Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

MGASA-2026-0329 Updated php8.4 packages fix security vulnerabilities

The updated php 8.4 packages fix some security vulnerabilities. See the references for more information...

DEBIAN-CVE-2026-71969

OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted Application to corrupt secure-world heap memory by supplying ...

Security update for gd

This update for gd fixes the following issue: CVE-2026-9672: security issues in libgd bsc1273101. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

Security update for perl-Date-Manip

This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...

CLSA-2026-1786379889 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.4.2-tuxcare.1...

CVE-2026-48048 XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CLSA-2026-1786373314 TuxCare security update for fast-xml-parser (1 CVE)

TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.5...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.6 security update

Important: Red Hat OpenShift GitOps v1.19.6 security update An update is now available for Red Hat OpenShift GitOps...

MINI-JR6W-Q5HV-467G

Bulletin has no description...

MINI-Q9R7-H6VR-C965

Bulletin has no description...

MINI-3W5P-C8Q9-H95G

Bulletin has no description...

DEBIAN-CVE-2026-68284

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcpbpfsendmsg tcpbpfsendmsg keeps msgtx across skstreamwaitmemory, which drops and reacquires the socket lock. Its error path tries to decide whether msgtx names the local temporary messag...

DEBIAN-CVE-2026-68194

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7921rxcheck and mt7921queuerxskb dispatch it to mt7921mactxfree on every bus. mt7921mactxfree cleans the DMA tx queues with...

CLSA-2026-1786365605 TuxCare security update for 10 packages (4 CVEs)

TuxCare rebuilt 10 packages to address 4 CVEs. Fixed in 4.16.19-tuxcare.3...

CVE-2026-19429

CVE-2026-19429 relates to Jenkins FilePath.untarFrom() where TAR extraction does not validate tar entry symlink targets, allowing an authenticated user with Item/Configure privileges to create workspace symlinks that point to arbitrary files on the Jenkins controller. This can enable reading sens...

CVE-2026-68390 Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold hdev-lock for hciconnparams lookups hciconnparamslookup requires hdev-lock be held, otherwise the list iteration or param access is not safe. Hold hdev-lock for params lookups in hcisync...

CVE-2026-68376

The CVE-2026-68376 issue concerns the Linux kernel SCTP implementation. A miscalculated auth_hmacs array size in struct sctp_cookie caused the HMAC-ALGO parameter (struct sctp_paramhdr plus N HMAC identifiers) to overflow the buffer when four identifiers are configured, leading to copying beyond ...

CVE-2026-68355

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11khalrxmsdulistget When the first entry in msdudetails has a zero buffer address, the code accesses msdudetailsi - 1 with i == 0, causing a buffer underflow. Fix similarly to...

CVE-2026-68304 wifi: brcmfmac: fix 802.1X-SHA256 call trace warning

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpaauth as 1x256 mode, need to set up "usefwsup" with BRCMFPROFILEFWSUP1X. Or it will happen trace warning when call brcmfcfg80211setpmk. 4481.831101 ------------ cut...