Open Source Vulnerabilities

zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper

zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper

zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper, zookeeper

gimp, gimp-devel, gimp-devel-tools, gimp-libs, pygobject2, pygobject2, pygobject2, pygobject2-codegen, pygobject2-codegen, pygobject2-devel, pygobject2-devel, pygobject2-devel, pygobject2-doc, pygobject2-doc, pygtk2, pygtk2-codegen, pygtk2-devel, pygtk2-doc, python2-cairo, python2-cairo, python2-cairo, python2-cairo-devel, python2-cairo-devel

Important: gimp:2.8 security, bug fix, and enhancement update

kernel, kernel-64k, kernel-64k-core, kernel-64k-debug, kernel-64k-debug-core, kernel-64k-debug-devel, kernel-64k-debug-devel-matched, kernel-64k-debug-modules, kernel-64k-debug-modules-core, kernel-64k-debug-modules-extra, kernel-64k-devel, kernel-64k-devel-matched, kernel-64k-modules, kernel-64k-modules-core, kernel-64k-modules-extra, kernel-abi-stablelists, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-devel-matched, kernel-debug-modules, kernel-debug-modules-core, kernel-debug-modules-extra, kernel-debug-uki-virt, kernel-devel, kernel-devel-matched, kernel-doc, kernel-headers, kernel-modules, kernel-modules-core, kernel-modules-extra, kernel-rt, kernel-rt-64k, kernel-rt-64k-core, kernel-rt-64k-debug, kernel-rt-64k-debug-core, kernel-rt-64k-debug-devel, kernel-rt-64k-debug-modules, kernel-rt-64k-debug-modules-core, kernel-rt-64k-debug-modules-extra, kernel-rt-64k-devel, kernel-rt-64k-modules, kernel-rt-64k-modules-core, kernel-rt-64k-modules-extra, kernel-rt-core, kernel-rt-debug, kernel-rt-debug-core, kernel-rt-debug-devel, kernel-rt-debug-modules, kernel-rt-debug-modules-core, kernel-rt-debug-modules-extra, kernel-rt-devel, kernel-rt-modules, kernel-rt-modules-core, kernel-rt-modules-extra, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, kernel-uki-virt, kernel-uki-virt-addons, kernel-zfcpdump, kernel-zfcpdump-core, kernel-zfcpdump-devel, kernel-zfcpdump-devel-matched, kernel-zfcpdump-modules, kernel-zfcpdump-modules-core, kernel-zfcpdump-modules-extra, libperf, perf, python3-perf, rtla, rv

Important: kernel security update

eco-java-gradle-8.8

eco-java-gradle-8.14.3

spegel-fips-0.7

connect

TuxCare security update for connect (1 CVE)

py3.11-torch-2.6-cuda-12.4

eco-java-gradle-7.6.5

py3.12-torch-cuda-13.0-2.9

eco-java-gradle-8.14.2

eco-java-gradle-8.12

eco-java-gradle-8.10.1

eco-java-gradle-8.12.1

py3.10-torch-2.6-cuda-12.4

py3-ray

py3-ray

py3-ray

dulwich, dulwich, dulwich

python-dulwich

CVE-2026-122299 affecting package python-dulwich 0.21.7-6

py3.11-ray

py3.11-ray

py3.11-ray

Dulwich before 1.2.20 Commit Parser Tree Header Misinterpretation

Webmin: SSRF exploit in Upload and Download and File Manager modules

VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)

Open edX: Support "manage_course_team" REST API omits the `require_support_permission` gate its sibling support views enforce

node-forge

TuxCare security update for node-forge (5 CVEs)

nodemailer

TuxCare security update for nodemailer (1 CVE)

minimatch

TuxCare security update for minimatch (1 CVE)

node-forge

TuxCare security update for node-forge (1 CVE)

Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML

follow-redirects

TuxCare security update for follow-redirects (1 CVE)

py3.12-ray

py3.12-ray

py3.12-ray

org.codehaus.jettison:jettison

TuxCare security update for org.codehaus.jettison:jettison (1 CVE)

Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing

Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences

py3.12-ray

py3.12-ray

py3.12-ray

radare2: Remote code execution when loading Pebble/SMD binary

org.codehaus.plexus:plexus-utils

TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

GLPI: Unauthorized visibility expansion of knowbase items, reminders and RSS feeds

net.minidev:json-smart

TuxCare security update for net.minidev:json-smart (1 CVE)

GLPI: Blind Time based SQLI in dropdowns

org.codehaus.plexus:plexus-utils

TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)