CVE-2026-25681 affecting package multus for versions less than 4.0.2-9

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-53354 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53354 affecting package kernel for versions less than 6.6.143.1-1. A patched version of the package is available...

CVE-2026-57062 affecting package gnupg2 for versions less than 2.4.9-3

CVE-2026-57062 affecting package gnupg2 for versions less than 2.4.9-3. A patched version of the package is available...

CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-39835 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

CVE-2026-10028 affecting package glib-networking for versions less than 2.78.0-2

CVE-2026-10028 affecting package glib-networking for versions less than 2.78.0-2. A patched version of the package is available...

CVE-2026-31486 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-31486 affecting package kernel for versions less than 6.6.143.1-1. A patched version of the package is available...

CVE-2026-13595 affecting package util-linux for versions less than 2.40.2-5

CVE-2026-13595 affecting package util-linux for versions less than 2.40.2-5. A patched version of the package is available...

CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4

CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4. A patched version of the package is available...

CVE-2026-52948 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52948 affecting package kernel for versions less than 6.6.143.1-1. A patched version of the package is available...

CVE-2026-56109 affecting package alsa-lib for versions less than 1.2.16.1-1

CVE-2026-56109 affecting package alsa-lib for versions less than 1.2.16.1-1. A patched version of the package is available...

CVE-2026-25681 affecting package dasel for versions less than 2.8.1-4

CVE-2026-25681 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...

CVE-2026-25680 affecting package cni-plugins for versions less than 1.4.0-6

CVE-2026-25680 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...

CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5

CVE-2026-25680 affecting package cloud-provider-kubevirt for versions less than 0.5.1-5. A patched version of the package is available...

CVE-2026-42502 affecting package cf-cli for versions less than 8.7.11-7

CVE-2026-42502 affecting package cf-cli for versions less than 8.7.11-7. A patched version of the package is available...

CVE-2026-43129 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-43129 affecting package kernel for versions less than 6.6.143.1-1. A patched version of the package is available...

CVE-2025-11083 affecting package gdb for versions less than 13.2-10

CVE-2025-11083 affecting package gdb for versions less than 13.2-10. A patched version of the package is available...

CVE-2026-52975 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52975 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59871 node-tar: Process crash via PAX numeric path type confusion

node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPathentry.path.split'/' to throw an uncaught TypeError. This issue is...

kernel: Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by scosocktimeout When the sco connection is established and then, the sco socket is releasing, timeoutwork will be scheduled to judge whether the sco disconnection is timeout. The sock...

EUVD-2026-42279

Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer Custom Reports modules. This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1...