Two security vulnerabilities have been identified in cpp-httplib, affecting the SUSE product. CVE-2025-53629 allows arbitrary memory allocation via HTTP headers on the server, potentially leading to memory exhaustion. CVE-2025-53628 involves HTTP header smuggling caused by insecure merging of trailers. These issues are classified as high severity. No specific affected versions or patch information is provided in the available data.
A high-severity vulnerability in the Linux kernel's TCP stack was resolved by removing a problematic call to reqsk_fastopen_remove() in tcp_conn_request(). The flaw caused a reference count underflow and double-free of a request socket (reqsk) when a listener socket was closed during TCP Fast Open (TFO) processing. This could lead to kernel instability or crashes. The issue was reported by syzbot and affects multiple SUSE Linux Enterprise 16 kernel live patch versions prior to 6.17.0-1007.7 and related builds. A patch is available and should be applied to mitigate the risk.
The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:* action. As a result, a user who has permission management rights on one dashboard can read and modify permissions on other dashboards. This is an organization‑internal privilege escalation.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Use-after-free in BPF sockmap can lead to denial of service and privilege escalation (CVE-2025-38154)
* kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
* kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
* kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
* kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
* kernel: can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CVE-2026-31474)
* kernel: netfilter: ctnetlink: ensure safe access to master conntrack (CVE-2026-43116)
* kernel: net/sched: act_pedit: extend the writable skb range per key (CVE-2026-46331)
* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
* kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
* kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list (CVE-2026-45898)
* kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CVE-2026-46227)
* kernel: wifi: mac80211: remove station if connection prep fails (CVE-2026-46125)
Bug Fix(es) and Enhancement(s):
* libceph: CEPH_CRYPTO_AES256KRB5 (--key-type aes256k) support [rhel-10.0.z] (JIRA:RHEL-168933)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security update for fluidsynth addresses a vulnerability identified as CVE-2025-56225, which involves a NULL pointer dereference triggered by loading an invalid MIDI file. This flaw could cause application crashes or denial of service. The update fixes this issue to improve stability and security.
A security update for SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernels addresses multiple vulnerabilities across various kernel subsystems including block device throttling, multipath TCP, SCSI, NVMe, networking, and file systems. The fixes resolve issues such as race conditions, use-after-free bugs, memory leaks, and null pointer dereferences. These vulnerabilities are identified by CVEs ranging from CVE-2025-40147 to CVE-2025-68814. The update aims to improve kernel stability and security by mitigating these defects.
This security update introduces initial livepatches for the kernel of SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2. The update addresses vulnerabilities in the kernel via livepatch technology, allowing patching without rebooting. No specific details about the vulnerabilities or affected kernel versions are provided.
A security update for libsoup2 addresses a stack-based buffer overflow vulnerability (CVE-2026-1761) caused by incorrect length calculation when parsing multipart HTTP responses. This vulnerability is rated as high severity. The issue affects multiple versions of libsoup2 in SUSE and Red Hat Enterprise Linux distributions. A patch is available and should be applied to mitigate the risk.
A security update for kubevirt addresses multiple vulnerabilities fixed in version 1.7.0. These include logic flaws causing denial of service, improper handling of symbolic links allowing arbitrary file read/write, bypass of RBAC controls due to TLS certificate validation errors, and potential impersonation of privileged components. These issues collectively pose a high risk to the confidentiality, integrity, and availability of affected systems. The update also includes other bug fixes and improvements.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
* encoding/gob: golang: Calling Decoder.Decode on a message which contains
deeply nested structures can cause a panic due to stack exhaustion
(CVE-2024-34156)
* jose-go: improper handling of highly compressed data (CVE-2024-28180)
* go/parser: golang: Calling any of the Parse functions containing deeply
nested literals can cause a panic/stack exhaustion (CVE-2024-34155)
* go/build/constraint: golang: Calling Parse on a "// +build" build tag
line with deeply nested expressions can cause a panic due to stack
exhaustion (CVE-2024-34158)
* openstack-ironic: Lack of checksum validation on images (CVE-2024-47211)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s)
listed in the References section.
This security update for 7zip addresses multiple issues including a heap buffer overflow (CVE-2025-53816) and a null pointer dereference (CVE-2025-53817) that could lead to denial of service. The update also improves symbolic link handling for greater security and introduces a command line switch to bypass default security checks when creating symbolic links. Performance improvements for compression algorithms and archive format support are included as well.
A security update for the autogen tool addresses CVE-2025-8746, which involves improper input validation and memory bounds checking when processing certain malformed configuration files. This vulnerability could potentially lead to memory-related issues. The severity is assessed as low. No specific affected versions or patch details are provided in the available data.
An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like:
* gain access to possible private information found in /var/lib/pcrlock.d
* manipulate the data backed up in /tmp/pcrlock.d.bak, therefore violating the integrity of the data should it be restored.
* overwrite protected system files with data from /var/lib/pcrlock.d by placing symlinks to existing files in the directory tree in /tmp/pcrlock.d.bak.
This issue affects sdbootutil: from ? before 5880246d3a02642dc68f5c8cb474bf63cdb56bca.
A security update for GIMP addresses a heap buffer overflow vulnerability identified as CVE-2026-2239 in the psd-util.c component. This flaw could potentially lead to memory corruption. The issue has been fixed in the update provided by the SUSE Product Security Team. No CVSS score is available, but the severity is assessed as low based on the information provided.
A malicious user can manipulate the parameters.pathPattern to create PersistentVolumes in arbitrary locations on the host node, potentially overwriting sensitive files or gaining access to unintended directories.
A vulnerability has been identified within Rancher Manager, where using self-signed CA certificates and passing the -skip-verify flag to the Rancher CLI login command without also passing the –cacert flag results in the CLI attempting to fetch CA certificates stored in Rancher’s setting cacerts.
A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users.
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
This security update for mosquitto addresses multiple stability and crash issues, including fixes for handling disconnected sessions, OpenSSL function return checks to prevent crashes, and protection against crashes from malicious or corrupt persistence files. Additional fixes cover bridge functionality, client disconnection reporting, TLS error handling, and systemd service startup. The update includes versions 2.0.21 through 2.0.23 with various bug and crash fixes.
Multiple security issues were discovered and fixed in the Linux kernel affecting a wide range of subsystems and architectures. This update addresses vulnerabilities that could potentially allow an attacker to compromise the system. The issues affect various kernel components including architectures (ARM32, ARM64, PowerPC, RISC-V, x86), drivers, filesystems, networking, and more. A patch is available to remediate these vulnerabilities.