This update for perl-DBI fixes the following issues
- CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code
execution (bsc#1271018).
- CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a process crash
(bsc#1271017).
A security update for the SUSE Linux Enterprise 11 SP4 kernel addresses multiple vulnerabilities, including use-after-free bugs, race conditions, and improper handling of network protocols. The update fixes 10 distinct CVEs affecting components such as SCSI, TCP, bonding, ALSA, KVM, networking, and Bluetooth subsystems. These vulnerabilities could lead to memory corruption or unexpected behavior in kernel modules.
This update for agama fixes the following issues
- CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-
openssl crate (bsc#1270602).
- CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl crate (bsc#1270678).
- CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate
(bsc#1270784).
- CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent
memory in rust-openssl crate (bsc#1270850).
- CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate
(bsc#1270526).
- CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding in rust-openssl crate
(bsc#1270891).
- CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust-
openssl crate (bsc#1270992).
A security update for GraphicsMagick addresses a vulnerability identified as CVE-2026-13606. The issue involves crafted Photo CD (PCD) files that can cause memory corruption. This vulnerability has been assigned a high severity level. No specific affected versions or patch details are provided in the available data.
A critical security vulnerability in the GitHub CLI tool 'gh' was fixed in version 2.96.0. The flaw involved the Codespace Jupyter feature, which could allow command execution when connecting to a malicious Codespace. This update addresses this critical issue along with other bug fixes and improvements.
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT_8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).
This security update for python-maturin addresses multiple high-severity vulnerabilities in OpenSSL components used by the product. The issues include buffer overflows, out-of-bounds reads and writes, memory leaks, and undefined behavior in cryptographic operations. These vulnerabilities could lead to memory corruption or information leakage. No specific affected versions are stated. No CVSS score is provided, but the impact is assessed as high due to the nature of the flaws.
Multiple security issues were addressed in the traefik-3.7.7-1.1 package for openSUSE Tumbleweed. These vulnerabilities have been fixed in this specific package version. No detailed technical information or CVSS scores are provided for these issues.
Multiple security issues affecting traefik2 versions prior to 2.11.52-1.1 on openSUSE Tumbleweed have been fixed in the traefik2-2.11.52-1.1 package. These vulnerabilities include weaknesses related to improper input validation, authentication, and authorization. The issues have a medium severity level and no known exploits are currently active in the wild.
ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (deserialization). However, three other public methods that also evaluate `@src` via `eval()` were not given the same guard: `ERB#def_method`, `ERB#def_module`, and `ERB#def_class`. An attacker who can trigger `Marshal.load` on untrusted data in a Ruby application that has `erb` loaded can use `ERB#def_module` (zero-arg, default parameters) as a code execution sink, bypassing the `@_init` protection entirely. ERB 4.0.3.1, 4.0.4.1, 6.0.1.1, and 6.0.4 patch the issue.
This security update for go-sendxmpp addresses multiple issues including two vulnerabilities: CVE-2026-1229, where the CombinedMult function produces an incorrect value, and CVE-2026-39821, which involves failure to reject ASCII-only Punycode-encoded labels leading to validation bypass and privilege escalation. The update also includes various fixes and improvements such as enhanced error handling, configuration robustness, and authentication fixes.
This update for apptainer fixes the following issues:
Changes in apptainer:
- Enable building of SUID starter for SLES 15 (jsc#PED-16347).
* Security fix for CVE-2026-2303 (bsc#1270529):
Heap Out-of-Bounds Read in GSSAPI Error Handling in
go.mongodb.org/mongo-driver. The dependency on mongo-driver
has been removed with this version of apptainer.
FluidSynth versions from 1.1.2 up to but not including 2.5.6 contain a vulnerability in the command handler where the pitch_bend_range command's channel argument is not properly bounds checked. This flaw can lead to an out-of-bounds heap write, potentially causing denial of service or code execution. The vulnerability can be exploited remotely if the TCP server is enabled or locally via the FluidSynth shell. The issue is fixed in version 2.5.6.
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
Security Fix(es):
* Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor (CVE-2026-29146)
* Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass (CVE-2026-34486)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update for QEMU addresses multiple vulnerabilities including an integer overflow in the virtio-gpu driver, a heap buffer overflow in virtio-blk SCSI request handling, and a heap use-after-free race condition in v9fs_co_readdir_many. These vulnerabilities could lead to privilege escalation and memory corruption. The update advances QEMU to version 10.0.11, which includes these security fixes along with other bug fixes and improvements.
Multiple security vulnerabilities in ClamAV were fixed in version 1.5.3, including several out-of-bounds write issues during scanning of various file formats (PE, FSG, 7z, PESpin, ALZ, DMG), an integer overflow leading to denial of service, and a buffer overflow related to OpenSSL 1.1.1. Additional bug fixes address unpacker cleanup, archive extraction limits, parser size handling, and quarantine action hardening. These vulnerabilities could lead to crashes, denial of service, or memory corruption during file scanning.
A security update for ffmpeg-7 addresses CVE-2026-30997, an out-of-bounds read vulnerability in the read_global_param() function that can lead to a denial of service (DoS) when processing crafted input. This issue is classified as high severity. No specific affected versions or patch details are provided in the available data.
Two security vulnerabilities in Trivy were fixed in version 0.72.0. CVE-2026-54448 involves a tar unpacker that reads Helm chart archives without size limits, potentially causing a denial of service. CVE-2026-55092 involves an unsafe use of the OCI artifact manifest annotation as a filename, which can lead to arbitrary file writes. These issues have been addressed in the update to version 0.72.0.
A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeployment.spec.options.namespaceLabels) when applying them to the target namespace.
An attacker with git push access to a
Fleet-monitored repository could overwrite Pod Security Standards (PSS)
enforcement labels on a target namespace. This allows the attacker to
weaken admission controls and deploy workloads that PSS policies would
otherwise block.