Threat database

This security update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 addresses multiple vulnerabilities in the Linux kernel, including CVE-2026-23204, CVE-2026-23437, CVE-2026-31406, and CVE-2026-31431. Notably, CVE-2026-31431 involves a flaw in the algif_aead cryptographic module that could allow local privilege escalation or container escape. The update fixes various issues across numerous kernel subsystems and drivers.

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23004: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1258655). - CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126). - CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261845). - CVE-2026-31406: xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() (bsc#1261630). - CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).

A security update for opencc addresses multiple issues including a specific out-of-bounds read vulnerability identified as CVE-2025-15536. The update advances the software to version 1.2.0, which also fixes crashes related to configuration file reading and additional out-of-bounds reads when processing truncated UTF-8 input. The vulnerability is rated medium severity.

Multiple NULL pointer dereference vulnerabilities have been identified and fixed in FRRouting (FRR), affecting various functions primarily in ospf_ext.c and bgpd/bgp_evpn.c components. These issues were present in versions from 4.0 through 10.5.1. The vulnerabilities could cause improper behavior or crashes when processing certain routing information.

This security update for strongSwan addresses multiple vulnerabilities including infinite loops, NULL pointer dereferences, integer underflows, and acceptance of invalid certificates. The update to version 6.0.6 fixes these issues along with other enhancements and bug fixes. The vulnerabilities affect the handling of TLS extensions, PKCS#7 padding, EAP-SIM/AKA attributes, X.509 name constraints, ECDH public values in TLS, RADIUS attributes, and RSA decryption. The update is provided by SUSE and patches these security flaws to improve the stability and security of strongSwan.

This security update for SUSE's build and product-composer components addresses multiple improvements and fixes, including a hardening fix for CVE-2024-22038 in the export_debian_orig_from_git functionality. The update introduces new configuration options, container support enhancements, and fixes to prevent crashes and improve metadata handling. The CVE-2024-22038 fix specifically hardens the export_debian_orig_from_git tool to mitigate a security weakness.

This security update for mozjs128 addresses three vulnerabilities in the libexpat XML parsing library: a NULL pointer dereference when processing empty external parameter entities, a denial of service caused by an infinite loop in DTD content parsing, and a NULL pointer dereference in setContext after an out-of-memory condition. These issues can lead to application crashes or denial of service conditions.

LibRaw, a library for reading RAW image files from digital cameras, has two security vulnerabilities that allow arbitrary code execution. These include a vulnerability triggered by specially crafted malicious files (CVE-2026-24450) and a heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413). The vulnerabilities affect Red Hat Enterprise Linux 9.6 Extended Update Support and related distributions. Red Hat has issued security updates to address these issues.

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.10.1 ESR. - MFSA 2026-36 (bsc#1263110) * CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. * CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. * CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1 * CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1

This is a security update for the SUSE product related to dotnet9.0, providing a functional equivalent of Red Hat advisory RHSA-2026:13282. The update addresses multiple CVEs including CVE-2026-26171 and others. No specific affected versions are stated. The severity is assessed as high. No CVSS score is provided. No known exploits in the wild are reported.

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algif_aead (bsc#1262573).

A security update for libspectre addresses issues related to rebuilding the package against an updated version of Ghostscript. No specific vulnerability details or exploitation methods are provided.

Multiple security vulnerabilities have been fixed in FreeRDP with the release of version 3.24.2. These include out-of-bounds reads and writes, buffer overflows, heap use-after-free conditions, integer underflows, division by zero, double-free vulnerabilities, and client-side crashes affecting various components such as the RDPGFX channel, clipboard, video codecs, audio decoders, and security context handling. The update addresses a broad range of memory safety and stability issues.

A security update for the SUSE hauler product addresses multiple component updates including a fix related to CVE-2026-24122. The update includes version bumps for several dependencies such as go-tuf, sigstore components, and others, along with fixes for helm chart features and dependency path resolution. No specific exploit details or impact scenarios are provided.

This security update for Helm addresses two vulnerabilities by updating to version 3.20.2. The first vulnerability (CVE-2025-55199) involves specially crafted JSON Schema that can cause out of memory (OOM) termination. The second vulnerability (CVE-2026-35206) allows a specially crafted Chart to extract contents to an unintended output directory. The update also includes other bug fixes and dependency updates.

Multiple security vulnerabilities have been identified in libssh affecting components such as SCP protocol handling, configuration file parsing, hexadecimal input processing, pattern matching, SFTP longname parsing, and key exchange handling. These include path traversal, denial of service, buffer underflow, out-of-bounds read, null pointer dereference, and memory leak issues. The vulnerabilities are addressed in libssh version 0.11.4.

This security update for openexr addresses two integer overflow vulnerabilities related to pointer arithmetic in the DWA compression components. These vulnerabilities could potentially lead to memory corruption or other unintended behavior. The issues are identified as CVE-2026-40244 and CVE-2026-40250. No specific affected versions are provided in the available data. No known exploits in the wild have been reported. The severity is assessed as high based on the nature of the vulnerabilities.

A heap buffer overflow vulnerability (CVE-2026-40706) exists in the ntfs_build_permissions_posix() function within the acls.c component of ntfs-3g_ntfsprogs. This issue has been addressed by a security update from the SUSE Product Security Team. No specific affected versions are provided. The vulnerability is rated as high severity.