A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a User resource's `username` and `principalIds` fields. A user holding the `update` verb on `users.management.cattle.io` could inject a foreign identity provider principal into any account, so that the next login by the owner of that principal was bound to the victim's account and inherited its role bindings.
This issue affects Rancher: before 2.15.1.
A security update for python-apprise addresses CVE-2026-59180, which involves information disclosure through HTTP redirects that cause credentials to be resent. The vulnerability is rated as low severity. Multiple specific versions of python-apprise used in SUSE and Ubuntu distributions are affected.
This security update for the lkl component addresses unspecified issues by updating it to match the current kernel version. No specific vulnerabilities or technical details are provided.
A security update for the lkl component has been released by SUSE Product Security Team. The update aligns lkl with the current kernel version, addressing unspecified security issues. No specific affected versions or detailed vulnerability information are provided.
Multiple vulnerabilities in libvirt have been addressed by a security update. These include an integer overflow leading to heap buffer overflow and possible local privilege escalation, newline injection enabling dnsmasq configuration directive injection and potential arbitrary code execution as root, symlink-following allowing privilege escalation via ownership changes, temporary world-readable volume images risking sensitive information disclosure, and root chown() symlink-following leading to privilege escalation. The affected versions are specific builds of libvirt as listed. The severity of these combined issues is high.
Multiple privilege escalation vulnerabilities affecting Intel processors are addressed by a security update to the ucode-intel microcode package. These vulnerabilities involve improper value and memory range handling in privileged CPU modes, specifically Ring 0 and System Management Mode (SMM). The update is available for SUSE and Red Hat Enterprise Linux distributions, including microcode releases up to 20260812. The vulnerabilities are identified as CVE-2025-31936 and CVE-2025-35973. The update fixes these issues by providing updated microcode and related packages.
Multiple security issues were addressed in the python313-aiosmtpd-1.4.6-6.1 package for openSUSE Tumbleweed. These fixes resolve vulnerabilities identified by CVE-2024-27305 and CVE-2024-34083. The package update is part of the SUSE Product Security Team's efforts to improve security in this component.
This security update addresses multiple issues in the Orthanc ecosystem, including orthanc, orthanc-authorization, orthanc-postgresql, and orthanc-dicomweb components. The update includes a major rewrite of DICOM file handling, REST API upgrades, security and robustness improvements, and fixes for several bugs and vulnerabilities. Specific fixes include permission enhancements, audit logging improvements, and error handling corrections. The update does not specify exact CVEs or detailed vulnerability descriptions but indicates medium severity based on the nature of the fixes.
Improper neutralization of special elements used in an OS command in yast2-samba-client allows an attacker who controls the content of an Active Directory directory tree - a rogue domain controller, or a directory user delegated the right to create objects - to execute arbitrary commands as root on a machine being joined to that domain.
This issue affects yast2-samba-client through 5.0.4.
A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands as root on the configured host.
Auth::AuthConf in src/lib/auth/authconf.rb assembles the Samba net ads join, net ads lookup -S and net ads testjoin invocations by interpolating configuration values into a single command string and passing that string to Open3.popen2 / Open3.capture2, which causes Ruby to run it through /bin/sh. The Organizational Unit (ou), dnshostname, AD user name and AD domain name values are neither validated nor shell-quoted.
An OS command injection vulnerability was found in yast2-users. When displaying the "Password Settings" tab of a user, get_password_term() in src/include/users/dialogs.rb read the shadowLastChange and shadowExpire fields with GetString(), which performs no numeric validation, and passed the resulting string to format_days_after_epoch(). That helper interpolated the value into a shell command executed via Ruby backticks without quoting or escaping.
Impact: an administrator who manages users against an external/federated LDAP directory via `yast2 users` triggers root command execution the moment they view or edit that particular user's "Password Settings" tab. No "join domain" or trust setup is required, just browsing/editing one user entry.
This issue affects yast2-users through 5.0.8.
A security update for Chromium version 152.0.7977.64 addresses multiple critical vulnerabilities including use-after-free, buffer overflows, type confusion, race conditions, improper input validation, incorrect authorization, information leaks, and memory corruption across various components such as ANGLE, Aura, Chromecast, Views, V8, GPU, and others. These vulnerabilities could allow attackers to cause memory corruption, unauthorized access, or information disclosure. The update was released by the SUSE Product Security Team on 2026-08-25.
A security update for wicked2nm addresses a vulnerability in the serde_with library where KeyValueMap serialization could panic on empty sequences or map entries. The update to version 1.5.2 includes this fix along with other bug fixes and dependency updates.
An update to wicked2nm (v1.5.2) addresses a security issue in the serde_with library where KeyValueMap serialization could panic on empty sequences or map entries. This update also includes other bug fixes and dependency bumps.
This security update provides a functional equivalent of RHSA-2026:62144.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:62144.
A denial of service vulnerability (CVE-2026-6479) exists in PostgreSQL due to uncontrolled recursion in SSL/GSS negotiation. This issue affects multiple PostgreSQL versions and related Red Hat and SUSE packages. A security update addressing this vulnerability is available from vendors including Red Hat. The vulnerability is rated with high severity based on impact descriptions.
A critical security update for Mozilla Firefox Extended Support Release (ESR) 153.1.0 addresses multiple vulnerabilities across components such as graphics, JavaScript engine, DOM, and networking. The issues include use-after-free, privilege escalation, information disclosure, mitigation bypasses, same-origin policy bypass, integer overflow, race conditions, and denial-of-service. These vulnerabilities affect Firefox ESR 153.1.0 and related branding and translation packages.
This security update for Chromium addresses multiple critical vulnerabilities affecting various components such as Codecs, Blink, V8, GPU, WebRTC, and many others. The issues include out-of-bounds writes, use-after-free errors, type confusion, integer overflows, and insufficient validation of untrusted input, among others. These vulnerabilities span Chromium versions from 150.0.7871.46 through 150.0.7871.186. The update improves stability and security by mitigating these critical memory safety and input validation flaws.