Security update for coredns (important)

openSUSE security update: security update for coredns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20619-1 Rating: important References: bsc1259319 bsc1259320 Cross-References: CVE-2025-61726 CVE-2025-61728 CVE-2025-61731 CVE-2025-68119...

CVE-2026-41259 Mastodon: Insufficient verification of email addresses

Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted...

SUSE-SU-2026:1580-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: - Update to go1.26.2 bsc1255111. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. - CVE-2026-27144:...

Important: Red Hat Security Advisory: OpenJDK 21.0.11 Security Update for Windows Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Important: Red Hat Security Advisory: OpenJDK 21.0.11 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

OPENSUSE-SU-2026:20619-1 Security update for coredns

This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.2: plugin/reload: Allow disabling jitter with 0s bump deps plugin/forward: fix parsing error when handling TLS+IPv6 address plugin/loop: use crypto/rand for query name generation plugin: reorder rewri...

Important: Red Hat Security Advisory: OpenJDK 8u492 Windows Security Update

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Security Bulletin: Vulnerabilities in kernel affects IBM Netezza Appliance

Summary The kernel package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVEs CVE-2025-38684, CVE-2025-38500, CVE-2025-38464, CVE-2025-38461, CVE-2025-38350, CVE-2025-38211, CVE-2025-38200, CVE-2025-37823 Vulnerability Details CVEID:CVE-2025-38684...

Security Bulletin: Vulnerabilities in kernel affects IBM Netezza Appliance

Summary The kernel package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-21863, CVE-2025-40248, CVE-2025-68301 Vulnerability Details CVEID:CVE-2025-21863 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: iouring:...

OPENSUSE-SU-2026:10605-1 dnsmasq-2.92-3.1 on GA media

These are all security issues fixed in the dnsmasq-2.92-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10606-1 frr-10.5.1-3.1 on GA media

These are all security issues fixed in the frr-10.5.1-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10608-1 libXpm-devel-3.5.18-2.1 on GA media

These are all security issues fixed in the libXpm-devel-3.5.18-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10607-1 golang-github-prometheus-prometheus-3.11.2-1.1 on GA media

These are all security issues fixed in the golang-github-prometheus-prometheus-3.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10609-1 libruby4_0-4_0-4.0.3-1.1 on GA media

These are all security issues fixed in the libruby40-40-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.10 security update

The multicluster engine for Kubernetes 2.6 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.6 images The multicluster engine for Kubernetes provides the foundational components that are...

Important: Red Hat Security Advisory: java-25-openjdk security update

An update for java-25-openjdk is now available for Red Hat Enterprise Linux 9 and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2025-38234: sched/rt: Fix race in pushrttask bsc1246057. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"...

CVE-2025-6016

CVE-2025-6016 affects GitLab CE/EE: versions 9.2 through 18.9.5, 18.10 through 18.10.3, and 18.11 through 18.11.0. The issue allows an authenticated user to trigger a denial of service due to insufficient resource allocation limits when retrieving notes under certain conditions. The root cause is...

CVE-2026-31526

Summary: CVE-2026-31526 concerns the Linux kernel BPF verifier. A defect in exception exits for BPF subprograms allowed ORC unwinding to proceed without releasing user-held locks, risking resource leaks and instability. The root cause: process_bpf_exit_full() could set check_lock=false for except...