CVE-2026-14457

CVE-2026-14457 is a NULL pointer dereference (CWE-476) in OpenSSL's TLS implementation affecting configurations that use RFC 7250 Raw Public Keys (RPKs) with only a private key configured and no associated certificate. When a remote peer solicits RPKs and also sends the "signature_algorithms_cert...

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

Security update for git-lfs

This update for git-lfs fixes the following issue: CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist bsc1252259. Changes for git-lfs: update to 3.7.1 Patch Instructions: To insta...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

SUSE-SU-2026:3800-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...

SUSE-SU-2026:3799-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead t...

Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode

Marimo has addressed a high-severity security flaw in its notebook software that allowed an attacker to execute an attacker-supplied Model Context Protocol MCP command in a specially crafted notebook, according to VulnCheck's CVE Numbering Authority CNA record. The CNA record says the command can...

Security update for curl

This update for curl fixes the following issues: CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. CVE-2026-6276: stale custom cookie host causes...

Security update for sssd

This update for sssd fixes the following issue: CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed bsc1273925. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for librest

This update for librest fixes the following issue: CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for librest

This update for librest fixes the following issue: CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for postgresql16

This update for postgresql16 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for postgresql14

This update for postgresql14 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for rmt-server

This update for rmt-server fixes the following issue: Update to version 3.1 bsc1274715. CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 bsc1265369. Changes for rmt-server: Version 3.1: Remove all errors and warnings du...

Security update for snpguest

This update for snpguest fixes the following issues Update openssl to v0.10.81 CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270541. CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in...

polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...

SUSE-SU-2026:3790-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort...