Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: CVE-2026-109704: Privilege escalation in the Application Update component. CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...

SUSE-SU-2026:4736-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...

kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CLSA-2024-1709204660 kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CLSA-2025-1757961506 kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - xfrm: state: fix out-of-bounds read during lookup CVE-2024-57982 - nfsd: fix race between laundromat and freestateid CVE-2024-50106 - nfsd: split scstatus out of sctype CVE-2024-50106 - nfsd: avoid race...

CLSA-2026-1783338215 Fix of 38 CVEs

CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role CVE-2026-46113 CVE-2024-39467 - f2fs: fix to do sanity check on ixattrnid in sanitycheckinode CVE-2024-39467 CVE-2023-52796 - ipvlan: add ipvlanroutev6outbound helper CVE-2023-52796 CVE-2025-37879 - 9p/net: fix...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

CLSA-2026-1785561693 kernel: Fix of 14 CVEs

scsi: ses: Fix possible addldescptr out-of-bounds accesses - scsi: ses: Fix slab-out-of-bounds in sesenclosuredataprocess - i40e: increase max descriptors for XL710 - e1000e: fix heap overflow in e1000seteeprom - vsock: avoid to close connected socket after the timeout - ext4: fix use-after-free...

CLSA-2026-1790030905 kernel: Fix of 56 CVEs

usb: free iso schedules on failed submit CVE-2026-64348 - udf: validate VAT header length against the VAT inode size CVE-2026-64323 - USB: idmouse: fix use-after-free on disconnect race CVE-2026-64344 - USB: ldusb: fix use-after-free on disconnect race CVE-2026-64343 - USB: iowarrior: fix...

flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-98501

A flaw was found in the Linux kernel's Alps Human Interface Device HID driver. If registration of an input device fails during configuration, the driver frees the device memory while communication channels are already active, leaving a dangling reference. An attacker capable of attaching a...

CVE-2026-98443

A flaw was found in the Linux kernel's XFS file system. Improper pointer handling during the recovery of unlinked files can cause a use-after-free condition, where the operating system attempts to access memory after it has already been freed. A local user capable of mounting a specially crafted...

CVE-2026-98442

A flaw was found in the Linux kernel's traffic control connection tracking action actct. An attacker capable of sending network traffic handled by the affected system can cause a Denial of Service DoS or kernel memory corruption through a use-after-free vulnerability. This issue occurs because...

CVE-2026-98440

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem on ARM64 architectures. In nested virtualization configurations, shadow memory management structures are prematurely freed during shadow page flushes while other parts of the system may still reference them. A local...

CVE-2026-98441

A flaw was found in the Linux kernel's traffic control conntrack action module actct. An attacker capable of sending network traffic through affected packet filters could trigger a Denial of Service DoS or kernel memory corruption. This issue arises when cloned network packets sharing an...

CLSA-2026-1789039259 kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct CVE-2026-74464 - can: peakusb: peakusbstart: fix double free of transfer buffer on URB submit error CVE-2026-74456 - wifi: mwifiex: fix permanently busy scans after multiple roam iterations CVE-2026-68469 - drm/amdgpu/gfx8: drop...

flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

Important: Red Hat Security Advisory: flatpak-builder security update

An update for flatpak-builder is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...