SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

USN-8887-3: Linux kernel vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8903-2 linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8905-2 linux-gcp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

ROOT-OS-DEBIAN-12-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root

Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:12. Multiple fixed versions available...

santa

Santa !NOTE A partir de 2025, Santa ya no cuenta con el mantenimiento de Google. Animamos a los usuarios actuales a migrar a un fork de Santa que se mantenga activamente, como https://github.com/northpolesec/santa. Santa es un sistema de autorización de acceso a binarios y archivos para macOS...

golismero

¿Qué es GoLismero? GoLismero es un marco de código abierto para pruebas de seguridad. Actualmente está orientado a la seguridad web, pero puede ampliarse fácilmente a otros tipos de escaneos. Las características más interesantes del marco son: Independencia real de plataforma. Probado en Windows,...

ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3-defaults - Patched by Root

Root has patched CVE-2026-3644 in the python3-defaults package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-79363

Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting XSS vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing JavaScript event handlers in the Footer setting. The stored value is rendered without sufficient sanitization on the publ...

ROS-20261009-73-0549

The vulnerability of the lowpaniphcmcastctxaddrcompress function in the net/6lowpan/iphc.c module of the Linux kernel’s networking functions is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0465

The vulnerability of the acpiprocessorerratapiix4 function in the drivers/acpi/acpiprocessor.c file of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

ROS-20261009-73-0321

The vulnerability of the agpamd64probe function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0290

The vulnerability in the drivers/net/ethernet/xscale/ixp4xxeth.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0281

The vulnerability of the tegrachanneltryformat function in the drivers/staging/media/tegra-video/vi.c file of the Linux kernel’s media data preparation driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0279

The vulnerability of the drivers/staging/rtl8723bs/core/rtwmlme.c component in the Linux kernel is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261009-73-0163

The vulnerability of the vc4freehangstate function in the drivers/gpu/drm/vc4/vc4gem.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability can allow an attacker to cause a system...

ROS-20261009-73-0159

The vulnerability of the vc4savehangstate function in the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability could allow an attacker to cause a system...

ROS-20261009-73-0074

The vulnerability of the mtksmilarbremove function in the driver/memory/mtk-smi.c file of the memory driver for the Linux operating system kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20261009-73-0047

The vulnerability of the sprdspiprobe function in the drivers/spi/spi-sprd.c file of the Linux kernel’s SPI device driver relates to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a system failure...