Multiple Vulnerabilities in openSUSE Leap 16.0 Affecting Key Components

Recent security updates for openSUSE Leap 16.0 address multiple vulnerabilities across key components. The updates include CVE-2026-57825 in opam, CVE-2026-41989 in libgcrypt, and CVE-2026-57062 in gpg2. CVE-2026-41989, published on 2026-04-23, allows crafted ECDH ciphertext to cause denial of service. CVE-2026-41082, published on 2026-04-16, affects opam and has been addressed in version 2.5.1. CVE-2026-57062, published on 2026-06-23, involves a parsing issue in gpgsm related to the CMS format for AES-GCM. Users are advised to apply the updates using recommended installation methods to mitigate risks. The vulnerabilities could lead to system-wide damage if exploited, emphasizing the importance of auditing Linux privileges.

Key Points: • Three vulnerabilities in openSUSE Leap 16.0 have been patched, affecting opam, libgcrypt, and gpg2. • CVE-2026-41989 can lead to denial of service through crafted ECDH ciphertext. • Immediate updates are recommended to mitigate potential system-wide damage from these vulnerabilities.