openSUSE Python-msgpack Buffer Overflow Vulnerability Fix Released

A critical buffer overflow vulnerability, CVE-2026-57585, was discovered in python-msgpack, affecting multiple SUSE Linux Enterprise products. The issue arises from reusing an Unpacker instance after an error, which can lead to an out-of-bounds read. This vulnerability has been patched in the latest updates for various SUSE products, including SUSE Linux Enterprise Server and High Performance Computing editions. System administrators are urged to apply the patches using recommended installation methods such as YaST or zypper. The vulnerability was published on June 30, 2026, and is categorized as a significant risk to affected systems. Proper patching is essential to mitigate potential exploitation risks. The advisory emphasizes the importance of keeping systems secure and up to date.

Key Points: • CVE-2026-57585 is a critical buffer overflow vulnerability in python-msgpack. • Affected systems include various SUSE Linux Enterprise products. • Patches are available and should be applied immediately to mitigate risks.