A vulnerability identified as CVE-2026-25727 affects the 'time' crate used in the SUSE agama package. The issue involves the RFC 2822 date parser, where parsing user-provided input can lead to stack exhaustion. This vulnerability has been addressed by updating the 'time' crate to version 0.3.47. The affected versions include SUSE agama versions up to and including 4.11.2-r1. No known exploits are reported in the wild.
A security update for ImageMagick addresses multiple vulnerabilities including stack and heap out-of-bounds writes, buffer overflows, integer truncation, off-by-one errors, and recursive execution without depth limits. These issues can lead to crashes, denial of service, memory corruption, or resource exhaustion. The vulnerabilities affect various components such as the sixel encoder, XML parsing, X11 display interaction, MVG decoder, FX expression parser, and multiple image encoders and decoders. No specific affected versions are provided. The severity is assessed as high due to the potential for denial of service and memory corruption.
Multiple security vulnerabilities have been identified in the openexr library affecting image decoding. These include misaligned memory writes causing denial of service, integer overflow risks, out-of-bounds read and write, and potential arbitrary code execution from crafted EXR files. The issues are addressed in a security update by the SUSE Product Security Team.
This update for sudo fixes the following issues:
- CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows
for local privilege escalation (bsc#1261420).
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.
Security Fix(es):
* FreeRDP: FreeRDP: Heap buffer overflow allows arbitrary code execution via crafted pixel data (CVE-2026-33984)
* FreeRDP: FreeRDP: Denial of Service via specially crafted Remote Desktop Protocol messages (CVE-2026-33983)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This update for libpng16 fixes the following issue:
- CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).
A security update for GraphicsMagick addresses CVE-2026-33535, which involves an out-of-bounds write of a zero byte in the X11 display interaction path that can cause a crash. This vulnerability could lead to denial of service by crashing the application. No specific affected versions or patch details are provided in the available data.
This security update for Ghostscript addresses multiple vulnerabilities including integer and stack-based buffer overflows, and argument sanitization issues that could lead to denial-of-service or password disclosure. The update upgrades Ghostscript to version 10.06.0 and removes the non-standard operator "selectdevice." Several other bug fixes and improvements are included. No CVSS score is provided, but the impact ranges from medium to potentially serious due to memory corruption and information disclosure risks.
Two denial of service vulnerabilities were identified in Squid related to ICP (Internet Cache Protocol) handling. These include a heap use-after-free vulnerability and a denial of service via crafted ICP traffic. The vulnerabilities affect Squid versions packaged with Red Hat Enterprise Linux 9.6 Extended Update Support and SUSE Linux Enterprise 9.6 EMS. Red Hat has issued security updates to address these issues.
This security update for Tor addresses multiple vulnerabilities and bugs across several versions, including fixes for memory comparison errors that could cause remote crashes, out-of-bounds read errors, and defense-in-depth security issues. The updates also include improvements to flow control, compatibility fixes, and hardening compiler flags. The vendor strongly recommends upgrading to these fixed versions to mitigate the identified issues.
Multiple security vulnerabilities in the SUSE Linux Enterprise 16.0 kernel were fixed, addressing issues such as buffer overflows, use-after-free, race conditions, memory leaks, and null pointer dereferences across numerous kernel subsystems. These vulnerabilities could potentially allow an attacker to compromise the system. The update requires a system reboot and recompilation of third-party kernel modules due to ABI changes.
A security update for ClamAV addresses CVE-2026-20031, which involves improper error handling in the HTML CSS module when splitting UTF-8 strings. This flaw can cause denial of service conditions via a crafted HTML file. The update also includes fixes for non-security issues and upgrades dependencies to resolve other advisories and stability problems.
A security update for rust1.94 addresses multiple issues including a fix for CVE-2026-31812, which involves avoiding unwrapping varint decoding during parameters parsing. The update also includes a change to not force gcc-15 on SLE-16 and higher. The vulnerability is rated medium severity and no CVSS score is provided.
This update for qemu fixes the following issues:
Update to version 10.0.9.
Security issues fixed:
- CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCM_INFO requests sent from the guest
(bsc#1259079).
- CVE-2026-3195: heap out-of-bounds write when reading input audio in the virtio-snd device input callback
(bsc#1259080).
