A security update for the python-cryptography package in SUSE addresses multiple vulnerabilities primarily in the rust-openssl crate. These include buffer overflows, out-of-bounds reads and writes, memory leaks, and the potential for arbitrary code execution via specially crafted certificates. The update also resolves several non-security issues related to systemd services and encrypted partition unlocking. The vulnerabilities impact cryptographic operations and key management, posing risks of memory corruption and code execution.
This update for perl-DBI fixes the following issues
- CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code
execution (bsc#1271018).
- CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process crash
(bsc#1271017).
A security update for the SUSE Linux Enterprise 11 SP4 kernel addresses multiple vulnerabilities, including use-after-free bugs, race conditions, and improper handling of network protocols. The update fixes 10 distinct CVEs affecting components such as SCSI, TCP, bonding, ALSA, KVM, networking, and Bluetooth subsystems. These vulnerabilities could lead to memory corruption or unexpected behavior in kernel modules.
This update for agama fixes the following issues
- CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-
openssl crate (bsc#1270602).
- CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl crate (bsc#1270678).
- CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate
(bsc#1270784).
- CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent
memory in rust-openssl crate (bsc#1270850).
- CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate
(bsc#1270526).
- CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding in rust-openssl crate
(bsc#1270891).
- CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust-
openssl crate (bsc#1270992).
A security update for GraphicsMagick addresses a vulnerability identified as CVE-2026-13606. The issue involves crafted Photo CD (PCD) files that can cause memory corruption. This vulnerability has been assigned a high severity level. No specific affected versions or patch details are provided in the available data.
A critical security vulnerability in the GitHub CLI tool 'gh' was fixed in version 2.96.0. The flaw involved the Codespace Jupyter feature, which could allow command execution when connecting to a malicious Codespace. This update addresses this critical issue along with other bug fixes and improvements.
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).
Multiple security issues were addressed in the traefik-3.7.7-1.1 package for openSUSE Tumbleweed. These vulnerabilities have been fixed in this specific package version. No detailed technical information or CVSS scores are provided for these issues.
Multiple security issues affecting traefik2 versions prior to 2.11.52-1.1 on openSUSE Tumbleweed have been fixed in the traefik2-2.11.52-1.1 package. These vulnerabilities include weaknesses related to improper input validation, authentication, and authorization. The issues have a medium severity level and no known exploits are currently active in the wild.
ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (deserialization). However, three other public methods that also evaluate `@src` via `eval()` were not given the same guard: `ERB#def_method`, `ERB#def_module`, and `ERB#def_class`. An attacker who can trigger `Marshal.load` on untrusted data in a Ruby application that has `erb` loaded can use `ERB#def_module` (zero-arg, default parameters) as a code execution sink, bypassing the `@_init` protection entirely. ERB 4.0.3.1, 4.0.4.1, 6.0.1.1, and 6.0.4 patch the issue.
This security update for go-sendxmpp addresses multiple issues including two vulnerabilities: CVE-2026-1229, where the CombinedMult function produces an incorrect value, and CVE-2026-39821, which involves failure to reject ASCII-only Punycode-encoded labels leading to validation bypass and privilege escalation. The update also includes various fixes and improvements such as enhanced error handling, configuration robustness, and authentication fixes.
This update for apptainer fixes the following issues:
Changes in apptainer:
- Enable building of SUID starter for SLES 15 (jsc#PED-16347).
* Security fix for CVE-2026-2303 (bsc#1270529):
Heap Out-of-Bounds Read in GSSAPI Error Handling in
go.mongodb.org/mongo-driver. The dependency on mongo-driver
has been removed with this version of apptainer.
FluidSynth versions from 1.1.2 up to but not including 2.5.6 contain a vulnerability in the command handler where the pitch_bend_range command's channel argument is not properly bounds checked. This flaw can lead to an out-of-bounds heap write, potentially causing denial of service or code execution. The vulnerability can be exploited remotely if the TCP server is enabled or locally via the FluidSynth shell. The issue is fixed in version 2.5.6.
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
Security Fix(es):
* Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146)
* Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update for QEMU addresses multiple vulnerabilities including an integer overflow in the virtio-gpu driver, a heap buffer overflow in virtio-blk SCSI request handling, and a heap use-after-free race condition in v9fs_co_readdir_many. These vulnerabilities could lead to privilege escalation and memory corruption. The update advances QEMU to version 10.0.11, which includes these security fixes along with other bug fixes and improvements.
A security update for ffmpeg-7 addresses CVE-2026-30997, an out-of-bounds read vulnerability in the read_global_param() function that can lead to a denial of service (DoS) when processing crafted input. This issue is classified as high severity. No specific affected versions or patch details are provided in the available data.
Two security vulnerabilities in Trivy were fixed in version 0.72.0. CVE-2026-54448 involves a tar unpacker that reads Helm chart archives without size limits, potentially causing a denial of service. CVE-2026-55092 involves an unsafe use of the OCI artifact manifest annotation as a filename, which can lead to arbitrary file writes. These issues have been addressed in the update to version 0.72.0.
This security update for SUSE's docker-compose package addresses multiple vulnerabilities including credential leakage to telemetry endpoints, denial of service during SSH key exchange, an infinite loop in HTTP/2 transport, and a validation bypass that could allow privilege escalation. The affected versions are specific SUSE docker-compose packages on aarch64 and ppc64le architectures. The update fixes CVE-2025-0495, CVE-2025-22869, CVE-2026-33814, and CVE-2026-39821. These issues have been classified as high severity.