Threat database

This update for PackageKit fixes the following issues: - CVE-2026-41651: race condition allows for arbitrary RPM package installation as root and can lead to LPE (bsc#1262220).

A security update for radare2 addresses multiple issues including command injection vulnerabilities, memory leaks, overflows, use-after-free, out-of-bounds reads/writes, and sandbox escapes. The update improves analysis accuracy, performance, and parser robustness across various binary formats. It also hardens disassemblers, debugging features, and the embedded webserver. The update fixes critical security flaws that could allow attackers to execute arbitrary commands or escape sandbox restrictions.

A security update for python-jwcrypto addresses a vulnerability (CVE-2026-39373) involving weak mitigation against a JWT bomb attack in the deserialize function. This flaw can lead to memory exhaustion when processing crafted compressed JWE tokens. The issue affects certain versions of python-jwcrypto distributed with Red Hat Enterprise Linux 10 and related SUSE products. Red Hat has released patches to fix this vulnerability and rated the security impact as low. No known exploits are reported in the wild.

A cryptographic bypass vulnerability in libsodium was addressed by a security update. The issue, identified as CVE-2025-15444, is caused by improper elliptic curve point validation, which could undermine the cryptographic guarantees of the library. The vulnerability has been fixed in libsodium versions 1.0.20-160000.3.1 and later.

This security update provides a functional equivalent of RHSA-2026:11313. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2026:11313.

This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).

Multiple vulnerabilities have been identified in webkit2gtk3, the GTK port of the WebKit web rendering engine, affecting Red Hat Enterprise Linux 9.6 Extended Update Support. These vulnerabilities include crashes, denial-of-service, information disclosure, bypass of security policies such as Same Origin Policy and Content Security Policy, user tracking via Safari web extensions, fingerprinting, and cross-site scripting attacks triggered by processing maliciously crafted web content or visiting malicious websites. Red Hat has issued an important security update addressing these issues.

A heap-based buffer overflow vulnerability exists in MariaDB's JSON_SCHEMA_VALID() function, identified as CVE-2026-32710. This flaw can lead to a crash or remote code execution. The issue affects MariaDB versions from 11.8.0 up to but not including 11.8.6. A security update to version 11.8.6 has been released to address this vulnerability. Red Hat has rated the impact as Moderate for their Enterprise Linux 10 distributions and has provided updated packages to remediate the issue.

Multiple security vulnerabilities have been fixed in freerdp2, a free implementation of the Remote Desktop Protocol (RDP). These include out-of-bounds reads and writes, buffer overflows, use-after-free errors, and denial of service issues. The update addresses a broad set of CVEs affecting various components such as clipboard handling, window management, audio processing, and smartcard functionality. Red Hat Enterprise Linux 9 and related distributions have released patches to remediate these issues.

A security update for the SUSE container-suseconnect component has been released, primarily involving a build environment change to Go 1.25. No specific vulnerability details or affected versions are provided.

A moderate severity vulnerability in the Common UNIX Printing System (CUPS) allows anonymous Print-Job requests to reach the 'lp' code execution over the network via a shared PostScript queue. This affects Red Hat Enterprise Linux versions 8 and 9 in specified ranges. A security update from Red Hat is available to address this vulnerability.

A security update for the SUSE Linux Enterprise 15 SP5 kernel addresses multiple security vulnerabilities, including CVE-2025-38234 and others affecting various kernel subsystems such as networking, RDMA, netfilter, and graphics drivers. These fixes resolve race conditions, improper locking, and incorrect handling of data lengths among other issues. The update also includes non-security related fixes. The vulnerabilities impact specific SUSE kernel versions and have been addressed by the vendor.

A high-severity vulnerability (CVE-2026-23268) in the Linux kernel's AppArmor security module allows unprivileged local users to bypass kernel protections, escalate privileges to root, and potentially break container isolation on Container-Optimized OS nodes. The vulnerability is addressed by upgrading to updated Container-Optimized OS images, such as cos-125-19216-220-57. This issue affects specific SUSE Linux Enterprise kernel versions and has been fixed in updated releases. No known exploits are reported in the wild at this time.

A use-after-free vulnerability was identified and fixed in the Linux kernel's Bluetooth SCO connection handling (sco_conn_free). This flaw could lead to memory corruption and was reported with high severity. The issue was detected by KASAN and affects the Bluetooth subsystem of the Linux kernel. The vulnerability has been resolved, but no explicit patch versions are provided. There are no known exploits in the wild.

This update for qt6-translations addresses unspecified issues by adding qt6-translations. No detailed technical information or specific vulnerabilities are described.

This is a security update for SUSE's dotnet8.0 product addressing the vulnerability identified as CVE-2026-26130. The update provides a functional equivalent to the Red Hat advisory RHSA-2026:10084. No specific affected versions or detailed technical information are provided in the input data.

This is a security update for SUSE related to dotnet9.0 that provides a functional equivalent of a Red Hat advisory RHSA-2026:10085. The update addresses vulnerabilities identified by CVE-2026-26127 and CVE-2026-26130. No specific affected versions are stated in the provided data. The severity is assessed as high. No CVSS score is available for these vulnerabilities.

This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks (bsc#1262184).