OPENSUSE-SU-2026:11382-1 yq-4.53.3-1.2 on GA media

These are all security issues fixed in the yq-4.53.3-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11379-1 spice-vdagent-0.23.0-4.1 on GA media

These are all security issues fixed in the spice-vdagent-0.23.0-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-65073

These are all security issues fixed in the spice-vdagent-0.23.0-4.1 package on the GA media of openSUSE Tumbleweed...

AZL-93746 CVE-2026-64324 affecting package kernel for versions less than 6.6.145.2-1

In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A crafted extent can pass the...

Denial Of Service (DoS)

Next.js is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of requests targeting App Router applications with Server Actions running on the Edge runtime, allowing attackers to trigger excessive memory consumption and degrade application availability...

google-osconfig-agent-20260708.00-3.1 on GA media (moderate)

google-osconfig-agent-20260708.00-3.1 on GA media Announcement ID: openSUSE-SU-2026:11349-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...

ffmpeg-8-8.1.2-2.1 on GA media (moderate)

ffmpeg-8-8.1.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11347-1 Rating: moderate Cross-References: CVE-2026-12706 CVE-2026-8461 CVSS scores: CVE-2026-12706 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-8461 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...

Linux Distros Unpatched Vulnerability : CVE-2026-13074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello...

CVE-2026-64324: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A crafted extent can pass the...

GHSA-6VCH-Q96H-7GC3 etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Impact What kind of vulnerability is it? Who is impacted? A network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. Each connection spawns a goroutine in the etcd server process that blocks indefinitely inside tls.Conn.Handshake, and each is...

OPENSUSE-SU-2026:11372-1 python313-sh-2.3.0-1.1 on GA media

These are all security issues fixed in the python313-sh-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11367-1 libnutclient2-2.8.5-2.1 on GA media

These are all security issues fixed in the libnutclient2-2.8.5-2.1 package on the GA media of openSUSE Tumbleweed...

java-11-openjdk-11.0.32.0-1.1 on GA media (moderate)

java-11-openjdk-11.0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11335-1 Rating: moderate Cross-References: CVE-2026-41254 CVE-2026-46917 CVE-2026-46968 CVE-2026-47010 CVE-2026-47021 CVE-2026-47027 CVE-2026-47057 CVE-2026-47058 CVE-2026-47059 CVE-2026-47063 CVE-2026-60147 CVSS scores:...

python313-3.13.14-1.1 on GA media (moderate)

python313-3.13.14-1.1 on GA media Announcement ID: openSUSE-SU-2026:11342-1 Rating: moderate Cross-References: CVE-2021-4189 CVE-2025-15366 CVE-2025-15367 CVE-2026-11940 CVE-2026-7210 CVE-2026-8328 CVSS scores: CVE-2021-4189 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-15366...

prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media (moderate)

prometheus-haclusterexporter-1.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11340-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1...

OPENSUSE-SU-2026:11361-1 ffmpeg-7-7.1.4-5.1 on GA media

These are all security issues fixed in the ffmpeg-7-7.1.4-5.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260724-73-0014

The vulnerability of Google Chrome’s V8 JavaScript engine lies in the access to resources through incompatible types. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OPENSUSE-SU-2026:11368-1 openjfx-17.0.20.0-1.1 on GA media

These are all security issues fixed in the openjfx-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11366-1 mcphost-0.34.0-9.1 on GA media

These are all security issues fixed in the mcphost-0.34.0-9.1 package on the GA media of openSUSE Tumbleweed...

The vulnerabilities of the functions xfs_reflink_fill_cow_hole() and xfs_reflink_fill_delalloc() in the fs/xfs/xfs_reflink.c module of the Linux operating system’s file system XFS allow a attacker to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...