This security update for MariaDB addresses multiple vulnerabilities fixed in version 11.8.8. The issues include audit plugin bypass, optimizer vulnerability, authentication plugin crash, unsafe parameter handling in wsrep SST, authorization bypass exposing stored routines, argument injection via unsanitized URLs on Windows, path traversal, incorrect handling of character encoding, missing privilege checks on subqueries, and unsafe parameter handling in wsrep notify commands. These vulnerabilities collectively pose critical risks to database integrity, authorization, and stability.
This update for MozillaFirefox fixes the following issues:
Update to Firefox Extended Support Release 140.10.1 ESR.
- MFSA 2026-36 (bsc#1263110)
* CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component.
* CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.
* CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1,
Firefox 150.0.1 and Thunderbird 150.0.1
* CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and
Thunderbird 150.0.1
The Requests library's extract_zipped_paths() utility function uses predictable filenames when extracting zip archive contents to the system temporary directory. This allows a local attacker with write access to the temp directory to substitute malicious files by reusing existing filenames without validation. Standard usage of the Requests library is not affected; only direct calls to extract_zipped_paths() are vulnerable. The issue is fixed in Requests version 2.33.0 by using non-deterministic extraction paths. Alternatively, setting TMPDIR to a directory with restricted write access can mitigate the risk.
A denial of service vulnerability (CVE-2026-4897) exists in the polkit-agent-helper-1 component of polkit, affecting multiple versions of Red Hat Enterprise Linux 10 and related distributions. The flaw is due to unbounded input processing via standard input, which can lead to resource exhaustion and an out-of-memory condition. Red Hat has rated this issue as moderate severity and has released a security update to address it.
A security update for Apache PDFBox addresses a path traversal vulnerability in the ExtractEmbeddedFiles example code that could allow arbitrary file writes. This issue is tracked as CVE-2026-33929 and fixed in version 2.0.36. The update also includes numerous other bug fixes and improvements unrelated to security. No known exploits are reported in the wild for this vulnerability.
This security update for agama-web-ui addresses multiple vulnerabilities including HTTP response header manipulation, shell command injection, and prototype pollution leading to authentication bypass and credential injection. The update also includes dependency updates reported by npm audit. No specific affected versions are stated. The severity is assessed as medium based on the described impact.
This update for avahi fixes the following issue:
- CVE-2026-34933: reachable assertion in `transport_flags_from_domain` can crash the `avahi-daemon` (bsc#1261546).
Multiple security issues were addressed in the ack-3.10.0-1.1 package included in the GA media of openSUSE Tumbleweed. These fixes cover three related CVEs (CVE-2026-49145, CVE-2026-49146, CVE-2026-49147) as identified by the SUSE Product Security Team. No detailed technical information or CVSS scores are provided for these vulnerabilities.
This update for NetworkManager fixes the following issues:
Security fixes:
- CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).
Other fixes:
- Accept localhost hostnames if static (bsc#1257366)
A denial of service vulnerability in dpkg caused by malformed .deb archives could allow attackers to disrupt dpkg operations. This security update addresses CVE-2026-2219 affecting certain SUSE versions. The vulnerability is rated medium severity.
A security update for MariaDB addresses multiple critical vulnerabilities affecting various components including audit plugin comment handling, wsrep SST parameter handling, argument injection via unsanitized URLs on Windows, path traversal in mbstream, improper handling of character encoding in mysql_real_escape_string(), missing privilege checks for FILE privilege in subqueries, and unsafe parameter handling in wsrep-related features. These issues are fixed in MariaDB version 10.6.27 as released by the SUSE Product Security Team. No known exploits in the wild have been reported at this time.
This security update for Erlang addresses multiple vulnerabilities including path traversal issues in pathname handling and SFTP chroot, as well as several certificate and TLS verification flaws in the public_key application. These vulnerabilities could allow unauthorized path access and certificate forgery. The update fixes these issues to improve security.
An integer overflow vulnerability (CVE-2026-37555) exists in the libsndfile library's ima_reader_init() function. libsndfile is a C library used for reading and writing sampled sound files such as AIFF, AU, and WAV. This vulnerability affects Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder variants. Red Hat has issued a security advisory with an update that addresses this issue. The vulnerability is rated as having an important security impact by Red Hat Product Security.
This vulnerability concerns security issues fixed in the libopenvswitch-3_7-0-3.7.1-34.1 package on openSUSE Tumbleweed and Red Hat Enterprise Linux Fast Datapath 8. The issues include a heap over-read in ICMP error response generation (CVE-2026-5265) and information disclosure via crafted DHCPv6 packets (CVE-2026-5367) in the OVN (Open Virtual Network) component. These vulnerabilities have been addressed in updated packages provided by SUSE and Red Hat.
Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can be app-controlled symlinks pointing at arbitrary paths. Flatpak run mounts the resolved host path in the sandbox. This gives apps access to all host files and can be used as a primitive to gain code execution in the host context. This vulnerability is fixed in 1.16.4.
This security update for FRRouting (frr) addresses multiple vulnerabilities including improper access controls in the EVPN Type-2 Route Handler, hardened iteration against malformed TE/SR TLV lengths, an off-by-one error in FlowSpec operator array bounds checking, and validation of MP_REACH_NLRI attribute against incorrect next-hop values. These issues are fixed in the update provided by SUSE Product Security Team.
A security update for python-pyOpenSSL addresses CVE-2026-40475, which involves improper input handling of null bytes. This flaw can cause silent data truncation and inconsistencies in the security state. The issue affects SUSE Linux Enterprise and openSUSE Leap 16.0 versions of python313-pyOpenSSL-25.0.0. The severity is assessed as medium based on the described impact. No CVSS score is available. No known exploits are reported in the wild.
A security update for the xorg-x11-server addresses multiple vulnerabilities including use-after-free, out-of-bounds read/write, and stack-based buffer overflow issues. These flaws affect various components such as CreateSaverWindow, DRI2 buffer handling, font aliasing, GLX drawable attributes, XKB key types and map requests, and XSYNC counter and fence operations. The vulnerabilities could potentially lead to information disclosure or memory corruption. No specific affected versions are provided. The severity is assessed as high due to the nature of the vulnerabilities.
A security update for python-CairoSVG addresses CVE-2026-31899, which involves a denial of service vulnerability caused by recursive <use> element amplification. This flaw could allow an attacker to trigger resource exhaustion by exploiting recursive SVG elements. The issue has been fixed in the update provided by the SUSE Product Security Team.