

These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11431-1 ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11419-1 python313-GitPython-3.1.56-1.1 on GA media

These are all security issues fixed in the python313-GitPython-3.1.56-1.1 package on the GA media of openSUSE Tumbleweed...

Chromium: CVE-2026-17882 Policy bypass in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...

PT-2026-67348

Name of the Vulnerable Software and Affected Versions php affected versions not specified gd affected versions not specified Description Security issues were identified in the php and gd packages within the openSUSE Tumbleweed distribution. Recommendations Update php to version 8.5.9-1.1. Update ...

OPENSUSE-SU-2026:11412-1 evince-48.4-2.1 on GA media

These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11411-1 dnsdist-2.0.7-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-67257

Name of the Vulnerable Software and Affected Versions Perses versions prior to 0.54.0-rc.0 Description When using the file-system database, list endpoints bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...

The vulnerability of the leave_alt-screen() function in the drivers/tty/vt/vt.c file of the Linux kernel-based virtual terminal driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the leavealt-screen function in the drivers/tty/vt/vt.c module of the Linux kernel virtual terminal driver framework is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the f_audio_out_ep_complete() function in the drivers/usb/gadget/function/f_uac1_legacy.c file of the Linux operating system’s gadget driver framework allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the faudiooutepcomplete function in the drivers/usb/gadget/function/fuac1legacy.c file of the Linux operating system’s device drivers is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the usbtmc_release() function in the drivers/usb/class/usbtmc.c module of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbtmcrelease function in the drivers/usb/class/usbtmc.c module of the Linux device driver framework is related to the pointer being reclaimed after its expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability in the net/netfilter/nf_conntrack_netlink.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the net/netfilter/nfconntracknetlink.c module of the Linux kernel’s netfilter component is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the vxlan_na_create() function in the drivers/net/vxlan/vxlan_core.c file of the networking device driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlannacreate function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

The vulnerability of the ucsi_notify_common() function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ucsinotifycommon function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability could allow an...

The vulnerability of the cpsw_ndo_set_rx_mode_work() function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver from Texas Instruments’ Linux kernel, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver for Texas Instruments’ Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the th1520_aon_power_update() function in the drivers/firmware/thead module, located in the Linux kernel-based firmware, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the th1520aonpowerupdate function in the drivers/firmware/thead module, within the th1520-aon.c driver for Linux kernel patches, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...