openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side

A flaw was found in OpenSSH. A remote attacker could exploit a use-after-free vulnerability on the client side when a server changes its host key during a key re-exchange. This could lead to high impact on confidentiality and integrity, and low impact on availability...

CVE-2026-33390

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...

EUVD-2026-42536

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affectin...

OPENSUSE-SU-2026:11233-1 libXfont2-2-2.0.7-2.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed...

kernel-devel-7.1.3-1.1 on GA media (moderate)

kernel-devel-7.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11214-1 Rating: moderate Cross-References: CVE-2026-53359 CVE-2026-53362 CVSS scores: CVE-2026-53359 SUSE : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2026-53359 SUSE : 9.3...

OPENSUSE-SU-2026:11231-1 flannel-0.28.7-1.1 on GA media

These are all security issues fixed in the flannel-0.28.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11234-1 perl-DBI-1.650.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11239-1 python313-tornado6-6.5.7-2.1 on GA media

These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11230-1 curl-8.21.0-1.1 on GA media

These are all security issues fixed in the curl-8.21.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11235-1 python313-Django4-4.2.30-4.1 on GA media

These are all security issues fixed in the python313-Django4-4.2.30-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11236-1 python313-Django6-6.0.7-1.1 on GA media

These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57242

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description The archive extract function allows the creation or overwriting of sibling objects within the same bucket or path scope. This occurs when extracting a specially crafted archive containing parent path...

OPENSUSE-SU-2026:11241-1 rclone-1.74.4-1.1 on GA media

These are all security issues fixed in the rclone-1.74.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11228-1 ImageMagick-7.1.2.27-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11238-1 python313-pypdf-6.14.2-1.1 on GA media

These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-57234

Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.74.4 Description When using the -l/--links flag, the software serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target. This allows an attacker-controlle...

micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

PT-2026-56856

Name of the Vulnerable Software and Affected Versions openexr affected versions not specified Description An unchecked integer overflow occurs in the Image::resize function. When followed by an exception, this can lead to an invalid delete operation via uninitialized pointers. Recommendations At...

PT-2026-56855

Name of the Vulnerable Software and Affected Versions libmbedtls23 affected versions not specified libeverest affected versions not specified Description Security issues were identified in the libmbedtls23 and libeverest packages. Recommendations Update libmbedtls23 to version 4.2.0-1.1. Update...

The vulnerability of the `__team_queue_override_enabled_check()` function in the drivers/net/team/team_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the teamqueueoverrideenabledcheck function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...