Linuxsecurity SUSE Security Updates Address Multiple Vulnerabilities in Linux Packages
Article Content
- •SUSE patched three vulnerabilities in texlive, lcms2, and file-roller.
- •CVE-2026-63729 can lead to arbitrary code execution if exploited.
- •Patches are available for all affected SUSE Linux Enterprise Server versions.
SUSE has released security updates addressing three vulnerabilities in its Linux packages. The vulnerabilities include CVE-2026-63729, a heap use-after-free issue in texlive that could lead to application crashes or arbitrary code execution, published on 2026-07-21. CVE-2026-41254, an information disclosure or denial of service vulnerability in lcms2 due to an integer overflow, was published on 2026-04-18. Lastly, CVE-2026-78322, a stack buffer overflow in file-roller affecting 7z and RAR handlers, was published on 2026-08-25. The updates are applicable to SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security. Administrators are urged to apply the patches using recommended installation methods. The vulnerabilities have varying CVSS scores, indicating different levels of severity and impact. Current status shows that all vulnerabilities have patches available.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (7)
Following this threat?
Track CVE-2026-41254 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…