CVE-2026-77955 affecting package unbound for versions less than 1.26.1-1

CVE-2026-77955 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-81634 affecting package unbound for versions less than 1.26.1-1

CVE-2026-81634 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-89158 affecting package pcre2 for versions less than 10.48-1

CVE-2026-89158 affecting package pcre2 for versions less than 10.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-78254 affecting package ant for versions less than 1.10.18-1

CVE-2026-78254 affecting package ant for versions less than 1.10.18-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33

CVE-2026-84304 affecting package telegraf for versions less than 1.31.0-33. An upgraded version of the package is available that resolves this issue...

CVE-2026-78662 affecting package gh for versions less than 2.101.0-1

CVE-2026-78662 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-82720 affecting package unbound for versions less than 1.26.1-1

CVE-2026-82720 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-85501 affecting package unbound for versions less than 1.26.1-1

CVE-2026-85501 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-72924 affecting package gh for versions less than 2.101.0-1

CVE-2026-72924 affecting package gh for versions less than 2.101.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59679 affecting package libXfont2 for versions less than 2.0.9-1

CVE-2026-59679 affecting package libXfont2 for versions less than 2.0.9-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-81642 affecting package unbound for versions less than 1.26.1-1

CVE-2026-81642 affecting package unbound for versions less than 1.26.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-84445 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10

CVE-2026-83530 affecting package kube-vip-cloud-provider for versions less than 0.0.10-10. An upgraded version of the package is available that resolves this issue...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: fixed: Deleting an Exchange account retained the outgoing server settings fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 fixed: Windows jump list menu no longer functioned...

SUSE-SU-2026:4268-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: fixed: Deleting an Exchange account retained the outgoing server settings fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 fixed: Windows jump list menu no longer functioned...

CVE-2026-93506

SveltyCMS 0.0.6 is affected by a server-side request forgery (SSRF) vulnerability in the File Upload Endpoint at /mediagallery/upload-media. The root cause is described as "unknown processing" within that component. A remote, authenticated attacker (low privileges required) can exploit this with ...

EUVD-2026-82980

A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called...

CVE-2026-93506 SveltyCMS File Upload Endpoint upload-media server-side request forgery

A vulnerability was determined in SveltyCMS 0.0.6. This issue affects some unknown processing of the file /mediagallery/upload-media of the component File Upload Endpoint. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. This patch is called...

CVE-2026-93685

A flaw was found in the multicluster-observability-addon. A remote attacker can access a debug endpoint without authentication, due to a misconfiguration in the underlying addon-framework library. This allows for the disclosure of sensitive operational information, such as goroutine, heap, and...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max...