SUSE-SU-2026:2524-1 Security update for libinput

This update for libinput fixes the following issues - CVE-2026-50265,CVE-2026-50292: crafted uinput devices can lead to local privilege escalation bsc1267852...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-launcher, virt-operator-fips, harvester, harvester-fips, virt-operator, virt-controller-fips...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: virt-launcher, virt-operator-fips, harvester, harvester-fips, docker-machine-driver-harvester, virt-controller-fips, virt-handler...

GHSA-F4XH-W4CJ-QXQ8 vulnerabilities

Vulnerabilities for packages: py3-langsmith, open-webui, puppygraph-python...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, logstash-fips, ruby3.3-fluentd-kubernetes-daemonset, logstash, kube-fluentd-operator, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.2-rails,...

GHSA-4XPC-PV4P-PM3W vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2026-8378

creationtimestamp| type| source ---|---|--- 2026-06-23 08:16:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxko6srr2l...

CVE-2026-8163

creationtimestamp| type| source ---|---|--- 2026-06-23 08:11:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowxbpfcwv2j...

CVE-2026-55654

creationtimestamp| type| source ---|---|--- 2026-06-23 07:53:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mowwbexkdi2a...

CVE-2026-7842

creationtimestamp| type| source ---|---|--- 2026-06-23 07:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moww3fmi5f2f...

CVE-2026-8378

The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to the frontend file-rename endpoint before storing it as post meta and rendering it back on the admin File Manager listing, leading to a Stored Cross-Site Scripting vulnerability...

vim: arbitrary command execution via modeline sandbox bypass

A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the complete, guitabtooltip, printheader options and the mapset function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution...

Updated mumble packages fix security vulnerability

Mumble is prone to an out-of-bounds array access, which may result in denial of service client crash...

MGASA-2026-0228 Updated mumble packages fix security vulnerability

Mumble is prone to an out-of-bounds array access, which may result in denial of service client crash...

UBUNTU-CVE-2026-55655

A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...

Exploit for Improper Certificate Validation in Openssl

No d...

CVE-2026-11833

creationtimestamp| type| source ---|---|--- 2026-06-23 03:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mowfv5w3xq2w 2026-06-23 03:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116797186334941765 2026-06-23 03:15:09+00:00| seen|...

samba: Samba: Remote Code Execution in printing subsystem via unescaped job description

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

CVE-2026-55409

creationtimestamp| type| source ---|---|--- 2026-06-23 00:55:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow6uyb2ir23...

CVE-2026-48500

creationtimestamp| type| source ---|---|--- 2026-06-23 00:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow5xmq4hl2q 2026-06-24 04:42:12+00:00| seen| https://gist.github.com/alon710/f3efb3a6eb14f85378da7277ba2da374...