Multiple vulnerabilities have been identified and fixed in the assimp library used by SUSE. These include issues such as a vulnerability in the GetNextLine function, a division by zero error, a heap-based buffer overflow, out-of-bounds reads, and potential application crashes caused by malformed files. These flaws could lead to application instability or crashes if exploited.
CVE-2026-46333 is a Linux kernel vulnerability that allows an unprivileged user to read files owned by root, bypassing security restrictions. It is part of a set of kernel vulnerabilities addressed in recent security advisories, including a local privilege escalation issue known as "Fragnesia" (CVE-2026-46300). Multiple Linux distributions such as Amazon Linux 2, Debian, Fedora, and Red Hat Enterprise Linux for ARM 64 are affected. Red Hat has issued important and critical security updates to fix these issues. Systems must be updated and rebooted to apply the fixes.
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes one security issue
The following security issue was fixed:
- CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264459).
This update for valkey fixes the following issues
- CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts
(bsc#1258746).
- CVE-2026-21863: denial of service via invalid clusterbus packet (bsc#1258788).
- CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution (bsc#1264164).
- CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution
(bsc#1264165).
- CVE-2026-25243: invalid memory access in RESTORE command via a specially crafted serialized payload may lead to remote
code execution (bsc#1264166).
Changes for valkey:
- Update to 8.0.9.
- Update to 8.0.7:
* Fix ltrim should not call signalModifiedKey when no elements are removed (#2787)
* Fix chained replica crash when doing dual channel replication (#2983)
* Fix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
* Avoids crash during MODULE UNLOAD when ACL rules reference a module command and
subcommand (#3160)
* Fix server assert on ACL LOAD and resetchannels (#3182)
* Fix bug causing no response flush sometimes when IO threads are busy (#3205)
This security update for the Trivy tool addresses multiple vulnerabilities across various third-party dependencies, including denial of service, open redirect, improper data integrity verification, authorization bypass, directory traversal, and credential leakage issues. The update includes upgrading the go-git dependency to version 5.18.0 and Trivy itself to version 0.70.0.
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
This security update for alloy addresses multiple vulnerabilities including improper validation and verification issues in several dependencies, which could lead to crashes, consumption of corrupted files, invalid cryptographic results, and authorization bypass. The update also includes a non-security fix updating to version 1.16.0 and systemd tmpfiles.d usage for directory creation.
A security update for the ibus-rime and librime packages addresses issues related to the build against the current opencc version. No specific vulnerability details or affected versions are provided.
This security update for tree-sitter addresses multiple vulnerabilities in the wasmtime component, including out-of-bound reads, denial of service conditions, data leakage, and potential sandbox escapes. The update to tree-sitter version 0.26.8 includes fixes and improvements unrelated to security issues. The vulnerabilities are high severity and affect specific SUSE package versions.
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.
Security Fix(es):
* OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple denial of service vulnerabilities have been identified in Dovecot, an IMAP and POP3 server for UNIX-like systems. These include a ManageSieve denial of service via a crafted SASL initial response in the AUTHENTICATE command (CVE-2025-59032), denial of service via a crafted message before authentication (CVE-2026-27858), and denial of service via a specially crafted NOOP command (CVE-2026-27857). A security update addressing these issues is available for Red Hat Enterprise Linux 9.6 Extended Update Support and related products.
A security update for ffmpeg-4 addresses a vulnerability identified as CVE-2026-40962. The issue involves inadequate bounds checks in CENC subsample processing that could lead to an integer overflow. This flaw has been fixed in the update provided by the SUSE Product Security Team. No specific affected versions are listed, and no CVSS score is available. The severity is assessed as medium based on the nature of the vulnerability.
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
* dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
* dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
* dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
* dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)
* dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A heap buffer overflow vulnerability (CVE-2026-31853) exists in the SFW decoder of ImageMagick on 32-bit systems when processing extremely large images. This flaw can cause the application to crash. The issue is addressed by a security update from the SUSE Product Security Team.
This security update for PHP 8 addresses multiple vulnerabilities including SQL injection, out-of-bounds reads, use-after-free, cross-site scripting (XSS), denial of service, memory corruption, information disclosure, and infinite loops. The update also includes an upgrade to PHP version 8.4.21. These issues affect various components such as the PDO Firebird driver, mbstring encoding functions, SOAP handling, PHP-FPM status page, ctype functions, and XML processing.
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
* freerdp: FreeRDP: Denial of service due to use-after-free vulnerability (CVE-2026-25952)
* freerdp: FreeRDP: Denial of Service via double free vulnerability during disconnect (CVE-2026-26986)
* freerdp: FreeRDP: Denial of Service via endless blocking loop in Stream_EnsureCapacity (CVE-2026-27951)
* freerdp: FreeRDP has a heap-buffer-overflow in bitmap_cache_put via OOB cacheId (CVE-2026-29775)
* freerdp: FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks (CVE-2026-31885)
* freerdp: FreeRDP has a division-by-zero in ADPCM decoders when `nBlockAlign` is 0 (CVE-2026-31884)
* freerdp: FreeRDP: Denial of Service via crafted audio data in RDP (CVE-2026-31883)
* FreeRDP: FreeRDP: Information disclosure via heap memory out of bounds read (CVE-2026-33985)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A timing attack vulnerability (CVE-2025-59432) in SCRAM authentication was fixed in the ongres-scram component as part of updates to several related projects including maven and Red Hat build of Quarkus 3.20.5. The update addresses this moderate severity security issue by correcting the SCRAM authentication mechanism to prevent timing attacks. Additional bug fixes and improvements were included in the updated versions of maven, maven-doxia, and related components.
This security update for raylib addresses two vulnerabilities: a heap-based buffer overflow in the GenImageFontAtlas function (CVE-2025-15533) and an integer overflow in LoadFontData (CVE-2025-15534). These issues could lead to memory corruption or crashes when processing font data. The update also includes numerous new features and improvements unrelated to security. No affected versions are explicitly stated in the provided data.