containerized-data-importer1.66-api-1.66.1-1.1 on GA media (moderate)

containerized-data-importer1.66-api-1.66.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11732-1 Rating: moderate Cross-References: CVE-2026-41178 CVE-2026-56854 CVE-2026-56855 CVE-2026-84303 CVE-2026-84304 CVSS scores: CVE-2026-41178 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L...

OPENSUSE-SU-2026:11768-1 syncthing-2.1.5-1.1 on GA media

These are all security issues fixed in the syncthing-2.1.5-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-9804 affecting package kubevirt for versions less than 1.8.4-1

CVE-2026-9804 affecting package kubevirt for versions less than 1.8.4-1. An upgraded version of the package is available that resolves this issue...

CLSA-2026-1789166016 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.7-tuxcare.9...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

CVE-2026-90455 Dependency on vulnerable third-party component in Malcolm

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...

Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)

Title Missing authorization on Media sub-form store action allows unpermissioned product media update Description A lack of authorization control on the store method was found in packages/admin/src/Livewire/Components/Products/Form/Media.php. The security fix released for GHSA-h4mp-g9c6-xwph adde...

CLSA-2026-1789161525 TuxCare security update for validator (2 CVEs)

TuxCare rebuilt validator to address 2 CVEs. Fixed in 7.2.0-tuxcare.1...

CLSA-2026-1789161501 TuxCare security update for validator (1 CVE)

TuxCare rebuilt validator to address 1 CVE. Fixed in 4.4.0-tuxcare.1...

CLSA-2026-1789161495 TuxCare security update for mout (1 CVE)

TuxCare rebuilt mout to address 1 CVE. Fixed in 0.11.1-tuxcare.2...

CLSA-2026-1789160133 TuxCare security update for 2 packages (1 CVE)

TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 5.24.0-tuxcare.1...

CLSA-2026-1789159896 TuxCare security update for fastify (2 CVEs)

TuxCare rebuilt fastify to address 2 CVEs. Fixed in 5.7.4-tuxcare.1...

CLSA-2026-1789159895 TuxCare security update for 3 packages (1 CVE)

TuxCare rebuilt 3 packages to address 1 CVE. Fixed in 6.30.3-tuxcare.2...

CLSA-2026-1789159797 TuxCare security update for bn.js (1 CVE)

TuxCare rebuilt bn.js to address 1 CVE. Fixed in 4.11.6-tuxcare.1...

CLSA-2026-1789159763 TuxCare security update for fresh (1 CVE)

TuxCare rebuilt fresh to address 1 CVE. Fixed in 0.2.2-tuxcare.1...

CLSA-2026-1789159265 TuxCare security update for 123 packages (1 CVE)

TuxCare rebuilt 123 packages to address 1 CVE. Fixed in 11.0.31.tuxcare0001...

DEBIAN-CVE-2026-89752

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...

CVE-2026-89752

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...

CVE-2026-89752

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...