Threat database

This security update for the SUSE product addresses multiple vulnerabilities in OpenSSL, including out-of-bounds reads and writes, stack corruption, information leaks, undefined behavior, and heap buffer overflows. These issues affect various OpenSSL components such as PEM password callbacks, AES key wrapping, digest finalization, PSK and cookie trampolines, OCSP URL processing, and cipher update operations. The vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-41677 to CVE-2026-45784. No specific affected versions are provided in the available data.

Important: kernel security update

A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit pixels. This type mismatch causes an out-of-bounds heap write that can lead to denial of service (process crash) and potential memory corruption.

A security update for amazon-ecs-init addresses CVE-2026-10722, an integer overflow vulnerability in the github.com/cilium/ebpf library. This overflow occurs during BTF string offset boundary checks and can cause a crash when malformed ELF/BTF input is parsed. The update also includes various enhancements and bug fixes.

This update for ldns fixes the following issue - CVE-2026-10846: when ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).

MariaDB server versions with the wsrep_notify_cmd feature enabled are vulnerable to command injection via the name of a joiner node. This vulnerability allows remote attackers to execute arbitrary shell commands on the server, potentially leading to full system compromise. Multiple MariaDB versions are affected. A security update is available that fixes this issue. Disabling the wsrep_notify_cmd feature is a recommended workaround for those unable to upgrade immediately.

This security update for Chromium addresses multiple critical vulnerabilities including use-after-free, out-of-bounds writes, heap buffer overflows, race conditions, integer overflows, and insufficient validation of untrusted input. These issues affect various components such as WebGL, Aura, Skia, V8, GPU, and Views. The update fixes these vulnerabilities in Chromium version 151.0.7922.109. The vulnerabilities are critical due to their potential to cause memory corruption and other severe impacts.

A security update for GraphicsMagick addresses CVE-2026-56379, which involves arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files. This vulnerability could allow an attacker to inject malicious drawing commands during SVG processing.

Multiple security issues were addressed in the python313-scikit-learn-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed. The vulnerabilities have been fixed in this package version. No specific details about the nature of the vulnerabilities or affected versions are provided.

A Server-Side Request Forgery (SSRF) bypass vulnerability exists in stunnel versions 5.79 and earlier when configured with the non-default 'protocol = socks' setting. This flaw allows an attacker who can reach the SOCKS proxy to bypass localhost restrictions by using IPv4-mapped IPv6 or unspecified addresses, potentially accessing services bound to the local interface that should not be network-accessible. Exploitation depends on the presence and security of such local services. The vulnerability has a medium severity rating.

This security update for perl-Date-Manip addresses two vulnerabilities: CVE-2026-60074, which causes corrupted dates when processing non-ASCII decimal digits that pass numeric range checks, and CVE-2026-60075, which leads to CPU exhaustion due to quadratic backtracking in the unanchored time substitution in the _parse_time function. Both issues have been fixed in this update.

A security update for kak-lsp addresses multiple issues including compatibility regressions, hangs when editing files without trailing newlines, buffer synchronization corruption related to .editorconfig settings, and updates to default language servers. The update also refreshes the vendored crate registry and confirms that kak-lsp is not affected by several known CVEs in dependencies. Various fixes and feature enhancements are included up to version 21.0.2.

This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/userauth.c` (bsc#1263890). - CVE-2026-58050: heap buffer overflow due to missing bounds check in attribute count of publickey-subsystem response (bsc#1269568). - CVE-2026-58051: uninitialized pointer freed when malformed responses are sent by an SSH server (bsc#1269567). - CVE-2026-66032: arbitrary code execution via double-free in SFTP session (bsc#1272737). - CVE-2026-66033: denial of service via integer underflow in AES-GCM cipher negotiation (bsc#1272736). - CVE-2026-66034: information disclosure and potential arbitrary code execution via heap out-of-bounds read (bsc#1272735). - CVE-2026-66035: arbitrary code execution via heap buffer overflow during SSH negotiation (bsc#1272734).

This security update for suseconnect-ng upgrades the software to version 1.23.0, addressing multiple issues including improved product migration handling, updated Go version for building, stricter flag parsing, consistent interactive handling, and enhanced package collection capabilities. It also allows deregistration when a subscribed registration code has expired. No specific CVE or exploit details are provided.

This security update for gitoxide addresses multiple vulnerabilities and bugs, including a critical command execution bypass via crafted .gitmodules files (CVE-2026-40034), submodule name validation bypass leading to credential disclosure, and denial-of-service issues in pack data processing. Additional fixes prevent HTTP credential leakage on redirects and improve submodule handling. The update also includes new features and general improvements. No known exploits are reported in the wild.

A security update for Gleam version 1.18.1 addresses a vulnerability (CVE-2026-59247) involving insufficient verification of data authenticity. This flaw could allow a man-in-the-middle (MITM) attacker to substitute forged Hex package contents during dependency resolution. The update also sets the minimum required Erlang version to 26 and includes various bug fixes and performance improvements.

A security update for SUSE's nodejs24 addresses multiple vulnerabilities including SSRF bypass, HTTP/2 memory limit bypass, permission model flaws, heap-use-after-free, HTTPS agent issues, DNS resolution errors, request smuggling, and crash conditions. The update upgrades nodejs24 to version 24.18.1 to fix these issues.

This update for postgresql-jdbc fixes the following issue - CVE-2026-42198: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication (bsc#1264174).

Multiple security issues were addressed in the libsdb2_5_0-6.2.0-1.1 package included in the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities present in prior versions of this package. No specific details about the nature of the vulnerabilities or affected versions are provided.