CVE-2026-80683

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own scoconn reference scoconndel drops a reference it does not own. It takes one transient reference via scoconnholdunlesszero and releases it with the scoconnput that follows scosockhold; the...

ROS-20260831-73-0002

The vulnerability of the freerdpclientrdpfileapplytoSettings function in the RDP client FreeRDP is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted .rdp file...

CVE-2026-80664

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtnat: reject unsupported target families xtnat SNAT and DNAT target handlers assume IP-family conntrack state is present and can dereference a NULL pointer when instantiated from an unsupported family through nftcompa...

Security update for dhcpcd (moderate)

openSUSE security update: security update for dhcpcd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21692-1 Rating: moderate References: bsc1268968 bsc1268974 bsc1268976 bsc1268980 Cross-References: CVE-2026-56113 CVE-2026-56115 CVE-2026-56116...

Security update for rav1e (low)

openSUSE security update: security update for rav1e ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21681-1 Rating: low References: bsc1249016 Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1...

php-composer2-2.10.3-1.1 on GA media (moderate)

php-composer2-2.10.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11633-1 Rating: moderate Cross-References: CVE-2026-59944 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

jupyter-jupyterlab-4.5.10-1.1 on GA media (moderate)

jupyter-jupyterlab-4.5.10-1.1 on GA media Announcement ID: openSUSE-SU-2026:11634-1 Rating: moderate Cross-References: CVE-2026-73415 CVE-2026-73416 CVE-2026-73417 CVE-2026-73626 CVE-2026-73627 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...

jfrog-cli-2.122.0-1.1 on GA media (moderate)

jfrog-cli-2.122.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11631-1 Rating: moderate Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2026-39821 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA...

istioctl-1.30.4-1.1 on GA media (moderate)

istioctl-1.30.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11630-1 Rating: moderate Cross-References: CVE-2026-48521 CVE-2026-50572 CVE-2026-73511 CVE-2026-73512 CVE-2026-73513 CVE-2026-73546 CVE-2026-73547 CVE-2026-73548 CVE-2026-73549 CVE-2026-73550 CVE-2026-73551 CVE-2026-73552...

dovecot24-2.4.5-1.1 on GA media (moderate)

dovecot24-2.4.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11629-1 Rating: moderate Cross-References: CVE-2026-27852 CVE-2026-33263 CVE-2026-33604 CVE-2026-33605 CVE-2026-33606 CVE-2026-33607 CVE-2026-40014 CVE-2026-40015 CVE-2026-40017 CVE-2026-40019 CVE-2026-40203 CVE-2026-40205...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0318-1 Rating: critical References: 1276225 1276749 Cross-References: CVE-2026-78891 CVE-2026-78892 CVE-2026-78893 CVE-2026-78894 CVE-2026-78895 CVE-2026-78896 CVE-2026-78897 CVE-2026-78898 CVE-2026-78899...

CVE-2026-82328

A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the usedclrs palette count parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue c...

CVE-2026-82330

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...

CVE-2026-82254

gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...

CVE-2026-82417

Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...

CVE-2026-82469

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

CVE-2026-82324

A flaw was found in the file-iff IFF/ILBM plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes nPlanes is zero. This causes a row size mismatch that bypasses...

CVE-2026-82251

gitoxide before 0.52.1 fails to validate submodule names from .gitmodules configuration, allowing path traversal when deriving submodule git directories. Attackers can craft malicious submodule names with traversal segments to redirect state and open functions to repositories outside .git/modules...

CVE-2026-82608

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get4bytes of the file src/modules/imsregistrarscscf/cxdxavp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has bee...

Important: gimp

Issue Overview: A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed th...