SUSE-SU-2026:24096-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

SUSE-SU-2026:24144-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

OPENSUSE-SU-2026:22022-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

SUSE-SU-2026:4492-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

Astra Linux – Vulnerability in Linux 5.10, Linux

Before version 5.17.9, the Linux kernel allowed TCP servers to identify clients by observing which source ports were used. This occurs due to the use of Algorithm 4 "Double-Hash Port Selection Algorithm" from RFC 6056...

ROS-20261002-73-0062

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0064

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0065

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0061

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

ROS-20261002-73-0063

The vulnerability of the data selection evaluator in PostgreSQL database management systems is related to incorrect session duration. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CLEANSTART-2024-AF65938 Use after free in Selection API in Google Chrome prior to 93

Security vulnerability affects the chromium package. Use after free in Selection API in Google Chrome prior to 93...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_7500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237500 advisory. Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer CVE-2023-6204 Mozilla: Use-after-free in MessagePort::Entangled CVE-2023-6205 Mozilla:...

High-Quality Data Do Not Mean Safe! Poisoning LLMs after Data Selection

Safety-aligned Large Language Models remain vulnerable to fine-tuning on small sets of harmful or benign-looking samples. However, prior studies typically assume that poisoned samples directly enter downstream fine-tuning, overlooking quality-based selection in practical training pipelines. To fi...

Rocky Linux 9 [CIQ] Security Update: tpm2-tools / tpm2-tools-debuginfo / tpm2-tools-debugsource Multiple Vulnerabilities (crlsa-2024_9424)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249424 advisory. tpm2-tools: arbitrary quote data may go undetected by tpm2checkquote CVE-2024-29038 tpm2-tools: pcr selection value is not compared with the attest...

Incorrect Behavior Order

Overview @anthropic-ai/claude-code is an Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you. Affected versions of this package are vulnerable to Incorrect Behavior Order via...

SUSE CVE-2026-101905

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own createConnection value. A separate same-process prototype-pollution flaw places a function on...

CVE-2026-102829

simple-git, an interface for running git commands in any node.js application, enables applications to execute Git operations from JavaScript. Prior to 2.0.1 of the argv-parser package, parseEnv omits VISUAL from GitEnvKeys, so prepareEnv drops the value before vulnerabilityCheck can classify it a...

Linux Distros Unpatched Vulnerability : CVE-2026-100888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkimcanonselecthdrs of the file libopendkim/dkim-canon...

SUSE CVE-2026-100888

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkimcanonselecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The atta...