This update for libusb-1_0 fixes the following issues:
- CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a
malformed USB configuration descriptor (bsc#1266664).
- CVE-2026-47104: one-byte out-of-bounds read in `parse_iad_array()` allows attackers to trigger a denial of service
via a malformed USB descriptor (bsc#1266667).
This security update for freeciv addresses multiple issues including a heap buffer overflow and an out-of-bounds read triggered by crafted save files. Additional fixes improve game logic, logging, and user interface behavior. The update resolves vulnerabilities that could potentially lead to memory corruption. No known exploits are reported in the wild.
CVE-2025-55154 is an integer overflow vulnerability in ImageMagick affecting MNG magnification. It is addressed in the GraphicsMagick-1.3.48-2.1 package on openSUSE Tumbleweed and related Red Hat Enterprise Linux 7 Extended Lifecycle Support packages. The issue could lead to security risks if exploited. Red Hat has released an important security update fixing this vulnerability in ImageMagick 6.9.10.68-8.el7_9. No known exploits are reported in the wild. The vulnerability is rated medium severity.
This security update for NetworkManager addresses two vulnerabilities: CVE-2026-10805, a local privilege escalation via malformed MUD URLs in the dhclient backend, and CVE-2026-19685, a missing user ownership check for 802.1X directory properties that can allow WPA-Enterprise server certificate validation bypass. The update is rated with high severity and affects certain versions of NetworkManager in SUSE and Red Hat Enterprise Linux 9 distributions.
A stack buffer overflow vulnerability exists in the rpcinfo rpcbdump() short-mode version-list formatting in the SUSE rpcbind package. This vulnerability is identified as CVE-2026-16461 and has medium severity. It affects specific SUSE rpcbind package versions on aarch64 and ppc64le architectures. No CVSS score is provided, and no patch or remediation details are included in the available data.
A security update for the perl-URI package addresses CVE-2026-19953, which involves improper normalization in the nameprep process leading to non-NFC host names being encoded into non-standard punycode labels. This issue affects SUSE Linux Enterprise Server 16.0 versions of perl-URI prior to 5.310.0-160000.3.1. The vulnerability is rated medium severity.
This security update for Chromium addresses multiple critical vulnerabilities across versions 152.0.7977.75 and 152.0.7977.82. The fixes cover a range of issues including use-after-free, type confusion, out-of-bounds reads and writes, improper input validation, incorrect authorization, information leaks, race conditions, and buffer overflows in various components such as V8, WebGL, Skia, CacheStorage, DevTools, and others. These vulnerabilities could potentially allow attackers to execute arbitrary code, escalate privileges, or leak sensitive information. The update also disables the EULA dialog to use preferences instead of a hardcoded return. The affected versions are specifically identified and patches are available in these updated Chromium releases.
This update for bzip2 fixes the following issue:
- CVE-2026-42250: off-by-one error in the `bzip2recover` utility when processing a specially crafted file can lead to a
crash (bsc#1266786).
Multiple security issues were addressed in the ollama-0.33.1-1.1 package included in the GA media of openSUSE Tumbleweed. The specific vulnerabilities fixed are not detailed in the provided information. The severity of these issues is assessed as medium.
A local privilege escalation vulnerability (CVE-2026-16742) exists in systemd-homed due to missing home record signature verification during authentication. This flaw affects specific SUSE systemd packages version 257.13-160000.4.1.aarch64 and could allow a local attacker to escalate privileges. Additionally, a non-security issue causing systemd-resolved to fail to start due to denied write access to tmpfs is fixed in the same update. The vulnerability is rated medium severity. No CVSS score is available.
A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a `GitRepo` resource can cause the Fleet controller to:
- Disclose cluster metadata available to the templating context.
- Reveal information about hosts reachable from the controller's network position.
Because the disclosure channel is name resolution, it may remain effective in environments where outbound traffic is otherwise restricted. The disclosed information is limited to values exposed to the Fleet templating context and to name resolution results. Integrity and availability of managed clusters are not affected.
This issue affects Fleet:
from 0.12.0 before 0.12.19,
from 0.13.0 before 0.13.15,
from 0.14.0 before 0.14.10,
from 0.15.0 before 0.15.6, and
from 0.16.0 before 0.16.1.
A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user, the ext.cattle.io/v1 Token store dropped its internal owner filter instead of returning an empty result. Any authenticated user could therefore list and watch every other user's tokens, disclosing token metadata and the stored salted hash of the bearer token.
This issue affects Rancher: before 2.15.1.
A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recorded consumed assertion IDs in a per-process cache, so each replica only detected replays that reached the same pod. In a high-availability deployment, an attacker holding a captured assertion could replay it once against every other replica to obtain additional authenticated sessions as the victim.
This issue affects Rancher: before 2.15.1.
A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io/projectId` annotation, without verifying that the referenced project belonged to the same downstream cluster. A user able to create namespaces on one cluster could set the annotation to a project ID from another cluster and have that project's secrets copied into a namespace under their control.
This issue affects Rancher: before 2.15.1.
A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settable `authz.management.cattle.io/cr-name` annotation and overwrote that object's rules without verifying ownership. A user with delegated GlobalRole create or update permission could point the annotation at any existing ClusterRole, such as `cluster-admin`, and revoke the permissions of every principal bound to it. The change persists after the malicious GlobalRole is deleted.
This issue affects Rancher: before 2.15.1.
Multiple security vulnerabilities exist in GNU cpio, including a path traversal flaw that permits creation of hard links outside the intended extraction directory, improper memory management causing denial of service, and terminal control sequence injection via crafted archive member names. These vulnerabilities can lead to unauthorized file modifications, denial of service, or terminal manipulation when extracting malicious archives. Vendors such as Red Hat have issued updates to address these issues. Users are advised to avoid using the --no-absolute-filenames option with untrusted archives and to apply available patches.