Debian dsa-6483 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6483 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6483-1 [email protected] https://www.debian.org/securit...

OPENSUSE-SU-2026:11687-1 libcupsfilters-2.1.1-2.1 on GA media

These are all security issues fixed in the libcupsfilters-2.1.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11683-1 gegl-0.4.70-2.1 on GA media

These are all security issues fixed in the gegl-0.4.70-2.1 package on the GA media of openSUSE Tumbleweed...

UBUNTU-CVE-2026-84226

Unknown description...

OPENSUSE-SU-2026:11689-1 php-composer2-2.10.3-2.1 on GA media

These are all security issues fixed in the php-composer2-2.10.3-2.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2022-56032

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

The vulnerability of the iptfs_consume_frags() function in the net/xfrm/xfrm_iptfs.c module, a component of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iptfsconsumefrags function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the `create_securityfs_measurement_lists()` function in the `security/integrity/ima/ima_fs.c` module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the createsecurityfsmeasurementlists function in the security/integrity/ima/imafs.c module of the Linux kernel’s security subsystem is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a...

Oracle Linux 10 : ELSA-2026-63332-0: / buildah (ELSA-2026-633320)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-633320 advisory. - rebuild for CVE-2026-33810 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

hauler-2.1.0-1.1 on GA media (moderate)

hauler-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11667-1 Rating: moderate Cross-References: CVE-2026-37236 CVE-2026-41178 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3...

OPENSUSE-SU-2026:11681-1 cups-filters-1.28.17-9.1 on GA media

These are all security issues fixed in the cups-filters-1.28.17-9.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11684-1 grafana-12.4.10-1.1 on GA media

These are all security issues fixed in the grafana-12.4.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11688-1 ollama-0.33.1-1.1 on GA media

These are all security issues fixed in the ollama-0.33.1-1.1 package on the GA media of openSUSE Tumbleweed...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

OPENSUSE-SU-2026:11686-1 helm3-3.21.3-8.1 on GA media

These are all security issues fixed in the helm3-3.21.3-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11680-1 agama-web-ui-24+0.a836cced5-52.1 on GA media

These are all security issues fixed in the agama-web-ui-24+0.a836cced5-52.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11685-1 hauler-2.1.0-2.1 on GA media

These are all security issues fixed in the hauler-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11690-1 python310-3.10.20-10.1 on GA media

These are all security issues fixed in the python310-3.10.20-10.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the validate_timestamp_and_nonce() function in the online training platform Open edX Platform allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the validatetimestampandnonce function in the online training platform Open edX Platform relates to bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions and gain unauthorized access to protected...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.2 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 5.15.0-324.217.5.1 - crypto: qat: restore misc workqueue lifecycle Manjunath Patil Orabug: 39937535 - LTS version: v5.15.217 Vijayendra Suman - ring-buffer: Use...