ALSA-2026:9131 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: qla2xxx: Fix improper freeing of purex item CVE-2025-68741 kernel: ALSA: aloop: Fix racy access at PCM trigger CVE-2026-23191 For more details about the security issues, including t...

MINI-FQR2-PQQW-394G

Bulletin has no description...

MINI-H3RC-5MX8-C5PP

Bulletin has no description...

MINI-C43C-6J7J-M83W

Bulletin has no description...

MINI-P745-XX2R-HFCV

Bulletin has no description...

MINI-863V-H4PR-VJGP

Bulletin has no description...

MINI-32PH-MM8P-QQ3W

Bulletin has no description...

MINI-RJ2P-HPGF-FRRX

Bulletin has no description...

CGA-MX3X-VWH6-M746

Bulletin has no description...

MINI-JQJ8-QC82-PQG8

Bulletin has no description...

MINI-PV4P-WR54-8C47

Bulletin has no description...

MINI-VPX3-J55P-FHJV

Bulletin has no description...

CGA-75J4-69FM-W72Q

Bulletin has no description...

[SECURITY] Fedora 44 Update: kf6-kitemmodels-6.25.0-1.fc44

KDE Frameworks 6 Tier 1 addon with item models...

CVE-2026-3599

The Riaxe Product Customizer plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter keys within 'productdata' of the /wp-json/InkXEProductDesignerLite/add-item-to-cart REST API endpoint in all versions up to, and including, 2.1.2. This is due to insufficient escaping on t...

PT-2026-33266

Name of the Vulnerable Software and Affected Versions Riaxe Product Customizer versions prior to 2.1.3 Description An issue exists in the Riaxe Product Customizer plugin for WordPress where unauthenticated attackers can append additional SQL queries to existing ones to extract sensitive informati...

MINI-WG23-6F8J-MQHV

Bulletin has no description...

EUVD-2026-22231

The Eventin – Events Calendar, Event Booking, Ticket & Registration AI Powered plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability check on the getitempermissionscheck function in all versions up to, and including, 4.1.8. This makes it possible for...

MINI-V32H-C4QM-2QXJ

Bulletin has no description...

CVE-2026-39940

ChurchCRM is an open-source church management system. Prior to 7.0.0, it was possible in many places across the ChurchCRM application to create a link that, when visited by an authenticated user, would redirect them to any URL chosen by an attacker if they clicked 'Cancel' button on the page. For...