SUSE Product Security Team vulnerabilities and threats

LibRaw, a library for reading RAW image files from digital cameras, has two security vulnerabilities that allow arbitrary code execution. These include a vulnerability triggered by specially crafted malicious files (CVE-2026-24450) and a heap-based buffer overflow in lossless JPEG loading (CVE-2026-21413). The vulnerabilities affect Red Hat Enterprise Linux 9.6 Extended Update Support and related distributions. Red Hat has issued security updates to address these issues.

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.10.1 ESR. - MFSA 2026-36 (bsc#1263110) * CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. * CVE-2026-7321: Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component. * CVE-2026-7322: Memory safety bugs fixed in Firefox ESR 115.35.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1 * CVE-2026-7323: Memory safety bugs fixed in Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, Firefox 150.0.1 and Thunderbird 150.0.1

Multiple security issues have been addressed in the grafana-11.6.14+security01-2.1 package for openSUSE Tumbleweed. These fixes resolve vulnerabilities present in earlier versions of the Grafana software distributed by SUSE.

This is a security update for the SUSE product related to dotnet9.0, providing a functional equivalent of Red Hat advisory RHSA-2026:13282. The update addresses multiple CVEs including CVE-2026-26171 and others. No specific affected versions are stated. The severity is assessed as high. No CVSS score is provided. No known exploits in the wild are reported.

A security issue identified as CVE-2026-31431 affecting the SUSE Linux Enterprise 15 SP4 kernel has been fixed. The flaw relates to the copy.fail security issue in the algif_aead component and was addressed by reverting to operating out-of-place. A Metasploit module exists for this vulnerability, indicating public exploit code availability. No CVSS score is provided, but the severity is reported as high.

A security update for libspectre addresses issues related to rebuilding the package against an updated version of Ghostscript. No specific vulnerability details or exploitation methods are provided.

A security update for python-Pygments addresses CVE-2026-4539, which involves an inefficient regular expression used for GUID and ID pattern matching. This inefficiency can cause a Regular Expression Denial of Service (ReDoS) in the archetype lexer component. The severity is rated as low.

A security update for the himmelblau component in SUSE addresses a naming collision vulnerability that could lead to local privilege escalation. The update also includes other security fixes and bug corrections. The vulnerability identified as CVE-2026-34397 has been fixed in version 2.3.9+git0.a9fd29b.

Multiple security vulnerabilities have been fixed in FreeRDP with the release of version 3.24.2. These include out-of-bounds reads and writes, buffer overflows, heap use-after-free conditions, integer underflows, division by zero, double-free vulnerabilities, and client-side crashes affecting various components such as the RDPGFX channel, clipboard, video codecs, audio decoders, and security context handling. The update addresses a broad range of memory safety and stability issues.

A security update for the SUSE hauler product addresses multiple component updates including a fix related to CVE-2026-24122. The update includes version bumps for several dependencies such as go-tuf, sigstore components, and others, along with fixes for helm chart features and dependency path resolution. No specific exploit details or impact scenarios are provided.

This security update for Helm addresses two vulnerabilities by updating to version 3.20.2. The first vulnerability (CVE-2025-55199) involves specially crafted JSON Schema that can cause out of memory (OOM) termination. The second vulnerability (CVE-2026-35206) allows a specially crafted Chart to extract contents to an unintended output directory. The update also includes other bug fixes and dependency updates.

SUSE Linux Enterprise 15 SP7 kernel received a security update addressing multiple vulnerabilities including buffer overflows, use-after-free bugs, NULL pointer dereferences, data races, and other memory safety issues across various kernel subsystems such as SCSI target, btrfs, networking, RDMA, and more. These fixes resolve potential stability and security risks in the kernel.

Multiple security vulnerabilities have been identified in libssh affecting components such as SCP protocol handling, configuration file parsing, hexadecimal input processing, pattern matching, SFTP longname parsing, and key exchange handling. These include path traversal, denial of service, buffer underflow, out-of-bounds read, null pointer dereference, and memory leak issues. The vulnerabilities are addressed in libssh version 0.11.4.

This security update for openexr addresses two integer overflow vulnerabilities related to pointer arithmetic in the DWA compression components. These vulnerabilities could potentially lead to memory corruption or other unintended behavior. The issues are identified as CVE-2026-40244 and CVE-2026-40250. No specific affected versions are provided in the available data. No known exploits in the wild have been reported. The severity is assessed as high based on the nature of the vulnerabilities.

A heap buffer overflow vulnerability (CVE-2026-40706) exists in the ntfs_build_permissions_posix() function within the acls.c component of ntfs-3g_ntfsprogs. This issue has been addressed by a security update from the SUSE Product Security Team. No specific affected versions are provided. The vulnerability is rated as high severity.

This update for python-urllib3 fixes the following issue: - Fix regression in CVE-2025-66471.patch (bsc#1254867)

A security update for radare2 addresses multiple issues including command injection vulnerabilities, memory leaks, overflows, use-after-free, out-of-bounds reads/writes, and sandbox escapes. The update improves analysis accuracy, performance, and parser robustness across various binary formats. It also hardens disassemblers, debugging features, and the embedded webserver. The update fixes critical security flaws that could allow attackers to execute arbitrary commands or escape sandbox restrictions.