OPENSUSE-SU-2026:10267-1 ImageMagick-7.1.2.15-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.15-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-25963

Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion API could allow a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. Fleet supports...

CVE-2026-25963

Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion API could allow a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. Fleet supports...

CVE-2026-27965

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location e.g. an S3 bucket can manipulate backup manifest files so that arbitrary code is later executed when that backup is restored...

PT-2026-22116

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.80.1 Description Fleet’s certificate template deletion API had a broken authorization check. This allowed a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. T...

CVE-2026-25963: Incorrect Authorization

Fleet is open source device management software. In versions prior to 4.80.1, a broken authorization check in Fleet’s certificate template deletion API could allow a team administrator to delete certificate templates belonging to other teams within the same Fleet instance. Fleet supports...

cockpit-machines-348-1.1 on GA media (moderate)

cockpit-machines-348-1.1 on GA media Announcement ID: openSUSE-SU-2026:10250-1 Rating: moderate Cross-References: CVE-2026-25547 CVSS scores: CVE-2026-25547 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25547 SUSE : 8.7...

ufshcd_cmd_inflight Heap Buffer Overflow DoS

The vulnerability of the ufshcdcmdinflight function in the drivers/ufs/core/ufshcd.c file affects UFS Universal Flash Storage host controllers. In Linux operating systems, this function is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise...

Linux kernel iomap_writepage_map buffer overflow DoS

The vulnerability of the iomapwritepagemap function in the fs/iomap/buffered-io.c file of the Linux kernel file system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

OPENSUSE-SU-2026:10264-1 python311-Flask-3.1.3-1.1 on GA media

These are all security issues fixed in the python311-Flask-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10257-1 MozillaFirefox-148.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-148.0-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the linkstatususerformat function in the drivers/net/ethernet/marvell/octeontx2/af/cgx.c file of the Ethernet network adapter driver for the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker t...

OPENSUSE-SU-2026:10261-1 docker-29.2.1_ce-37.1 on GA media

These are all security issues fixed in the docker-29.2.1ce-37.1 package on the GA media of openSUSE Tumbleweed...

Intel wireless driver iwlagn_send_sta_key() function Heap Buffer Overflow

The vulnerability of the iwlagnsendstakey function in the drivers/net/wireless/intel/iwlwifi/dvm/sta.c file of the Intel wireless driver for the Linux operating system is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the...

Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath11kregnotifier function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this...

OPENSUSE-SU-2026:10260-1 digger-cli-0.6.143-1.1 on GA media

These are all security issues fixed in the digger-cli-0.6.143-1.1 package on the GA media of openSUSE Tumbleweed...

Linux dm-cache-target Destroy Buffer Overflow DoS

The vulnerability of the destroy function in the drivers/md/dm-cache-target.c file of the Linux kernel driver for multiple device drivers such as RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

GHSA-76RV-2R9V-C5M6 zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service

Summary All rate limit buckets for a single entity share the same DynamoDB partition key namespace/ENTITYid. A high-traffic entity can exceed DynamoDB's per-partition throughput limits 1,000 WCU/sec, causing throttling that degrades service for that entity — and potentially co-located entities in...

CVE-2025-69253

free5GC is an open-source project for 5th generation 5G mobile core networks. Versions up to and including 1.4.1 of the User Data Repository are affected by Improper Error Handling with Information Exposure. The NEF component reliably leaks internal parsing error details e.g., invalid character '...

OPENSUSE-SU-2026:10254-1 cockpit-tukit-0.1.7~git0.61e54f1-3.1 on GA media

These are all security issues fixed in the cockpit-tukit-0.1.7git0.61e54f1-3.1 package on the GA media of openSUSE Tumbleweed...