OPENSUSE-SU-2026:10151-1 python311-wheel-0.46.3-1.1 on GA media

These are all security issues fixed in the python311-wheel-0.46.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-28831

Уязвимость языка программирования Golang связана с ошибками процедуры подтверждения подлинности сертификата. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...

ROS-20260205-73-0027

A vulnerability in the rseq.c component of the Linux operating system kernel is related to the reliance on unreliable input data to make security decisions. Exploitation of the vulnerability allows an attacker to impact the confidentiality and availability of protected information...

OPENSUSE-SU-2026:10147-1 cockpit-machines-346-2.1 on GA media

These are all security issues fixed in the cockpit-machines-346-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10148-1 cockpit-packages-4.1-2.1 on GA media

These are all security issues fixed in the cockpit-packages-4.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10149-1 cockpit-repos-4.7-2.1 on GA media

These are all security issues fixed in the cockpit-repos-4.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10150-1 cockpit-subscriptions-14.4-2.1 on GA media

These are all security issues fixed in the cockpit-subscriptions-14.4-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-37592

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP path manager where the kernel fails to consistently set the ID as available when removing an endpoint. This can be triggered by specific...

Linux Android binder_inc_ref_for_node Heap Buffer Overflow

The vulnerability of the binderincrefornode function in the drivers/android/binder.c module of the Linux kernel’s communication driver with the Android kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel parse_features() Heap Buffer Overflow DoS

The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel target_lu_gp_members-show() Data Compromise

The vulnerability of the targetlugpmembers-show function in the drivers/target/targetcoreconfigfs.c driver of the Linux kernel lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...

Availability Attacks without an Adversary: Evidence from Enterprise LANs

Denial-of-Service DoS conditions in enterprise networks are commonly attributed to malicious actors. However, availability can also be compromised by benign non-malicious insider behavior. This paper presents an empirical study of a production enterprise LAN that demonstrates how routine docking...

ALSA-2026:1904 Important: resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: pyasn1: pyasn1: Denial of Service due to memory exhaustion from malforme...

OPENSUSE-SU-2026:10144-1 expat-2.7.4-1.1 on GA media

These are all security issues fixed in the expat-2.7.4-1.1 package on the GA media of openSUSE Tumbleweed...

at91 pinctrl driver Heap Buffer Overflow DoS

The vulnerability of the atmelpinctrlprobe function in the drivers/pinctrl/pinctrl-at91-pio4.c driver for Linux kernel’s PINCTRL output devices is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux net/sched cls_api tcf_blockbind buffer overflow

The vulnerability of the tcfblockbind function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

CVE-2026-25122: Uncontrolled Resource Consumption

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0, expandapk.Split drains the first gzip stream of an APK archive via io.Copyio.Discard, gzi without explicit bounds. With an attacker-controlled input stream, this can force lar...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: resource-agents security update

An update for resource-agents is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...