CVE-2026-72299

In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock protects the backlog queue in this path, but it does not serialize...

CVE-2026-72187

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid self-deadlock during inode eviction An attribute-list update performed while allocating clusters can drop the last reference to the temporary attribute inode. Evicting that inode drops its reference to the base inode...

CVE-2026-72172

In the Linux kernel, the following vulnerability has been resolved: mm/mminit: fix uninitialized struct pages for ZONEDEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, sectionactivate reuses the unoptimized boot memmap. However, compoundnrpages still assumes th...

CVE-2026-72165

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nandselecttarget' 'cs' here must be in range 0:nanddevntargets...

CVE-2026-72103

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

CVE-2026-72096

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

CVE-2026-72019 macsec: don't read an unset MAC header in macsec_encrypt()

In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsecencrypt macsecencrypt reads the Ethernet header via ethhdrskb skb-head + skb-macheader to memmove the 12 source/destination MAC bytes forward and make room for the SecTAG. On the...

PT-2026-72678

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw aes decrypt The null-pointer-guard was incorrect, returning FAIL on valid pointer. Invert the guard, so it returns FAIL on invalid pointer...

PT-2026-76448

These are all security issues fixed in the obs-service-cargo-7.2.2-2.1 package on the GA media of openSUSE Tumbleweed...

CLEANSTART-2026-GA72012 Security fixes in knative-net-istio 1.19.6-r0

Package knative-net-istio version 1.19.6-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-EF97953 Security fixes in kubernetes 1.34.10-r2

Package kubernetes version 1.34.10-r2 fixes 2 vulnerabilities: ghsa-vgwf-h737-ff37, ghsa-f5wc-c3c7-36mc...

CLEANSTART-2026-WU53412 Security fixes in maven 3.8.6-r1

Package maven version 3.8.6-r1 fixes 4 vulnerabilities: CVE-2023-2976, CVE-2020-8908, CVE-2025-48924, CVE-2025-67030...

CLEANSTART-2026-IQ87161 Security fixes in git-sync 4.4.3-r1

Package git-sync version 4.4.3-r1 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-ZT61417 Security fixes in tempo 2.10.4-r1

Package tempo version 2.10.4-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39832...

CLEANSTART-2026-RI62285 Security fixes in thingsboard 4.3.1.3-r3

Package thingsboard version 4.3.1.3-r3 fixes 4 vulnerabilities: CVE-2026-59869, ghsa-52cp-r559-cp3m, ghsa-h67p-54hq-rp68, CVE-2026-53550...

CLEANSTART-2026-SM89830 Security fixes in kumactl 2.14.0-r2

Package kumactl version 2.14.0-r2 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-IU92725 Security fixes in prometheus-alertmanager 0.32.0-r0

Package prometheus-alertmanager version 0.32.0-r0 fixes 2 vulnerabilities: CVE-2026-39882, CVE-2026-39883...

CLEANSTART-2026-PF51019 Security fixes in temporal-server 1.31.1-r1

Package temporal-server version 1.31.1-r1 fixes 10 vulnerabilities: ghsa-q98v-9f9w-f49q, ghsa-hmhp-gh8m-c8xp, ghsa-p2gr-hm8g-q772, ghsa-xpg8-3hhp-p7w8, CVE-2025-14987...

CLEANSTART-2026-LZ94818 Security fixes in logstash-exporter-fips 1.9.1-r1

Package logstash-exporter-fips version 1.9.1-r1 fixes 1 vulnerabilities: CVE-2025-61726...

CLEANSTART-2026-AT48963 Security fixes in keda-fips 2.19.0-r2

Package keda-fips version 2.19.0-r2 fixes 8 vulnerabilities: CVE-2026-42151, CVE-2026-42154, CVE-2026-40179, CVE-2026-44903, ghsa-8rm2-7qqf-34qm...