This security update for opam addresses multiple vulnerabilities by updating the software to versions 2.5.0, 2.5.1, and 2.5.2. Notably, CVE-2026-41082 and CVE-2026-57825 are fixed in these updates. The update is provided by the SUSE Product Security Team and is classified as high severity. No CVSS score is available for these vulnerabilities.
This security update for vim addresses multiple vulnerabilities fixed in version 9.2.0780. The key issues include arbitrary code execution vulnerabilities via PHP and C omni-completion due to improper escaping, and an out-of-bounds write in SAL soundfolding caused by improper bounds checking. The update also includes other bug fixes unrelated to security.
Multiple security vulnerabilities have been identified and fixed in the gstreamer-plugins-bad component used in SUSE. These include out-of-bounds reads and writes, heap and stack buffer overflows, and improper validation issues affecting various parsers such as H.264, H.265, H.266, WebRTC, IPv4/TCP headers, and DTLS handshake processing. The vulnerabilities could lead to memory corruption or application crashes. The severity is assessed as high due to the nature of these issues. No CVSS score is provided. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
This security update for Grafana addresses two vulnerabilities: CVE-2026-33382, which limits the size of the request body at several API endpoints to prevent potential issues, and CVE-2026-8595, which fixes a stored cross-site scripting (XSS) vulnerability in the table panel. Both vulnerabilities have been fixed in this update.
A vulnerability in the Linux kernel's Bluetooth HCI event handling allowed a short HCI event frame to reach a memory copy operation without proper bounds checking. This was due to the function hci_store_wake_reason() being called before minimum payload length checks. The issue was fixed by moving wake reason storage into validated event handlers and enforcing lock contracts to prevent improper access.
A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues
The following security issues were fixed:
- CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893).
- CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723).
- CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267698).
- CVE-2026-52909: ip6_vti: set netns_immutable on the fallback device (bsc#1268662).
- CVE-2026-52943: net: skbuff: fix missing zerocopy reference in pskb_carve helpers (bsc#1269023).
- CVE-2026-53362: ipv6: account for fraggap on the paged allocation path (bsc#1269495).
This security update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 addresses multiple vulnerabilities affecting various kernel components including netfilter, ip6_tunnel, ALSA pcm, bonding, and SMB client. The fixes resolve issues such as invalid packet handling, use-after-free conditions, and improper user-space input acceptance. These vulnerabilities were collectively addressed in Live Patch 74 for SUSE Linux Enterprise 12 SP5.
Multiple security issues were addressed in the aws-nitro-enclaves-binaryblobs-upstream-1.4.5~git0.18a5f6f-1.1 package for openSUSE Tumbleweed. These fixes improve the security posture of the SUSE product by resolving vulnerabilities present in prior versions. No specific details about the nature of the vulnerabilities or affected versions are provided.
Multiple security issues were fixed in the ImageMagick package version 7.1.2.27-2.1 on the GA media of openSUSE Tumbleweed. These issues affect various Ubuntu package versions of ImageMagick 6.7.7.10. The vulnerabilities have been addressed in the specified package update.
A vulnerability in the Linux kernel's IOMMU Shared Virtual Addressing (SVA) on x86 allows stale page table entries to persist after kernel page table pages are freed, causing use-after-free or write-after-free conditions. This can lead to privilege escalation or data corruption. The issue is mitigated by disabling SVA on affected systems until a patch is applied. A fix introducing deferred freeing of kernel page table pages to safely invalidate IOMMU caches is available and should be applied via system updates and reboot.
This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 addresses multiple security vulnerabilities across various kernel subsystems. The fixes include out-of-bounds writes, use-after-free errors, invalid packet header handling, double free bugs, and other memory safety issues. These vulnerabilities affect network, memory management, RDMA, netfilter, IPv6, bonding, SCTP, SMB client, and other kernel components. The update mitigates risks of system compromise and instability by correcting these flaws.
This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 addresses multiple security vulnerabilities affecting various kernel subsystems, including networking, memory management, and file systems. The update fixes issues such as use-after-free, improper reference handling, and task preemption bugs. These vulnerabilities could potentially be exploited to compromise system stability or security. The update is part of Live Patch 12 for SUSE Linux Enterprise 16 and includes fixes for CVE-2026-45970 and several other CVEs. A patch is available and should be applied to affected systems.
This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 addresses multiple security vulnerabilities across various kernel components, including networking, memory management, USB, and others. The update fixes issues such as race conditions, out-of-bounds writes, use-after-free errors, and other memory corruption bugs. These vulnerabilities have been assigned CVE identifiers and are considered high severity. The update is a live patch (RT) for SUSE Linux Enterprise 16, indicating it can be applied without rebooting the system.
A security update for python-sqlparse addresses a vulnerability that limits recursion during the parsing of tuples to prevent potential issues. The update fixes the issue identified as GHSA-27jp-wm6q-gp25 (bsc#1268597). No specific affected versions or CVSS score are provided.
This security update for Grafana addresses multiple issues across several versions, including a fix for an information leakage vulnerability in Grafana Alerting (CVE-2025-12141) and a potential information disclosure issue in Apache Thrift (CVE-2026-41607). The updates include bug fixes, security patches, performance improvements, and feature enhancements. Notably, version 12.4.5 fixes a data source UID mismatch issue that returns a 400 error when the payload UID does not match the URL UID in PUT requests. Several breaking changes and migration steps were introduced in version 12.0.0. The update is provided by SUSE Product Security Team and affects the SUSE product. No specific affected versions are stated in the provided data.