SUSE Security Updates Address Multiple Vulnerabilities in Linux Packages

SUSE has released security updates addressing three vulnerabilities in its Linux packages. The vulnerabilities include CVE-2026-63729, a heap use-after-free issue in texlive that could lead to application crashes or arbitrary code execution, published on 2026-07-21. CVE-2026-41254, an information disclosure or denial of service vulnerability in lcms2 due to an integer overflow, was published on 2026-04-18. Lastly, CVE-2026-78322, a stack buffer overflow in file-roller affecting 7z and RAR handlers, was published on 2026-08-25. The updates are applicable to SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security. Administrators are urged to apply the patches using recommended installation methods. The vulnerabilities have varying CVSS scores, indicating different levels of severity and impact. Current status shows that all vulnerabilities have patches available.

Key Points: • SUSE patched three vulnerabilities in texlive, lcms2, and file-roller. • CVE-2026-63729 can lead to arbitrary code execution if exploited. • Patches are available for all affected SUSE Linux Enterprise Server versions.