Security update for ImageMagick (moderate)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21391-1 Rating: moderate References: bsc1268640 bsc1270006 bsc1270081 bsc1271100 bsc1271293 bsc1271294 bsc1271311 bsc1271312 bsc1271313...

firefox-esr-140.13.0-1.1 on GA media (moderate)

firefox-esr-140.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11329-1 Rating: moderate Cross-References: CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358...

Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities

Summary There are vulnerabilities in IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 FP1 IF4 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-34197 DESCRIPTION: Improper Input...

[SECURITY] [DSA 6394-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6394-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

WordPress Bulk Page Generator – LPagery plugin <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bulk Landing Page Creator for WordPress LPagery versions = 2.5.7...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: opensearch, geoserver, seata, apache-tika-fips, confluent-kafka-jre-bcfips, flyway-fips, jenkins-plugin-manager, elasticsearch-fips, logstash, elasticsearch, hono, logstash-fips, nacos-docker, cassandra, airbyte-server-fips, pinot-fips, opensearch-fips, gradle,...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, crossplane-provider-aws-xray-fips, crossplane-provider-azure-alertsmanagement, crossplane-provider-azure-portal, crossplane-provider-aws-ram-fips, crossplane-provider-aws-connect, crossplane-provider-aws-cloudtrail,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-directconnect, crossplane-provider-aws-xray-fips, crossplane-provider-azure-alertsmanagement, crossplane-provider-azure-portal, crossplane-provider-aws-ram-fips, crossplane-provider-aws-connect, crossplane-provider-aws-cloudtrail,...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: ruby3.3-jrjackson, gradle, apache-nifi, scala, confluent-kafka, akhq, keycloak-config-cli, cassandra, zookeeper, spark, wavefront-proxy, apache-nifi-registry, flyway, druid, apache-tika, sonarqube, opensearch, ruby3.2-jrjackson, apicurio-registry, infinispan,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: ruby3.3-jrjackson, gradle, confluent-kafka, akhq, keycloak-config-cli, cassandra, zookeeper, spark, wavefront-proxy, flyway, druid, apache-tika, sonarqube, opensearch, ruby3.2-jrjackson, infinispan, tez, thingsboard, logstash, jenkins-plugin-manager...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: osv-scanner, src, glow, crossplane-provider-aws-sqs, crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-elasticache, crossplane-provider-aws-lambda, crossplane-provider-aws-memorydb, crossplane-provider-aws-s3, dagger,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, cert-manager, harbor-registry, cosign, flux-source-controller, k3s, nerdctl, chisel, policy-controller, vcluster, nri-kafka, thanos, terraform-provider-kubernetes, crossplane-provider-aws-dynamodb, external-secrets-operator, wal-g,...

USN-8590-1: Exim vulnerabilities

It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue ...

USN-8588-1 gawk vulnerabilities

It was discovered that Gawk incorrectly handled memory when processing input using the getline redirection. An attacker could possibly use this issue to cause a denial of service. CVE-2026-40467 It was discovered that Gawk incorrectly handled certain integer calculations when allocating memory. A...

SUSE CVE-2026-47030

unknown...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified 84 vulnerabilities in various modules of Oracle PeopleSoft Enterprise, including HCM Talent Acquisition Manager, In-Memory Project Discovery, FIN Expenses, SCM eProcurement, CC Common Application Objects, SCM Order Management, CRM Common Objects, and FIN Program Management,...