Threat database

This security update for perl-Date-Manip addresses two vulnerabilities: CVE-2026-60074, which causes corrupted dates when processing non-ASCII decimal digits that pass numeric range checks, and CVE-2026-60075, which leads to CPU exhaustion due to quadratic backtracking in time substitution parsing. Both issues can affect the correctness and performance of date processing in the affected software.

Multiple security issues were addressed in the evince-48.4-2.1 package included in the GA media of openSUSE Tumbleweed. These fixes resolve vulnerabilities present in prior versions of the evince package.

Multiple security issues were fixed in the perses-cli-0.54.0-1.1 package included in the GA media of openSUSE Tumbleweed. These vulnerabilities affect the SUSE product but specific technical details and affected versions are not provided. The overall severity is assessed as medium.

This security update for OpenVPN addresses two denial of service vulnerabilities. The first (CVE-2026-13122) involves a reachable assertion triggered by a malformed authentication token when external-auth is enabled. The second (CVE-2026-13698) is a memory leak caused by remote attackers using a valid tls-crypt-v2 client key. Both issues can cause service disruption.

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (bsc#1271648). - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (bsc#1266970). - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: ipv4: account for fraggap on the paged allocation path (bsc#1271370).

A security update for libpng16 has been released, updating the library to version 1.6.58. The update addresses multiple issues as noted in the upstream changes. No specific vulnerabilities or technical details are provided in the available information.

A security update for libpng16 has been released, updating the version to 1.6.58. The update addresses multiple issues as referenced in the upstream changes. No specific vulnerabilities or technical details are provided in the available information.

This security update for s2n addresses two vulnerabilities: CVE-2026-16318, a denial of service caused by a memory leak in the QUIC transport parameters handler, and CVE-2026-16317, a man-in-the-middle attack that can silently discard individual application data records. Both issues affect the s2n component used by SUSE. No specific affected versions or patch details are provided in the available data.

This security update for nsd addresses multiple vulnerabilities including a bypass of client certificate verification over TLS, out-of-bounds stack write with crafted APL resource records, denial of DNS over TLS service, and a heap overflow causing crashes with crafted SVCB resource records. The update includes version 4.14.3 which fixes these issues and adds various feature enhancements such as systemd notify support, dnstap support, and TCP fast open support.

A security update for perl-Mojolicious addresses a vulnerability (CVE-2026-15747) where CSRF tokens were susceptible to BREACH attacks due to token reuse across a session. The update changes token handling to mask tokens with a fresh random value on every request. Additional fixes include limiting JSON decoding depth to prevent memory exhaustion and various improvements and bug fixes in the Mojolicious framework.

This security update for perl-YAML-Syck addresses multiple memory-safety vulnerabilities in the libsyck library that are exploitable via the default YAML::Syck::Load() function when processing untrusted input. The fixed issues include out-of-bounds reads and use-after-free conditions that could lead to crashes or potentially other impacts. The update also hardens base64 decoding and enforces maximum depth limits to prevent stack exhaustion from deeply nested inputs.

This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels

Multiple security issues were fixed in the ImageMagick-7.1.2.28-1.1 package distributed with openSUSE Tumbleweed. These vulnerabilities affect the ImageMagick software as packaged by SUSE. No specific details on the nature of the vulnerabilities or affected versions are provided.

Multiple security issues were fixed in the freerdp-3.30.0-1.1 package distributed on the GA media of openSUSE Tumbleweed. These issues affect various versions of FreeRDP across different Linux distributions including Ubuntu and SUSE. The vulnerabilities have been addressed in this updated package version.

CVE-2026-63308 is a medium severity security vulnerability affecting the helm3 package. It is addressed in the helm3-3.21.4-0.1.hum1 update for Red Hat Hardened Images and the helm3-3.21.3-4.1 package on openSUSE Tumbleweed. The vulnerability involves issues tracked under CWE-129 and CWE-1285. No known exploits are reported in the wild. The vendor has released an official fix.

A security vulnerability (CVE-2026-45700) in FreeRDP's planar bitmap decoder allows an out-of-bounds write that can lead to arbitrary code execution. This affects the xfreerdp client used to connect to RDP servers. Red Hat has issued a security update for Red Hat Enterprise Linux 9 and related variants to address this issue. The vulnerability is rated as high severity by Red Hat Product Security. The update fixes the flaw by correcting the out-of-bounds write condition.

Multiple security vulnerabilities were found and fixed in libssh, including a critical stack buffer overflow in the SFTP server's longname construction. This flaw allows attackers to cause buffer overflows by listing attacker-controlled filenames, potentially leading to crashes or code execution. Other issues include denial of service, information disclosure, integrity downgrade, and use-after-free vulnerabilities. Red Hat released updated packages (libssh-0.12.2-1.hum1) that address these issues. No workaround exists for the critical buffer overflow, so applying the update is necessary.

A security update for OpenSSL 3 addresses a denial-of-service (DoS) vulnerability identified as 'HollowByte' that involves attacker-controlled memory allocation. This vulnerability could allow an attacker to cause a DoS condition by manipulating memory allocation within OpenSSL. The update fixes this issue to improve the security and stability of the OpenSSL library.

A security update for OpenSSL 3 addresses a denial-of-service (DoS) vulnerability identified as 'HollowByte' that involves attacker-controlled memory allocation. This vulnerability could allow an attacker to cause a DoS condition by manipulating memory allocation in OpenSSL 3. The update fixes this issue to prevent such exploitation.