perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media (moderate)

perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11158-1 Rating: moderate Cross-References: CVE-2026-56017 CVE-2026-56018 CVSS scores: CVE-2026-56017 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56017 SUSE : 8.7...

CVE-2026-10654

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack subsys/bluetooth/host/classic/rfcomm.c mishandles a simultaneous bidirectional session disconnect. When the local device has initiated a session teardown state BTRFCOMMSTATEDISCONNECTING, DISC sent, RTX timer armed and the connect...

CVE-2026-10654 RFCOMM session-disconnect race leaks session/L2CAP and denies further RFCOMM service in Zephyr Bluetooth Classic

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack subsys/bluetooth/host/classic/rfcomm.c mishandles a simultaneous bidirectional session disconnect. When the local device has initiated a session teardown state BTRFCOMMSTATEDISCONNECTING, DISC sent, RTX timer armed and the connect...

PT-2026-55174

These are all security issues fixed in the cadvisor-0.60.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55184

These are all security issues fixed in the libxreaderdocument3-4.6.5-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-10654: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in the Zephyr Bluetooth Classic RFCOMM host stack subsys/bluetooth/host/classic/rfcomm.c mishandles a simultaneous bidirectional session disconnect. When the local device has initiated a session teardown state BTRFCOMMSTATEDISCONNECTING, DISC sent, RTX timer armed and the connect...

PT-2026-55182

These are all security issues fixed in the radvd-2.21-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260630-73-0010

The vulnerability of the recoveryrequestwrite function in the drivers/md/raid10.c driver for Linux multi-device drivers RAID and LVM involves the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-55176

These are all security issues fixed in the kbfs-6.6.3-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-55178

These are all security issues fixed in the perl-CSS-Minifier-XS-0.140.0-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260630-73-0015

The vulnerability of the nouveauconnectorcreate function in the drivers/gpu/drm/nouveau/nouveauconnector.c file of the Nouveau graphics driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise...

The vulnerability of the `alloc_choose_arg_map()` function in the `net/ceph/osdmap.c` module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems

Large language models are no longer only text generators. They are increasingly embedded in retrieval pipelines, enterprise assistants, coding environments, robotic systems, security-operation workflows, and autonomous agents that can read private data, call tools, write files, execute code, and...

OPENSUSE-SU-2026:11161-1 radvd-2.21-1.1 on GA media

These are all security issues fixed in the radvd-2.21-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11152-1 amfora-1.11.0-3.1 on GA media

These are all security issues fixed in the amfora-1.11.0-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11158-1 perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media

These are all security issues fixed in the perl-JavaScript-Minifier-XS-0.160.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11160-1 python311-pydata-sphinx-theme-0.19.0-2.1 on GA media

These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

PYSEC-2026-381 Langroid has a Code Injection vulnerability in TableChatAgent

Summary TableChatAgent uses pandas eval. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. PoC For example, one could prompt the Agent: Evaluate the following pandas expression on the data provided and print output:...

OPENSUSE-SU-2026:11143-1 dash-0.5.13.4-1.1 on GA media

These are all security issues fixed in the dash-0.5.13.4-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260629-73-0042

The vulnerability of the xfrmupdateaeparams function in the net/xfrm/xfrmuser.c module, which is part of the networking functions in the Linux kernel, relates to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...