Open Source Vulnerabilities

, Kernel

tracing: Hold trace_types_lock when resetting last boot data from readers

, Kernel

tracing: Reject incomplete event filter expressions

, Kernel

tracing: Save the event file instead of the compatible histogram

, Kernel

tracing: Unregister field variable histograms when the command fails

, Kernel

tracing/histograms: Verify event_call identity when updating synth_event refcount

, Kernel

tracing/syscalls: Use copy_from_user for the faultable syscall buffer

, Kernel

io_uring/waitid: own the request before clearing ->head

, Kernel

io_uring/cmd: don't leave list poison in ->hash_node

, Kernel

io_uring/wait: don't spin on a stuck overflow list

, Kernel

io_uring/io-wq: don't lose the signal that ends work

, Kernel

io_uring/waitid: prevent cancel reference wrap

, Kernel

keys: Avoid the owner account dereference in named keyring lookup

, Kernel

keys: Check the authorization payload in process keyring searches

, Kernel

keys: Protect the type name while describing a key

, Kernel

keys: make keyring indexes independent of kernel addresses

, Kernel

keys: Protect the read method check against type removal

, Kernel

keys/trusted_keys: return immediately after TPM unseal failure

, Kernel

asymmetric_keys: reject trust keys without IDs

, Kernel

ftrace: Initialize modname and offset in print_rec()

, Kernel

coredump: hold RCU while releasing parked threads

, Kernel

fork: release the files of a failed fork after sched_cancel_fork()

kgraft-patch-SLE12-SP5_Update_85

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

unbound

Updated unbound package fixes security vulnerabilities

Rancher meta proxy allowlist bypass leading to server-side request forgery

org.springframework:spring-beans, org.springframework:spring-context, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-web

TuxCare security update for org.springframework (4 CVEs)

org.springframework:spring, org.springframework:spring-beans, org.springframework:spring-core, org.springframework:spring-expression, org.springframework:spring-web, org.springframework:spring-webflux, org.springframework:spring-webmvc

TuxCare security update for org.springframework (10 CVEs)

undici

TuxCare security update for undici (1 CVE)

undici

TuxCare security update for undici (2 CVEs)

undici

TuxCare security update for undici (2 CVEs)

org.springframework:spring-expression

TuxCare security update for org.springframework:spring-expression (1 CVE)

undici

TuxCare security update for undici (2 CVEs)

org.springframework:spring-expression, org.springframework:spring-web

TuxCare security update for org.springframework (3 CVEs)

@modelcontextprotocol/sdk

TuxCare security update for @modelcontextprotocol/sdk (1 CVE)

@hono/node-server

TuxCare security update for @hono/node-server (1 CVE)

undici

TuxCare security update for undici (2 CVEs)

@hono/node-server

TuxCare security update for @hono/node-server (1 CVE)

protobufjs

TuxCare security update for protobufjs (1 CVE)

undici

TuxCare security update for undici (2 CVEs)

An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src

An Otter Wiki before 2.26.2 Stored XSS via Math Code Block

Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller

XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter

org.springframework:spring-expression, org.springframework:spring-webflux, org.springframework:spring-webmvc

TuxCare security update for org.springframework (3 CVEs)

python-jose

libaec, libaec, libaec

libaec

CVE-2026-120457 affecting package libaec 1.1.3-1

sleuthkit, sleuthkit, sleuthkit

sleuthkit, sleuthkit, sleuthkit

libgphoto2, libgphoto2, libgphoto2

libgphoto2, libgphoto2, libgphoto2