CVE-2026-50560 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, spark, docker-selenium, kserve-modelmesh...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

CVE-2026-43218

In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9903: Fix potential memory leak in tw9903probe In one of the error paths in tw9903probe, the memory allocated in v4l2ctrlhandlerinit and v4l2ctrlnewstd is not freed. Fix that by calling v4l2ctrlhandlerfree on the...

CVE-2026-43137

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix NULL pointer dereference If there's a mismatch between the DAI links in the machine driver and the topology, it is possible that the playback/capture widget is not set, especially in the case of loopbac...

[SECURITY] Fedora 42 Update: rust-openssl-sys-0.9.114-1.fc42

FFI bindings to OpenSSL...

CVE-2026-31782

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad containerof in intelpmuhwconfig Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86hybridpmu and a containerof operation in...

[SECURITY] Fedora 43 Update: rust-rpm-sequoia-1.10.2-1.fc43

An implementation of the RPM PGP interface using Sequoia...

[SECURITY] Fedora 42 Update: mingw-python3-3.11.15-4.fc42

MinGW Windows python3...

[SECURITY] Fedora 42 Update: rust-cargo-c-0.10.19-2.fc42

Helper program to build and install c-like libraries...

[SECURITY] Fedora 44 Update: rust-native-tls-0.2.18-1.fc44

A wrapper over a platform's native TLS implementation...

CVE-2026-23386

In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gvetxcleanpendingpackets for QPL In DQ-QPL mode, gvetxcleanpendingpackets incorrectly uses the RDA buffer cleanup path. It iterates numbufs times and attempts to unmap entries in the dma array...

CVE-2026-31826

pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...

[SECURITY] Fedora 43 Update: mingw-zlib-1.3.2-1.fc43

MinGW Windows zlib compression library...

CVE-2025-11065 affecting package vitess for versions less than 17.0.7-14

CVE-2025-11065 affecting package vitess for versions less than 17.0.7-14. A patched version of the package is available...

Wireshark Analyzer 4.6.4

Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...

CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2

CVE-2026-0994 affecting package mysql for versions less than 8.0.45-2. A patched version of the package is available...

CVE-2026-22022 vulnerabilities

Vulnerabilities for packages: solr...

CVE-2026-0961

BLF file parser crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service...

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16

CVE-2025-61664 affecting package grub2 for versions less than 2.06-16. A patched version of the package is available...

CVE-2023-54225

In the Linux kernel, the following vulnerability has been resolved: net: ipa: only reset hashed tables when supported Last year, the code that manages GSI channel transactions switched from using spinlock-protected linked lists to using indexes into the ring buffer used for a channel. Recently,...