OPENSUSE-SU-2026:11686-1 helm3-3.21.3-8.1 on GA media

These are all security issues fixed in the helm3-3.21.3-8.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11684-1 grafana-12.4.10-1.1 on GA media

These are all security issues fixed in the grafana-12.4.10-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the `create_securityfs_measurement_lists()` function in the `security/integrity/ima/ima_fs.c` module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the createsecurityfsmeasurementlists function in the security/integrity/ima/imafs.c module of the Linux kernel’s security subsystem is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a...

Oracle Linux 10 : ELSA-2026-63332-0: / buildah (ELSA-2026-633320)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-633320 advisory. - rebuild for CVE-2026-33810 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

OPENSUSE-SU-2026:11685-1 hauler-2.1.0-2.1 on GA media

These are all security issues fixed in the hauler-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

hauler-2.1.0-1.1 on GA media (moderate)

hauler-2.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11667-1 Rating: moderate Cross-References: CVE-2026-37236 CVE-2026-41178 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3...

OPENSUSE-SU-2026:11690-1 python310-3.10.20-10.1 on GA media

These are all security issues fixed in the python310-3.10.20-10.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11680-1 agama-web-ui-24+0.a836cced5-52.1 on GA media

These are all security issues fixed in the agama-web-ui-24+0.a836cced5-52.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11682-1 ffmpeg-8-8.1.2-3.1 on GA media

These are all security issues fixed in the ffmpeg-8-8.1.2-3.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11679-1 agama-24+0.a836cced5-54.1 on GA media

These are all security issues fixed in the agama-24+0.a836cced5-54.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11677-1 MozillaFirefox-155.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-155.0-1.1 package on the GA media of openSUSE Tumbleweed...

mcphost-0.34.0-10.1 on GA media (moderate)

mcphost-0.34.0-10.1 on GA media Announcement ID: openSUSE-SU-2026:11670-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-81092 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-81092 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N...

firefox-esr-153.2.0-1.1 on GA media (moderate)

firefox-esr-153.2.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11666-1 Rating: moderate Cross-References: CVE-2026-74952 CVE-2026-75874 CVE-2026-84118 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84123 CVE-2026-84124 CVE-2026-84125 CVE-2026-84129 CVE-2026-84130...

The vulnerability of the validate_timestamp_and_nonce() function in the online training platform Open edX Platform allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the validatetimestampandnonce function in the online training platform Open edX Platform relates to bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions and gain unauthorized access to protected...

OPENSUSE-SU-2026:11678-1 MozillaThunderbird-140.15.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-140.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11691-1 trivy-0.74.0-3.1 on GA media

These are all security issues fixed in the trivy-0.74.0-3.1 package on the GA media of openSUSE Tumbleweed...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.2 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 5.15.0-324.217.5.1 - crypto: qat: restore misc workqueue lifecycle Manjunath Patil Orabug: 39937535 - LTS version: v5.15.217 Vijayendra Suman - ring-buffer: Use...

heartthreader

Heartthreader Because manual vulnerability testing is tiresome. Just add some magic multithreading sauce!...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerabili...