PT-2026-2351

Name of the Vulnerable Software and Affected Versions versions prior to 2025-41717 Description An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of...

OPENSUSE-SU-2026:10038-1 fluidsynth-2.5.2-2.1 on GA media

These are all security issues fixed in the fluidsynth-2.5.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10044-1 python311-pypdf-6.6.0-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10041-1 libsoup-2_4-1-2.74.3-14.1 on GA media

These are all security issues fixed in the libsoup-24-1-2.74.3-14.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10042-1 mcphost-0.32.0-1.1 on GA media

These are all security issues fixed in the mcphost-0.32.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10037-1 firefox-esr-140.7.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10036-1 cockpit-repos-4.6-1.1 on GA media

These are all security issues fixed in the cockpit-repos-4.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10039-1 kernel-devel-6.18.5-1.1 on GA media

These are all security issues fixed in the kernel-devel-6.18.5-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2026-4279 flagd: Multiple Go Runtime CVEs Impact Security and Availability in github.com/open-feature/flagd/core

flagd: Multiple Go Runtime CVEs Impact Security and Availability in github.com/open-feature/flagd/core...

CVE-2025-52694

Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrato...

ROS-20260112-7358

A vulnerability in the cdromioctltimedmediachange function of the Linux kernel is related to integer overflow. Exploitation of the vulnerability could allow an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260112-7359

A vulnerability in the dfxregsuninit function of the drivers/crypto/hisilicon/debugfs.c driver of the Linux kernel is related to the re-release of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

ROS-20260112-7361

A vulnerability in the f2fsbuildfaultattr function in the fs/f2fs/super.c module of the f2fs file system of the Linux kernel is related to the lack of input data validation. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

ROS-20260112-7326

A vulnerability in the btrfsloadzoneinfo function in the fs/btrfs/zoned.c module of the Linux kernel btrfs file system is related to the reuse of previously freed memory due to competitive access to a resource race condition. Exploitation of the vulnerability may allow an intruder to affect...

ROS-20260112-7383

A vulnerability in the taifloaddebugfswrite function in the drivers/gpu/drm/amd/amdgpu/amdgpupspta.c module of the amdgpu driver of the Linux kernel is related to memory writes outside of the allocated buffer. Exploitation of the vulnerability could allow an attacker to affect the confidentiality...

ROS-20260112-7360

A vulnerability in the mpi3mrsasportadd function in the drivers/scsi/mpi3mr/mpi3mrtransport.c module of the Broadcom MPI3 device driver in the Linux kernel is related to a lack of validation of acceptable values. Exploitation of the vulnerability may allow an intruder to affect confidentiality,...

ROS-20260112-7342

Vulnerability in the xlogrecoverprocessdata function in the fs/xfs/xfslogrecover.c module of the xfs file system of the Linux kernel is related to reading memory outside of the allocated buffer Exploitation of the vulnerability could allow an attacker to affect the confidentiality and availabilit...

OPENSUSE-SU-2026:10032-1 libpcap-devel-1.10.6-1.1 on GA media

These are all security issues fixed in the libpcap-devel-1.10.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10035-1 teleport-17.7.13-1.1 on GA media

These are all security issues fixed in the teleport-17.7.13-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10030-1 k6-1.5.0-1.1 on GA media

These are all security issues fixed in the k6-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...