ROOT-APP-PYPI-CVE-2026-34525 CVE-2026-34525 in aiohttp - Patched by Root

Root has patched CVE-2026-34525 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

Virtuozzo Infrastructure 7.4 Hotfix 2 (7.4.0-80)

This update provides stability and security fixes. Vulnerability id: VSTOR-140619 A security fix for CVE-2026-64531. Vulnerability id: VSTOR-140678 A security fix for CVE-2026-64561. Vulnerability id: VSTOR-87519 Storage version bumping could remain disabled until the end of a cluster update,...

BIT-GOLANG-2026-56859 Add recursion depth guard during decode in encoding/xml

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

OPENSUSE-SU-2026:11549-1 markdown-oxide-0.25.12-1.1 on GA media

These are all security issues fixed in the markdown-oxide-0.25.12-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11555-1 postgresql17-17.11-1.1 on GA media

These are all security issues fixed in the postgresql17-17.11-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11550-1 perl-Net-CIDR-Set-0.230.0-1.1 on GA media

These are all security issues fixed in the perl-Net-CIDR-Set-0.230.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11545-1 ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-74951 Clickjacking issue in Firefox for Android

Clickjacking issue in Firefox for Android. This vulnerability was fixed in Firefox 154...

CVE-2026-74990

CVE-2026-74990 affects Thunderbird ESR 140.13, ESR 153.0, and Thunderbird 153, where internally found bugs showed evidence of memory corruption or security-relevant defects. Mozilla assesses that, with enough effort, some could have been exploitable, scoring it Critical (CVSS 9.8). The vulnerabil...

CVE-2026-74987 Internally found bugs fixed in Thunderbird ESR 140.14, Thunderbird ESR 153.1 and Thunderbird 154

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird ESR 153.0 and Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

ROOT-APP-NPM-CVE-2026-44574 CVE-2026-44574 in next - Patched by Root

Root has patched CVE-2026-44574 in the next package for Root:npm. Multiple fixed versions available...

UBUNTU-CVE-2026-72458

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL pointer dereference in unpackpdb pdb-dfa could be NULL if unpackdfa fails, causing a NULL pointer dereference...

UBUNTU-CVE-2026-74433

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgkissuechallenge Fix rxgkissuechallenge to free the page containing the challenge content after invoking the tracepoint as the whdr passed to the tracepoint points into the page just freed...

CVE-2026-74423

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix leak when pinning ubuf pages When pinuserpagesfast returns fewer pages than requested, the pages that were successfully pinned are not released, leading to a leak. Fix this by unpinning any partially pinned pag...

CVE-2026-72477

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: call ntfsbadinode when failing to rename It is safe to call ntfsbadinode on live inodes since: commit 519b078998ce "fs/ntfs3: Exclude call makebadinode for live nodes." The WARNON was added when it wasn't safe by: commi...

CVE-2026-72457 apparmor: fail policy unpack on accept2 allocation failure

In the Linux kernel, the following vulnerability has been resolved: apparmor: fail policy unpack on accept2 allocation failure unpackpdb may need to allocate a missing ACCEPT2 table for older policy data. If that allocation failed, it set an error message but jumped to the success path, returning...

CVE-2026-72415

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Validate written enum value in geputenumdouble geputenumdouble passes the user-supplied enumeration index item0 to sndsocenumitemtoval without checking it against the number of items in the enum: ret =...

CVE-2026-72374

The CVE affects the Linux kernel AFS client: a bug in callback message parsing caused -EAGAIN to be swallowed (instead of being propagated by afs_extract_data), potentially impacting availability. The fix corrects the callback service message parsers to pass through -EAGAIN. CVSS 3.1 base score 7...

CVE-2026-72370

In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bioiovitergetpages or the bounce helper succeeds but builds a short bio, the REQATOMIC size check rejects it before submission. The old error path only dropped the bio reference...

CVE-2026-72351

In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...