OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11236-1 python313-Django6-6.0.7-1.1 on GA media

These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media

These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56729

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...

D-Link DNS-120 CGI Addgroup Get Group Quota Minsize Buffer Overflow

The vulnerability of the cgiaddgroupgetgroupquotaminsize function in the /cgi-bin/accountmgr.cgi script of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4,...

Enterprise Infrastructure Security Component Data Compromise

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility o...

D-Link UPnP_AV_Server_Path_Setting Function Use-After-Free

The vulnerability of the UPnPAVServerPathSetting function in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices is related to...

PT-2026-57242

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description The archive extract function allows the creation or overwriting of sibling objects within the same bucket or path scope. This occurs when extracting a specially crafted archive containing parent path...

OPENSUSE-SU-2026:11235-1 python313-Django4-4.2.30-4.1 on GA media

These are all security issues fixed in the python313-Django4-4.2.30-4.1 package on the GA media of openSUSE Tumbleweed...

kernel-devel-7.1.3-1.1 on GA media (moderate)

kernel-devel-7.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11214-1 Rating: moderate Cross-References: CVE-2026-53359 CVE-2026-53362 CVSS scores: CVE-2026-53359 SUSE : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-53359 SUSE : 9.3...

OPENSUSE-SU-2026:11228-1 ImageMagick-7.1.2.27-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed...

micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

PT-2026-56845

Name of the Vulnerable Software and Affected Versions libmbedtls2 affected versions not specified libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libmbedtls23-4.2.0-1.1 and libeverest-3.6.7-1.1 packages on the GA media of openSU...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to...

Linux RISCV arch_uprobe_copy_ixol Heap Buffer Overflow DoS

The vulnerability of the archuprobecopyixol function in the arch/riscv/kernel/probes/uprobes.c module of the platform management subsystem for the RISCV architecture of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could allow an...

OPENSUSE-SU-2026:11213-1 dirmngr-2.5.21-1.1 on GA media

These are all security issues fixed in the dirmngr-2.5.21-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11225-1 libtiff-devel-32bit-4.7.2-1.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11227-1 xwayland-24.1.12-1.1 on GA media

These are all security issues fixed in the xwayland-24.1.12-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56835

Name of the Vulnerable Software and Affected Versions libmbedtls23 affected versions not specified libeverest affected versions not specified Description Security issues were identified and subsequently fixed in the libmbedtls23 and libeverest packages within the openSUSE Tumbleweed GA media...

PT-2026-56847

Name of the Vulnerable Software and Affected Versions libmbedtls2 affected versions not specified libeverest affected versions not specified Description Security issues were identified in the libmbedtls2 and libeverest packages within the openSUSE Tumbleweed GA media. Recommendations Update...