Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
An update that solves 10 vulnerabilities and has 12 bug fixes can now be installed.. openSUSE security update: security update for tree-sitter ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20749-1 Rating: important References: * bsc#1259205 * bsc#1261839 * bsc#1261871 * bsc#1261894 * bsc#1261954 * bsc#1261963 * bsc#1261968 * bsc#1261974 * bsc#1262007 * bsc#1262032 * bsc#1262036 * bsc#1262040 Cross-References: * CVE-2026-34941 * CVE-2026-34942 * CVE-2026-34943 * CVE-2026-34944 * CVE-2026-34945 * CVE-2026-34946 * CVE-2026-34987 * CVE-2026-34988 * CVE-2026-35186 * CVE-2026-35195 CVSS scores: * CVE-2026-34941 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-34941 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-34942 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34942 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34943 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34943 ( SUSE ): 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34944 ( SUSE ): 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-34944 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34945 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-34945 ( SUSE ): 7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-34946 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-34987 ( SUSE ): 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-34987 ( SUSE ): 9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-34988 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-34988 ( SUSE ): 7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-35186 ( SUSE ): 6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-35186 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-35195 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-35195 ( SUSE ): 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 10 vulnerabilities and has 12 bug fixes can now be installed. Description: This update for tree-sitter fixes the following issues Security issues: - CVE-2026-34941: wasmtime: crafted input string can lead to an out-of-bound read (bsc#1261871). - CVE-2026-34942: wasmtime: unaligned pointers can lead to a denial of service (bsc#1261894). - CVE-2026-34943: wasmtime: lifting `flags` component value can lead to a denial of service (bsc#1261954). - CVE-2026-34944: wasmtime: out-of-bounds read during WebAssembly compilation can lead to a denial of service (bsc#1261963). - CVE-2026-34945: wasmtime: incorrectly translated table.size could lead to disclosing data (bsc#1262007). - CVE-2026-34946: wasmtime: denial of service due to WebAssembly compilation error (bsc#1261974). - CVE-2026-34987: wasmtime: winch compiler backend may allow a sandbox-escaping memory access (bsc#1262032). - CVE-2026-34988: wasmtime: pooling allocator instances can cause data leakage (bsc#1261968). - CVE-2026-35186: wasmtime: translating the table.grow operator can cause a masked return value (bsc#1262036). - CVE-2026-35195: wasmtime: transcoding strings can lead to an out of bound write or a crash (bsc#1262040). Changes for tree-sitter: - update to 0.26.8: * fix(generate): allow disabling qjs-rt feature from CLI by @WillLillis in #5448 * fix(lib): document invariants that must be upheld for TSInputEdit by @WillLillis in #5452 * fix(cli): correct typo in parse command's help text by @WillLillis in #5465 * perf(cli): misc. improvements by @tree-sitter-ci-bot[bot] in #5476 * Fix wasm loadingof languages w/ multiple reserved word sets by @tree-sitter-ci-bot[bot] in #5477 * generate: avoid panicking when a supertype only has hidden external token children by @tree-sitter-ci-bot[bot] in #5478 Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-743=1 Package List: - openSUSE Leap 16.0: libtree-sitter0_26-0.26.8-160000.1.1 libtree-sitter0_26-x86-64-v3-0.26.8-160000.1.1 tree-sitter-0.26.8-160000.1.1 tree-sitter-devel-0.26.8-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-34941.html * https://www.suse.com/security/cve/CVE-2026-34942.html * https://www.suse.com/security/cve/CVE-2026-34943.html * https://www.suse.com/security/cve/CVE-2026-34944.html * https://www.suse.com/security/cve/CVE-2026-34945.html * https://www.suse.com/security/cve/CVE-2026-34946.html * https://www.suse.com/security/cve/CVE-2026-34987.html * https://www.suse.com/security/cve/CVE-2026-34988.html * https://www.suse.com/security/cve/CVE-2026-35186.html * https://www.suse.com/security/cve/CVE-2026-35195.html . This update resolves 10 vulnerabilities in openSUSE's tree-sitter software, ensuring enhanced security and stability.. openSUSE update tree-sitter vulnerabilities important. . Severity: Important. LinuxSecurity.com Team
- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-1805eacb48 2021-10-04 01:03:57.321113 --------------------------------------------------------------------------------Name : rust-wasmtime-environ Product : Fedora 34 Version : 0.30.0 Release : 1.fc34 URL : Summary : Standalone environment support for WebAsssembly code in Cranelift Description : Standalone environment support for WebAsssembly code in Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: * Thu Sep 23 2021 Olivier Lemasle - 0.30.0-1 - Fixes CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 (rhbz#2006114, rhbz#2006116, rhbz#2006110, rhbz#2006113, rhbz#2006105, rhbz#2006108) - Update to upstream 0.30.0 * Fri Jul 23 2021 Fedora Release Engineering - 0.28.0-2 - Rebuilt forhttps://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-1805eacb48' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-1805eacb48 2021-10-04 01:03:57.321113 --------------------------------------------------------------------------------Name : rust-wasmtime-types Product : Fedora 34 Version : 0.30.0 Release : 2.fc34 URL : Summary : WebAssembly type definitions for Cranelift Description : WebAssembly type definitions for Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-1805eacb48' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keysused by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-68713440cb 2021-09-30 00:51:55.645575 --------------------------------------------------------------------------------Name : rust-wasmtime-types Product : Fedora 35 Version : 0.30.0 Release : 2.fc35 URL : Summary : WebAssembly type definitions for Cranelift Description : WebAssembly type definitions for Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-68713440cb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keysused by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-68713440cb 2021-09-30 00:51:55.645575 --------------------------------------------------------------------------------Name : rust-wasmtime-environ Product : Fedora 35 Version : 0.30.0 Release : 1.fc35 URL : Summary : Standalone environment support for WebAsssembly code in Cranelift Description : Standalone environment support for WebAsssembly code in Cranelift. --------------------------------------------------------------------------------Update Information: - Update cranelift crates to version 0.77.0. - Update the wast crate to version 38.0.0. - Update the wat crate to version 1.0.40. - Update the wasmparser crate to version 0.80.1. - Update wasmtime crates to version 0.30.0. - Update the backtrace crate to version 0.3.61. - Update the addr2line crate to version 0.16.0. - Update the object crate to version 0.26.2. - Update the gimli crate to version 0.25.0. The cranelift and wasmtime package updates also include security fixes for CVE-2021-39216, CVE-2021-39218, and CVE-2021-39219. --------------------------------------------------------------------------------ChangeLog: * Thu Sep 23 2021 Olivier Lemasle - 0.30.0-1 - Fixes CVE-2021-39216, CVE-2021-39218, CVE-2021-39219 (rhbz#2006114, rhbz#2006116, rhbz#2006110, rhbz#2006113, rhbz#2006105, rhbz#2006108) - Update to upstream 0.30.0 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnfupgrade --advisory FEDORA-2021-68713440cb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.