PT-2026-64054

These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64053

These are all security issues fixed in the distribution-registry-3.1.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11334-1 helm3-3.21.3-3.1 on GA media

These are all security issues fixed in the helm3-3.21.3-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11338-1 jline3-3.30.15-3.1 on GA media

These are all security issues fixed in the jline3-3.30.15-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-64061

These are all security issues fixed in the java-17-openjdk-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11342-1 python313-3.13.14-1.1 on GA media

These are all security issues fixed in the python313-3.13.14-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260722-73-0008

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-64056

These are all security issues fixed in the google-osconfig-agent-20260708.00-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11327-1 apache-sshd-2.19.0-2.1 on GA media

These are all security issues fixed in the apache-sshd-2.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11330-1 gh-2.96.0-2.1 on GA media

These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11324-1 afterburn-5.10.0.git73.b97f772-2.1 on GA media

These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-61312

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Whil...

CVE-2026-60583

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Install. The supported version that is affected is 6.5.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management...

CVE-2026-60162

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracl...

CVE-2026-47044

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-60191

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-60187

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-60189

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-60177

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

GHSA-9MQ6-MQJJ-C2C5 Gitea: Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads

Summary Hello Gitea Security Team, Thank you for your continued work on Gitea. I would like to responsibly report a potential availability-impact issue that I observed in Gitea’s Arch package registry implementation. During local testing, I noticed that Gitea records non-dot regular file entries...