Multiple vulnerabilities have been identified and fixed in the assimp library used by SUSE. These include issues such as a vulnerability in the GetNextLine function, a division by zero error, a heap-based buffer overflow, out-of-bounds reads, and potential application crashes caused by malformed files. These flaws could lead to application instability or crashes if exploited.
CVE-2026-46333 is a Linux kernel vulnerability that allows an unprivileged user to read files owned by root, bypassing security restrictions. It is part of a set of kernel vulnerabilities addressed in recent security advisories, including a local privilege escalation issue known as "Fragnesia" (CVE-2026-46300). Multiple Linux distributions such as Amazon Linux 2, Debian, Fedora, and Red Hat Enterprise Linux for ARM 64 are affected. Red Hat has issued important and critical security updates to fix these issues. Systems must be updated and rebooted to apply the fixes.
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes one security issue
The following security issue was fixed:
- CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264459).
This update for valkey fixes the following issues
- CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts
(bsc#1258746).
- CVE-2026-21863: denial of service via invalid clusterbus packet (bsc#1258788).
- CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution (bsc#1264164).
- CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution
(bsc#1264165).
- CVE-2026-25243: invalid memory access in RESTORE command via a specially crafted serialized payload may lead to remote
code execution (bsc#1264166).
Changes for valkey:
- Update to 8.0.9.
- Update to 8.0.7:
* Fix ltrim should not call signalModifiedKey when no elements are removed (#2787)
* Fix chained replica crash when doing dual channel replication (#2983)
* Fix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
* Avoids crash during MODULE UNLOAD when ACL rules reference a module command and
subcommand (#3160)
* Fix server assert on ACL LOAD and resetchannels (#3182)
* Fix bug causing no response flush sometimes when IO threads are busy (#3205)
jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text.
Security Fix(es):
* jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers (CVE-2026-39979)
* jq: jq: Denial of Service via crafted JSON object causing hash collisions (CVE-2026-40164)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update for the Trivy tool addresses multiple vulnerabilities across various third-party dependencies, including denial of service, open redirect, improper data integrity verification, authorization bypass, directory traversal, and credential leakage issues. The update includes upgrading the go-git dependency to version 5.18.0 and Trivy itself to version 0.70.0.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.15.66. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:28961
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html/release_notes/
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
* kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions (CVE-2026-46243)
* kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.15/html-single/updating_clusters/index#updating-cluster-cli.
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
This security update for alloy addresses multiple vulnerabilities including improper validation and verification issues in several dependencies, which could lead to crashes, consumption of corrupted files, invalid cryptographic results, and authorization bypass. The update also includes a non-security fix updating to version 1.16.0 and systemd tmpfiles.d usage for directory creation.
A security update for the ibus-rime and librime packages addresses issues related to the build against the current opencc version. No specific vulnerability details or affected versions are provided.
This security update for tree-sitter addresses multiple vulnerabilities in the wasmtime component, including out-of-bound reads, denial of service conditions, data leakage, and potential sandbox escapes. The update to tree-sitter version 0.26.8 includes fixes and improvements unrelated to security issues. The vulnerabilities are high severity and affect specific SUSE package versions.
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.
Security Fix(es):
* OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file (CVE-2026-34588)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple denial of service vulnerabilities have been identified in Dovecot, an IMAP and POP3 server for UNIX-like systems. These include a ManageSieve denial of service via a crafted SASL initial response in the AUTHENTICATE command (CVE-2025-59032), denial of service via a crafted message before authentication (CVE-2026-27858), and denial of service via a specially crafted NOOP command (CVE-2026-27857). A security update addressing these issues is available for Red Hat Enterprise Linux 9.6 Extended Update Support and related products.
A security update for ffmpeg-4 addresses a vulnerability identified as CVE-2026-40962. The issue involves inadequate bounds checks in CENC subsample processing that could lead to an integer overflow. This flaw has been fixed in the update provided by the SUSE Product Security Team. No specific affected versions are listed, and no CVSS score is available. The severity is assessed as medium based on the nature of the vulnerability.
The dnsmasq packages contain Dnsmasq, a lightweight DNS (Domain Name Server) forwarder and DHCP (Dynamic Host Configuration Protocol) server.
Security Fix(es):
* dnsmasq: dnsmasq: heap buffer overflow in cache via NAME_ESCAPE expansion (CVE-2026-2291)
* dnsmasq: NSEC bitmap parsing infinite loop (CVE-2026-4890)
* dnsmasq: RRSIG rdlen underflow leading to heap OOB read (CVE-2026-4891)
* dnsmasq: DHCPv6 CLID buffer overflow in helper process (CVE-2026-4892)
* dnsmasq: Broken ECS source validation bypass (CVE-2026-4893)
* dnsmasq: extract_addresses() OOB read via malformed rdlen (CVE-2026-5172)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A heap buffer overflow vulnerability (CVE-2026-31853) exists in the SFW decoder of ImageMagick on 32-bit systems when processing extremely large images. This flaw can cause the application to crash. The issue is addressed by a security update from the SUSE Product Security Team.
CVE-2026-41051 is a medium severity vulnerability in the csync2 component of SUSE openSUSE Tumbleweed. It involves the use of insecure temporary directories when csync2 is compiled with C99 or later, leading to a time-of-check to time-of-use (TOCTOU) race condition. This vulnerability has a CVSS 4.0 base score of 5.1, indicating moderate risk. No vendor patch or official remediation guidance is currently available. There are no known exploits reported in the wild, and the specific affected versions are unspecified.
CVE-2026-41050 is a critical authorization vulnerability in SUSE Rancher's Fleet Helm deployer. The issue arises because ServiceAccount impersonation was not fully enforced in two code paths. This flaw allows a tenant with git push access to a Fleet-monitored repository to read secrets from any namespace on all downstream clusters targeted by their GitRepo. The vulnerability affects multiple Rancher versions from 0.11.0 through 0.15.0. It has a CVSS score of 9.9, indicating a critical severity level with high impact on confidentiality, integrity, and availability.
This security update for PHP 8 addresses multiple vulnerabilities including SQL injection, out-of-bounds reads, use-after-free, cross-site scripting (XSS), denial of service, memory corruption, information disclosure, and infinite loops. The update also includes an upgrade to PHP version 8.4.21. These issues affect various components such as the PDO Firebird driver, mbstring encoding functions, SOAP handling, PHP-FPM status page, ctype functions, and XML processing.