Important: postgresql18

Issue Overview: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the...

CVE-2026-80683

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own scoconn reference scoconndel drops a reference it does not own. It takes one transient reference via scoconnholdunlesszero and releases it with the scoconnput that follows scosockhold; the...

CVE-2026-80597

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-19873

HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...

CVE-2025-70291

Unknown description...

Important: microcode_ctl

Issue Overview: Improper handling of overlap between protected memory ranges for some IntelR XeonR 6 processors when using IntelR TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. Th...

dovecot24-2.4.5-1.1 on GA media (moderate)

dovecot24-2.4.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11629-1 Rating: moderate Cross-References: CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606 CVE-2026-33607 CVE-2026-40014 CVE-2026-40015 CVE-2026-40017 CVE-2026-40019 CVE-2026-40203 CVE-2026-40205...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0318-1 Rating: critical References: 1276225 1276749 Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899...

jupyter-jupyterlab-4.5.10-1.1 on GA media (moderate)

jupyter-jupyterlab-4.5.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:11634-1 Rating: moderate Cross-References: CVE-2026-73415 CVE-2026-73416 CVE-2026-73417 CVE-2026-73626 CVE-2026-73627 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...

Security update for python-cryptography (moderate)

openSUSE security update: security update for python-cryptography ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21685-1 Rating: moderate References: bsc1273516 bsc1273549 bsc1273551 Cross-References: CVE-2026-69247 CVE-2026-69248 CVE-2026-69249 CV...

istioctl-1.30.4-1.1 on GA media (moderate)

istioctl-1.30.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11630-1 Rating: moderate Cross-References: CVE-2026-48521 CVE-2026-50572 CVE-2026-73511 CVE-2026-73512 CVE-2026-73513 CVE-2026-73546 CVE-2026-73547 CVE-2026-73548 CVE-2026-73549 CVE-2026-73550 CVE-2026-73551 CVE-2026-73552...

Security update for dhcpcd (moderate)

openSUSE security update: security update for dhcpcd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21692-1 Rating: moderate References: bsc1268968 bsc1268974 bsc1268976 bsc1268980 Cross-References: CVE-2026-56113 CVE-2026-56115 CVE-2026-56116...

Security update for rav1e (low)

openSUSE security update: security update for rav1e ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21681-1 Rating: low References: bsc1249016 Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1...

php-composer2-2.10.3-1.1 on GA media (moderate)

php-composer2-2.10.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11633-1 Rating: moderate Cross-References: CVE-2026-59944 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

jfrog-cli-2.122.0-1.1 on GA media (moderate)

jfrog-cli-2.122.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11631-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA...

CVE-2025-70292

Unknown description...

CVE-2026-80608

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race during device removal When forceiova mode is enabled, amdxdnaremove frees xdna-domain. If amdxdnagemobjfree is called after device removal, it may attempt to access xdna-domain,...

CVE-2026-18699

An issue in MongoDB Servers query planner could allow an authenticate...

CVE-2026-80694

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtkethsoc: pass eth to mtkhandleirqrx in pollcontroller mtkhandleirqrx expects a struct mtketh matching the requestirq cookie, but mtkpollcontroller incorrectly passed the netdevice . Calling ndopollcontroller with...

CVE-2026-38346

An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...