mcphost-0.32.0-1.1 on GA media (moderate)

mcphost-0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10042-1 Rating: moderate Cross-References: CVE-2025-47913 CVE-2025-47914 CVE-2025-58181 CVSS scores: CVE-2025-47913 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-47913 SUSE : 8.7...

ROS-20260114-7305

A vulnerability in the irqreturnt hi3110canist function of the drivers/net/can/spi/hi311x.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected...

ROS-20260114-7323

A vulnerability in the netemdequeue function of the net/sched/schnetem.c module of the net/sched traffic control subsystem of the net/sched kernel of the Linux operating system is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect...

ROS-20260114-7320

A vulnerability in the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to affect the confidentiality, integrity and availability of protected information...

PT-2026-2562

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-68957 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information about ...

OPENSUSE-SU-2026:10050-1 rke2-1.34-1.34.3+rke2r1-1.1 on GA media

These are all security issues fixed in the rke2-1.34-1.34.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-2567

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-2569

Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-2565

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68960 Description A multi-thread race condition exists in the video framework module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about a newer...

MiracleLinux 4 : mysql-5.1.61-1.1.0.1.AXS4 (AXSA:2012-195:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-195:01 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...

OPENSUSE-SU-2026:10049-1 python311-urllib3-2.6.3-1.1 on GA media

These are all security issues fixed in the python311-urllib3-2.6.3-1.1 package on the GA media of openSUSE Tumbleweed...

MiracleLinux 4 : mysql-5.1.66-1.0.1.AXS4 (AXSA:2012-1036:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-1036:03 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many...

ROS-20260114-7307

A vulnerability in the sockmaplookupsys function of the net/core/sockmap.c module of the Linux kernel is related to synchronization errors when using a shared resource . Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected...

ROS-20260114-7306

A vulnerability in the cleanupnet function of the include/net/netnamespace.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

ROS-20260114-7322

A vulnerability in the pfifotailenqueue function net/sched/schfifo.c of the Linux operating system kernel is associated with a functionality mismatch according to the specification. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

PT-2026-2563

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68958 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may impact system availability. A race condition occurs when multiple threads access and...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the HashPeImageByType function. A user can cause an out-of-bounds read when a corrupted data pointer and length are sent via an adjacent network. Successful exploitation of this vulnerability may result in a loss of integrity and/or availability...

Astra Linux – Vulnerability in PHP 8.2

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1, a heap buffer overflow occurs in the arrayMerge function when the total number of elements in packed arrays exceeds 32-bit limits or HTMAXSIZE. This issue is caused by an integer...

CVE-2025-41717

An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation 'Code...

CVE-2025-41717 Config-Upload Code Injection

An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation 'Code...