libmsgpack-c2-7.0.2-2.1 on GA media (moderate)

libmsgpack-c2-7.0.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11672-1 Rating: moderate Cross-References: CVE-2026-72854 CVSS scores: CVE-2026-72854 SUSE : 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

PT-2026-85173

These are all security issues fixed in the libmsgpack-c2-7.0.2-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11672-1 libmsgpack-c2-7.0.2-2.1 on GA media

These are all security issues fixed in the libmsgpack-c2-7.0.2-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-72854

msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...