OPENSUSE-SU-2026:21428-1 Security update for nm-configurator

This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...

EUVD-2026-46384

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-56852

Technical details about CVE-2026-56852 are not publicly provided in the supplied documents; no specifics on affected products, versions, or fixes are present. Monitor for updates from official advisories.

EUVD-2026-46318

When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in...

SUSE CVE-2026-63895

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: copy only received bytes on short ep0 read ffsep0read allocates its control-OUT data buffer with kmalloc not kzalloc at the Length value from the Setup packet, then copies that full len to userspace regardless o...

SUSE CVE-2026-63899

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size...

SUSE CVE-2026-63956

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypressm8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

SUSE CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

PT-2026-61981

When verifying a mac with a ChunkedMacVerification object, Tink compares the resulting tag with non constant time comparison. This potentially allows an attacker to use timinig information as a side channel in order to get information how many bytes of a given tag match the correct tag. This in...

EUVD-2026-43752

Pillow TGA RLE encoder can serialize up to 57 KB of adjacent heap data into generated images...

GHSA-GVWX-54WH-QM9J node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records

Summary node-tar strips trailing NUL bytes from long-name L and long-linkpath K GNU extended headers but does not apply the same sanitization to equivalent fields delivered via PAX x typeflag extended headers. A PAX record of the form path=visible.txt\x00hidden.txt is parsed verbatim into...

EUVD-2026-42303

node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

OPENSUSE-SU-2026:21386-1 Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. - CVE-2026-41677: openssl: out-of-bounds read in PEM passwor...

CVE-2026-63899

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size...

EUVD-2026-45659

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...

CVE-2026-63960

In the Linux kernel, the following vulnerability has been resolved: usb: typec: wcove: don't write past struct pdmessage in wcovereadrxbuffer wcovereadrxbuffer copies the PD RX FIFO into the caller's struct pdmessage with for i = 0; i regmap, USBCRXDATA + i, msg + i; which has two problems:...

CVE-2026-63960

In the Linux kernel, CVE-2026-63960 affects usb: typec: wcove by allowing wcove_read_rx_buffer() to copy the PD RX FIFO into struct pd_message beyond its bounds. The loop uses USBC_RXINFO_RXBYTES(info) (5-bit, max 31) while the destination is 30 bytes, enabling a mis-sized copy. Additionally, reg...

EUVD-2026-45730

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller...

CVE-2026-63956

The CVE-2026-63956 entry describes a Linux kernel vulnerability in USB serial for Cypress M8 devices. The issue occurs when the interrupt-out endpoint max packet size is smaller than eight bytes, enabling potential user-controlled slab corruption or NULL-pointer dereference if a malicious device ...