Threats Tagged 'suse-product-security-team'

A medium severity vulnerability (CVE-2026-58374) exists in hostapd, specifically in wpa_supplicant's AP-mode Wi-Fi 7 Multi-Link Operation association request processing. The flaw is due to a missing bounds check that allows an unauthenticated attacker to send a crafted management frame causing an out-of-bounds write, leading to denial of service. The issue affects Red Hat Enterprise Linux 10 and related packages. Red Hat has released a security update to address this vulnerability. There are no known exploits in the wild.

Bulletin ID: 2026-062-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 07/21/2026 13:15 PM PDT Description: s2n-tls is an open source C99 implementation of the TLS/SSL protocol. We have identified two distinct issues: - CVE-2026-16317: Silent Drop of TLS 1.3 Encrypted Records in s2n-tls Missing validation of the outer content_type byte on TLS 1.3 encrypted records in s2n-tls allows an active man-in-the-middle to silently drop individual application data records without either endpoint detecting the modification. RFC 8446 Section 5.2 requires that the outer content_type of all encrypted TLS 1.3 records must be application_data (0x17). The s2n-tls AEAD implementation hardcodes this value in the additional authenticated data rather than using the actual wire byte, so the outer content_type is not covered by the authentication tag. All TLS 1.3 connections are affected. Both TLS clients and servers are affected. TLS 1.2 and QUIC connections are not affected. - CVE-2026-16318: QUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tls Incorrect use of s2n_alloc instead of s2n_realloc in the QUIC transport parameters extension handler in s2n-tls causes one memory allocation to be leaked each time a QUIC-enabled TLS 1.3 connection goes through a HelloRetryRequest. This can occur during normal handshakes when a client offers a key share group the server does not prefer, and can lead to increased memory consumption on long-running server processes. Only QUIC-enabled deployments are affected. Impacted versions: <= v1.7.5 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.

TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file itself, whose META-INF/services/javax.sound.midi.Soundbank entry names an attacker-supplied class stored in that archive. When a user opens the file, JARSoundbankReader uses an unverified class loader to load and instantiate that class, executing its constructor with the privileges of the TuxGuitar process. This issue is fixed in version 2.1.0.

Red Hat has issued a security advisory addressing multiple vulnerabilities, including the high-severity CVE-2026-41178, affecting Red Hat Advanced Cluster Management for Kubernetes and related products such as the Migration Toolkit for Applications and Red Hat Trusted Artifact Signer. These vulnerabilities impact various versions of Red Hat's Kubernetes management and application migration components. A patch is available to remediate these issues.

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.18.48. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHBA-2026:37189 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/

This is a security update for Wireshark provided by the SUSE Product Security Team, corresponding functionally to Red Hat advisory RHSA-2026:83546. The update addresses multiple vulnerabilities identified by CVE identifiers including CVE-2026-76880 and others. No specific affected versions or detailed technical vulnerability descriptions are provided in the available data. The update is classified as high severity but lacks a CVSS score. No known exploits in the wild are reported at this time.

A vulnerability in Ghostscript allows crafted PostScript or EPS documents to bypass the -dSAFER sandbox and execute arbitrary shell commands. This occurs through a combination of memory corruption during document parsing and disabling of internal path access controls at runtime. Exploitation can compromise confidentiality, integrity, and availability of data accessible to the Ghostscript process. The affected versions include 10.05.0dfsg1-0ubuntu4 and 10.05.0dfsg1-0ubuntu5. The vulnerability has a CVSS score of 7.8, indicating a high impact. No known exploits are reported in the wild, and no patch or remediation details are provided in the input data.

Multiple heap buffer overflow vulnerabilities have been identified in libsoup3, an HTTP library used in GNOME applications for asynchronous HTTP communication. These vulnerabilities affect various aspects of data processing, including base64 decoding of data-URIs, WebSocket message handling, and buffer growth during WebSocket operations. Red Hat has issued security updates addressing these issues in Red Hat Enterprise Linux 10 and related products.

A vulnerability in libsoup's WebSocket handling causes the ::pong signal to emit a GByteArray pointer instead of the expected GBytes. This type confusion can lead to heap corruption or crashes when applications connect handlers expecting GBytes and receive a crafted Pong frame. The flaw is remotely triggerable without authentication and has a high severity rating. Red Hat has issued an important security update addressing this and related heap buffer overflow issues in libsoup for Red Hat Enterprise Linux 9.