Threat database

A command injection vulnerability (CVE-2026-58459) exists in gpsd, a daemon that provides GPS data access. This flaw allows arbitrary code execution via the GPS device subtype. The issue affects multiple versions of gpsd across various Linux distributions, including Red Hat Enterprise Linux 10. Red Hat has issued an important security advisory with updates to address this vulnerability.

These are all security issues fixed in the ImageMagick-7.1.2.27-2.1 package on the GA media of openSUSE Tumbleweed.

A vulnerability in the Linux kernel's IOMMU Shared Virtual Addressing (SVA) on x86 allows stale page table entries to persist after kernel page table pages are freed, causing use-after-free or write-after-free conditions. This can lead to privilege escalation or data corruption. The issue is mitigated by disabling SVA on affected systems until a patch is applied. A fix introducing deferred freeing of kernel page table pages to safely invalidate IOMMU caches is available and should be applied via system updates and reboot.

This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 addresses multiple security vulnerabilities across various kernel subsystems. The fixes include out-of-bounds writes, use-after-free errors, invalid packet header handling, double free bugs, and other memory safety issues. These vulnerabilities affect network, memory management, RDMA, netfilter, IPv6, bonding, SCTP, SMB client, and other kernel components. The update mitigates risks of system compromise and instability by correcting these flaws.

This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 addresses multiple security vulnerabilities affecting various kernel subsystems, including networking, memory management, and file systems. The update fixes issues such as use-after-free, improper reference handling, and task preemption bugs. These vulnerabilities could potentially be exploited to compromise system stability or security. The update is part of Live Patch 12 for SUSE Linux Enterprise 16 and includes fixes for CVE-2026-45970 and several other CVEs. A patch is available and should be applied to affected systems.

This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 addresses multiple security vulnerabilities across various kernel components, including networking, memory management, USB, and others. The update fixes issues such as race conditions, out-of-bounds writes, use-after-free errors, and other memory corruption bugs. These vulnerabilities have been assigned CVE identifiers and are considered high severity. The update is a live patch (RT) for SUSE Linux Enterprise 16, indicating it can be applied without rebooting the system.

A security update for python-sqlparse addresses a vulnerability that limits recursion during the parsing of tuples to prevent potential issues. The update fixes the issue identified as GHSA-27jp-wm6q-gp25 (bsc#1268597). No specific affected versions or CVSS score are provided.

This security update for Grafana addresses multiple issues across several versions, including a fix for an information leakage vulnerability in Grafana Alerting (CVE-2025-12141) and a potential information disclosure issue in Apache Thrift (CVE-2026-41607). The updates include bug fixes, security patches, performance improvements, and feature enhancements. Notably, version 12.4.5 fixes a data source UID mismatch issue that returns a 400 error when the payload UID does not match the URL UID in PUT requests. Several breaking changes and migration steps were introduced in version 12.0.0. The update is provided by SUSE Product Security Team and affects the SUSE product. No specific affected versions are stated in the provided data.

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b.

A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.

This bugfix update provides a functional equivalent of RHBA-2026:39332. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHBA-2026:39332.

Multiple security issues were fixed in the freerdp-3.28.0-1.1 package for openSUSE Tumbleweed. These vulnerabilities affect various versions of the FreeRDP software across multiple Linux distributions including Ubuntu and SUSE. The issues have been addressed in the specified package update.

These are all security issues fixed in the php-composer2-2.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

This security update provides a functional equivalent of RHSA-2026:39494. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:39494.

This security update provides a functional equivalent of RHSA-2026:39179. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:39179.

This security update for nasm addresses two vulnerabilities: a heap buffer overflow in the obj_directive() function (CVE-2026-6067) and a heap use-after-free in response file processing (CVE-2026-6068). The update also includes numerous fixes and improvements unrelated to security. No explicit patch availability details are provided in the input.

Two vulnerabilities in GNU patch utility were addressed in a security update. CVE-2026-56288 involves a crafted unified-diff patch file causing a NULL pointer dereference, leading to a denial of service (DoS) via a crash. CVE-2026-56289 concerns improper validation of hunk line offsets that can also cause a denial of service. The issues affect certain versions of the patch utility distributed by Red Hat and SUSE. A security update is available that fixes these vulnerabilities.

A security update for cryptsetup addresses an issue where volume keys could be undesirably pinned via the caller's credentials due to a kernel refactoring. This caused the caller's thread keyring to remain alive longer than intended when the kernel opens a file, potentially impacting key management. The update introduces a new keyring key type, uses unique intermediary keyrings per device, and includes regression tests to prevent recurrence.

A security update for cryptsetup addresses an issue where volume keys could be undesirably pinned in the kernel's thread keyring due to a kernel refactoring. This caused the caller's thread keyring to remain alive longer than intended, potentially affecting key management. The update introduces an intermediary keyring per device to isolate volume keys and includes regression tests to prevent recurrence.

This update includes the following RPMs: pam: * pam-1.7.2-1.1.hum1 (aarch64, x86_64) * pam-devel-1.7.2-1.1.hum1 (aarch64, x86_64) * pam-doc-1.7.2-1.1.hum1 (noarch) * pam-libs-1.7.2-1.1.hum1 (aarch64, x86_64) * pam-1.7.2-1.1.hum1.src (src)