- CVE-2026-2243: heap out-of-bounds read and 12-byte information leak when processing specially crafted VMDK files
with qemu-img (bsc#1258509).
Other updates and bugfixes:
- Version 10.0.9:
* Full backport list: https://lore.kernel.org/qemu-devel/20260318045608.7E1B513DFF6@think4mjt.localdomain/
* hyperv/syndbg: check length returned by cpu_physical_memory_map()
* fuse: Copy write buffer content before polling
* target/loongarch: Avoid recursive PNX exception on CSR_BADI fetch
* target/loongarch: Preserve PTE permission bits in LDPTE
* hw/net/npcm_gmac: Catch accesses off the end of the register array
* linux-user: fix TIOCGSID ioctl
* tests/tcg/multiarch/test-mmap: Check mmaps beyond reserved_va
* bsd-user: Deal with mmap where start > reserved_va
* linux-user: Deal with mmap where start > reserved_va
* hw/net/xilinx_ethlite: Check for oversized TX packets
* virtio-gpu: Ensure BHs are invoked only from main-loop thread
* block/nfs: Do not enter coroutine from CB
* block: Never drop BLOCK_IO_ERROR with action=stop for rate limiting
* block/throttle-groups: fix deadlock with iolimits and muliple iothreads
* mirror: Fix missed dirty bitmap writes during startup
* block/curl: fix concurrent completion handling
* block/vmdk: fix OOB read in vmdk_read_extent()
* hw/net/smc91c111: Don't allow negative-length packets
* io: fix cleanup for websock I/O source data on cancellation
* io: fix cleanup for TLS I/O source data on cancellation
* io: separate freeing of tasks from marking them as complete
* target/i386/hvf/x86_mmu: Fix compiler warning
* hw/i386/vmmouse: Fix hypercall clobbers
* tests/docker: upgrade most non-lcitool debian tests to debian 13
* hw/9pfs: fix missing EOPNOTSUPP on Twstat and Trenameat for fs synth driver
* hw/9pfs: fix data race in v9fs_mark_fids_unreclaim()
- Add support for AMD-Turn CPUs (jsc#PED-13174)
* target/i386: Add support for EPYC-Turin model (jsc#PED-13174)
* target/i386: Update EPYC-Genoa for Cache property, perfmon-v2, RAS and SVM feature bits (jsc#PED-13174)
* target/i386: Add couple of feature bits in CPUID_Fn80000021_EAX (jsc#PED-13174)
* target/i386: Update EPYC-Milan CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
* target/i386: Update EPYC-Rome CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
* target/i386: Update EPYC CPU model for Cache property, RAS, SVM feature bits (jsc#PED-13174)
A security update for Botan addresses CVE-2026-32884, which involves a certificate validation bypass caused by mixed-case Common Name fields in X.509 certificates. This vulnerability could allow improper validation of certificates, potentially undermining trust in secure communications. The issue has been fixed by the vendor.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg (CVE-2026-23066)
* kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
* kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
* kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
* kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This security update for Roundcube Webmail 1.6 addresses multiple vulnerabilities including a pre-authentication arbitrary file write via unsafe deserialization in the redis/memcache session handler (CVE-2026-35537). Additional fixes include prevention of unauthorized password changes, IMAP injection and CSRF bypass in mail search, remote image blocking bypasses via SVG animate attributes and crafted body background attributes, XSS in HTML attachment preview, and SSRF with information disclosure via stylesheet links. The update also resolves regressions affecting mail search with non-ASCII criteria and data URL image handling. Users of Roundcube 1.6.x are recommended to update to version 1.6.15 to mitigate these issues.
Two vulnerabilities in LibVNCServer have been addressed by a security update. The first (CVE-2026-32853) involves a crafted FramebufferUpdate message that can cause information disclosure or denial of service. The second (CVE-2026-32854) involves crafted HTTP requests that can lead to denial of service. No specific affected versions or patch details are provided in the input data.
This security update for dovecot24 addresses multiple vulnerabilities including denial of service via invalid base64 authentication, potential file disclosure through symlink following during OOXML extraction, a panic in ManageSieve, SQL injection and LDAP query injection when auth_username_chars is empty, OTP driver replay attacks, timing attack on Doveadm credentials, and excessive resource consumption via malformed IMAP login and MIME parameters. These issues are fixed in version 2.4.3.