Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037 , carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run...

SUSE CVE-2026-47778

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.35.11, 1.36.7, 1.37.3, and 1.38.1, a structural flaw was identified in DefaultCertValidator::verifySubjectAltName where the extracted DNS SAN string is cast to a C-style string using .cstr before bei...

SUSE CVE-2026-53108

In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migration entries The following race is possible with migration swap entries or device-private THP entries. e.g. when movepages is called on a PMD THP page, then there maybe an intermediate...

CVE-2026-12243

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

PT-2026-54441

Name of the Vulnerable Software and Affected Versions CefSharp versions prior to 148.0.90 Description CefSharp provides .NET bindings for the Chromium Embedded Framework. The FolderSchemeHandlerFactory class fails to properly enforce directory boundaries when validating if a decoded and...

mariadb:10.11 security, bug fix, and enhancement update

galera 26.4.27-1 - Rebased to 26.4.27 26.4.26-1 - Rebased to 26.4.26 26.4.25-1 - Rebased to 26.4.25 26.4.24-1 - Rebase to 26.4.24 Judy 1.0.5-18 - Remove README.Fedora; no longer needed since 1.0.5 version - Resolves: 1638717 1.0.5-17 - ldconfig scriptlets replaced by RPM File Triggers from Fedora...

ROS-20260630-73-0014

The vulnerability of the imxrt1050clocksprobe function in the drivers/clk/imx/clk-imxrt1050.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

FreeBSD Security Advisory - FreeBSD-SA-26:45.audit

FreeBSD Security Advisory - When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which return...

PT-2026-54442

Name of the Vulnerable Software and Affected Versions @cedar-policy/authorization-for-expressjs versions prior to 0.3.0 Description This middleware integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions. A discrepancy exists because the middleware uses...

PT-2026-53923

Name of the Vulnerable Software and Affected Versions Ocelot versions prior to 24.1.1 Description A security control bypass exists in the handling of WebSocket upgrade requests. The issue stems from a logic flaw in the OcelotPipelineExtensions.cs file, where a MapWhen branch configured for...

glibc security, bug fix, and enhancement update

2.34-272.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi Reviewed-by: David Faust Oracle history: June-5-2026 Cupertino Miranda - 2.34-270.0.1 - Forward-port Oracle patches for ol9-u8 Reviewed-by: Jose E. Marchesi May-20-2026 Cupertino Miranda - 2.34-266.0.1 -...

Security update for chromium (important)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21135-1 Rating: important References: bsc1268373 Cross-References: CVE-2026-12437 CVE-2026-12438 CVE-2026-12439 CVE-2026-12440 CVE-2026-12441...

Security update for bind (important)

openSUSE security update: security update for bind ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21123-1 Rating: important References: bsc1265591 bsc1265592 bsc1265593 bsc1265594 bsc1265595 bsc1265596 Cross-References: CVE-2026-3039 CVE-2026-3592...

Security update for postgresql15 (important)

openSUSE security update: security update for postgresql15 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21103-1 Rating: important References: bsc1258754 bsc1263804 bsc1265172 bsc1265173 bsc1265174 bsc1265175 bsc1265177 bsc1265178 bsc1265179...

Security update for python-tornado6 (important)

openSUSE security update: security update for python-tornado6 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21067-1 Rating: important References: bsc1268395 bsc1268396 bsc1268397 Cross-References: CVE-2026-49853 CVE-2026-49854 CVE-2026-49855 CVSS...

FreeBSD-SA-26:40.zfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:40.zfs Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenZFS Category: contrib Module: openzfs Announced: 2026-06-30 Credits:...

FreeBSD-SA-26:42.unlinkat

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:42.unlinkat Security Advisory The FreeBSD Project Topic: unlinkat2 ignores ATRESOLVEBENEATH flag Category: core Module: unlinkat Announced: 2026-06-30...

Security update for papers (important)

openSUSE security update: security update for papers ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21106-1 Rating: important References: bsc1261947 bsc1265880 Cross-References: CVE-2026-46529 CVSS scores: CVE-2026-46529 SUSE : 7...

Security update for tar (important)

openSUSE security update: security update for tar ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21070-1 Rating: important References: bsc1261900 bsc1265450 bsc1267189 Cross-References: CVE-2025-45582 CVE-2026-5704 CVSS scores: CVE-2025-45582 SUSE ...