SUSE-SU-2026:23794-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712. - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate bsc1274792. - CVE-2026-63072: Heap Buffer Overflow in CMS Key...

SUSE-SU-2026:23788-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712. - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate bsc1274792. - CVE-2026-63072: Heap Buffer Overflow in CMS Key...

PT-2026-93744

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.27 BIND 9 versions 9.21.0 through 9.21.25 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.27-S1 Description A recursive resolver may...

CVE-2026-89998: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

PT-2026-93633

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cpuidle component within the dt idle genpd functionality. The dt idle pd alloc function uses kasprintf to allocate the full node path and then sets pd-name to the...

PT-2026-93639

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when loading and unloading a table. This occurs if userspace initiates two concurrent table load ioctls where one succeeds and the other fails. The issue arises...

PT-2026-93645

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the damon apply min nr regions function where the system repeatedly splits regions to meet a user-defined minimum limit. The process relies on the damon split region a...

CVE-2026-89998: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-90004: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: handle region split failure in applyminnrregions damonapplyminnrregions repeatedly split each region until its size becomes small enough to meet the user-defined low limit of the number of regions. The loop assumes...

Linux Distros Unpatched Vulnerability : CVE-2026-92051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. CVE-2026-92051 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2026-89992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpuidle: dtidlegenpd: kfree the original name allocation dtidlepdalloc kasprintfs the full node path, then points pd-name at kbasename of that string...

Linux Distros Unpatched Vulnerability : CVE-2026-89998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a...

SUSE CVE-2026-92032

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

SUSE CVE-2026-92051

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92051

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92032

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

DEBIAN-CVE-2026-92032

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92051

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

UBUNTU-CVE-2026-92051

Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

UBUNTU-CVE-2026-92032

Sandbox escape due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...