SUSE-SU-2026:1505-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on scoconnfree bsc1255066. - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy...

$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims

Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S. last year, said it's suspending operations after it blamed Western intelligence agencies for a $13.74 million hack. The exchange said it fell victim to what it described as a large-scale cyber attack tha...

mt6893-security-research

MT6893 Security Research Five security research findings from...

DEBIAN-CVE-2026-40334

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptpunpackCanonFE in camlibs/ptp2/ptp-pack.c line 1377. The function copies a filename into a 13-byte buffer using strncpy without explicitly null-terminating the result. ...

CVE-2026-40334 libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptpunpackCanonFE in camlibs/ptp2/ptp-pack.c line 1377. The function copies a filename into a 13-byte buffer using strncpy without explicitly null-terminating the result. ...

CVE-2026-40334

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptpunpackCanonFE in camlibs/ptp2/ptp-pack.c line 1377. The function copies a filename into a 13-byte buffer using strncpy without explicitly null-terminating the result. ...

CVE-2026-40334 libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptpunpackCanonFE in camlibs/ptp2/ptp-pack.c line 1377. The function copies a filename into a 13-byte buffer using strncpy without explicitly null-terminating the result. ...

ROOT-OS-DEBIAN-13-CVE-2026-40393 CVE-2026-40393 in rootio-mesa - Patched by Root

Root has patched CVE-2026-40393 in the rootio-mesa package for Root:Debian:13. Multiple fixed versions available...

[SECURITY] [DLA 4524-2] postgresql-13 regression update

Debian LTS Advisory DLA-4524-2 [email protected] https://www.debian.org/lts/security/ Jochen Sprickerhof April 17, 2026 https://wiki.debian.org/LTS Package : postgresql-13 Version : 13.23-0+deb11u3 The fix for CVE-2026-2006 introduced a regression in SUBSTRING for toasted multibyte...

ROOT-OS-DEBIAN-13-CVE-2025-12084 CVE-2025-12084 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-12084 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-6069 CVE-2025-6069 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-6069 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-13836 CVE-2025-13836 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-13836 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-6075 CVE-2025-6075 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-6075 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-1299 CVE-2026-1299 in rootio-python3.13 - Patched by Root

Root has patched CVE-2026-1299 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-13837 CVE-2025-13837 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-13837 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-8291 CVE-2025-8291 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-8291 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-0865 CVE-2026-0865 in rootio-python3.13 - Patched by Root

Root has patched CVE-2026-0865 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-8194 CVE-2025-8194 in rootio-python3.13 - Patched by Root

Root has patched CVE-2025-8194 in the rootio-python3.13 package for Root:Debian:13. Multiple fixed versions available...

BIT-DJANGO-2026-4292 Privilege abuse in ModelAdmin.list_editable

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using ModelAdmin.listeditable incorrectly allowed new instances to be created via forged POST data. Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated a...

CVE-2026-34164 Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService

Valtimo is an open-source business process automation platform. In versions 13.0.0 through 13.21.0, the InboxHandlingService logs the full content of every incoming inbox message at INFO level. Inbox messages can contain highly sensitive information including personal data PII, citizen identifier...