Threat database

This update for sed fixes the following issue - CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).

A medium severity time-of-check to time-of-use (TOCTOU) vulnerability exists in the mount program of util-linux related to loop device setup. This issue, tracked as CVE-2026-27456, was identified by the SUSE Product Security Team. A security update addressing this vulnerability is available for specific SUSE packages on the aarch64 architecture. No known exploits have been reported in the wild.

This security update for mbedtls addresses multiple critical vulnerabilities fixed in version 3.6.6, including buffer underrun, certificate verification flaws, authentication bypass, memory management errors, timing side channels, race conditions, and RNG state duplication issues. These vulnerabilities affect cryptographic operations and could lead to key extraction, signature bypass, downgrade attacks, and other serious security impacts.

This security update for mbedtls-2 addresses multiple issues including enabling SRTP and DTLS protocols, changing default TLS client behavior to require hostname verification, fixing a TLS 1.2 handshake vulnerability related to memory allocation or cryptographic hardware failures, and several bug fixes. The update enforces that TLS clients call mbedtls_ssl_set_hostname() to prevent server impersonation, returning an error if not set. It also zeroizes temporary heap buffers used in PSA operations and fixes potential double close file descriptor problems and compilation issues.

A security update for gsasl addresses a vulnerability identified as CVE-2026-48829, which involves a NULL pointer dereference in the DIGEST-MD5 parser. This issue could cause a denial of service or application crash. The vulnerability is rated as high severity. No specific affected versions are provided in the available data.

This security update for tree-sitter-ruby addresses multiple issues including CVE-2025-5889, which involves inefficient regular expression complexity in the brace-expansion function, and CVE-2025-59343, a symlink validation bypass in tar-fs. The update also includes various fixes and improvements to the parser, scanner, and build processes. No specific affected versions are stated. The severity is assessed as medium based on the described impact.

The container-selinux package provides SELinux policies for container runtimes. Security Fix(es): * crun: crun: Privilege escalation due to incorrect parsing of the `--user` option (CVE-2026-30892) Bug Fix(es) and Enhancement(s): * [rhel-10.0.z] avc: denied { prog_run } for pid=1 comm="systemd" scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:unconfined_r:container_runtime_t:s0 tclass=bpf (JIRA:RHEL-210644) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This security update for glycin-loaders addresses two vulnerabilities: CVE-2025-55159, an incorrect bounds check in the get_disjoint_mut function that can cause undefined behavior or a crash due to out-of-bounds access; and CVE-2025-58160, which involves tracing log pollution. Both issues have been identified and fixed by the SUSE Product Security Team.

A security update for glib-networking addresses CVE-2026-10028, a vulnerability where two certificates signed by each other can cause an infinite loop during certificate validation. This issue affects the certificate validation process in glib-networking. No specific affected versions or patch details are provided in the available data. The vulnerability has a medium severity rating and no known exploits in the wild have been reported.

This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

A heap buffer overflow vulnerability exists in libjxl when processing crafted PBM images due to insufficient bounds checks. This issue affects the mozjs128 component in SUSE products. The vulnerability is identified as CVE-2025-70103 and is rated with high severity. A security update has been issued by the SUSE Product Security Team to address this flaw.

This security update for libyang addresses two vulnerabilities: a use-after-free issue in the function lyd_parser_set_data_flags when processing crafted YANG XML documents with specific metadata attributes (CVE-2026-41401), and an integer overflow in lyb_read_string() leading to a heap buffer overflow when parsing maliciously crafted LYB binary blobs (CVE-2026-44673). Both vulnerabilities could lead to memory corruption and potential exploitation. The update fixes these issues to prevent such attacks.

Multiple security vulnerabilities affecting FreeRDP were fixed in version 3.26.0. These include heap-buffer-overflow, out-of-bounds read and write, double-free, off-by-one errors, and path traversal issues. The flaws impact various components such as the clipboard channel, RDPGFX PDUs, RDPEAR authentication, and kerberos security context functions. The update addresses these issues to prevent potential denial of service, information disclosure, and remote code execution.

Multiple security vulnerabilities affecting the cosign tool and related Go cryptography libraries have been identified and fixed. These include issues parsing HTML files, a memory-safety vulnerability, and multiple issues in golang.org/x/crypto/ssh. The vulnerabilities have been addressed in updated versions provided by SUSE and Red Hat. A patch is available to remediate these issues.

A high severity out-of-bounds write vulnerability (CVE-2026-50593) affects certain SUSE packages of graphite2 and related libraries. The issue is addressed by a security update provided by the SUSE Product Security Team. No CVSS score is available, and there are no known exploits in the wild.

A security update for perl-HTTP-Daemon addresses a vulnerability identified as CVE-2026-8450. This vulnerability allows OS command injection via the send_file() function in versions before 6.17. The issue is rated as high severity. No specific affected versions were explicitly stated beyond the indication that versions before 6.17 are vulnerable.

A security update for perl-Protocol-HTTP2 addresses a denial of service vulnerability identified as CVE-2026-10725. The issue arises from the absence of an inbound HPACK header-list size limit, which could be exploited to cause denial of service. This vulnerability has been assigned a high severity level. No specific affected versions are stated in the provided data. There is no information about known exploits in the wild or a CVSS score. The update fixes this issue to prevent potential denial of service attacks.

A vulnerability in perl-HTML-Parser (CVE-2026-8829) affects versions before 3.84, where HTML:Entities incorrectly handles entity references leading to reading freed heap memory. This flaw could allow an attacker to expose sensitive information. The issue is fixed in updated package versions provided by Ubuntu and SUSE. Users are advised to update to these fixed versions to mitigate the risk.

Multiple security vulnerabilities affecting dovecot24 have been addressed in an update to version 2.4.4. These include issues such as a filter leak in lib-var-expand, IPC protection bypass via base64 input containing tabs, inefficient substring matching bypassing CPU time limits in Sieve, shared-spam of IMAP folders, and uncontrolled memory usage from excessive bracing in IMAP login. The update fixes these high-severity issues.

This security update for xwayland addresses multiple vulnerabilities including use-after-free issues and stack-based buffer overflows affecting various components such as CreateSaverWindow, Font Alias, GLX ChangeDrawableAttributes, XKB Key Types, XKB SetMap Request, and XSYNC functions. These vulnerabilities could lead to information disclosure and memory corruption. The update fixes these issues to improve security.