Security update for chirp (important)

openSUSE security update: security update for chirp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21866-1 Rating: important References: bsc1280123 Cross-References: CVE-2026-78136 Affected Products: openSUSE Leap 16.0...

CVE-2026-77281: Improper Control of Generation of Code

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...

PT-2026-94929

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the riscv acpi add prt dep function, the acpi get handle call can fail, which would leave the link handle variable uninitialized. This occurs within the ACPI Advanced Configuration an...

PT-2026-94927

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dell-privacy platform driver for x86 architecture. The issue occurs when accessing the priv-features present variable without holding the list mutex, which...

PT-2026-94621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the coresight etm4x component during the perf enable path. The system fails to call the cscfg csdev disable active config function in specific error scenarios, such as...

PT-2026-94695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture during syscall entry tracing. A tracer can manipulate the first syscall argument, which may allow it to bypass seccomp or audit checking. This...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94547

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mi enum attr function within the ntfs3 file system. The validation for start and end Virtual Cluster Numbers VCN for non-resident attributes is insufficient. When...

PT-2026-94599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MSFT implementation where the read supported features function fails to properly validate the evt prefix len variable against the actual response length...

PT-2026-94522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read exists in the ksmbd alloc user function. The issue occurs because the function uses the hash sz variable, provided by a mountd IPC login response, to determine...

PT-2026-95144

Name of the Vulnerable Software and Affected Versions Vvveb versions 1.0.0 through 1.0.8.4 Description An authenticated user with the Editor role and editor/ permission can perform a path traversal attack. The saveGlobalElements function in admin/controller/editor/global-trait.php improperly...

PT-2026-95149

Name of the Vulnerable Software and Affected Versions AI Agent Automation versions prior to 0.9.1 Description An authenticated user capable of creating or modifying workflow file steps can exploit a path traversal flaw in the executeStep file-step implementation located in...

PT-2026-99752

A context safety grant was inherited by a template binding that never earned it, so rebinding a name the view had marked safe left the mark attached to the new, attacker-controlled value. djust's context safety channel is keyed by name, not by value. Every bind copied the value and left the grant...

PT-2026-99751

Five independent defects in djust's template auto-escaping cause attacker-controlled input to be rendered as live markup where Django escapes it. All four are present in shipped 1.1.0 and are fixed in 1.1.1. They share one shape: a filter or grant that escapes nothing itself and relies on the...

PT-2026-94607

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the btrfs qgroup component where the qgroup free reserved data function performs an incorrect length calculation. The function rounds down the start position and round...

PT-2026-94456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SMC LLC Shared Memory Communications Local LLC implementation. When the smc llc event handler function transitions a local LLC flow from SMC LLC FLOW REQ ADD...

PT-2026-94734

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-200.fc44.x86 64 Description A shift-out-of-bounds issue exists in the i3c dw driver. When the ENTDAA process assigns no devices on an empty bus, the cmd-rx len variable equals master-maxdevs. This causes t...

PT-2026-94468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gic acpi parse iaffid function where a MADT GICC entry may not correspond to a logical CPU recognized by the kernel. This causes the cpu variable to be initialized...

PT-2026-94518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd component where the ipc validate msg function computes the expected message size by reading length fields from a response buffer supplied by the userspace...

PT-2026-94930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the printk component. During legacy printing, a handover to another printing context can occur, causing the console SRCU Sleepable Read Copy Update read...