SUSE-SU-2026:2423-1

Details

Description of the patch:

This update for libcaca fixes the following issue

CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).

Affected Packages

libcaca-devel

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

0.99.beta20-150600.3.3.1

libcaca0

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

0.99.beta20-150600.3.3.1

libcaca0-plugins

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6SUSE Linux Enterprise Server 15 SP6-LTSS

Fixed in:

0.99.beta20-150600.3.3.1

References

ADVISORY

https://bugzilla.suse.com/1264984

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-June/026793.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-42046/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262423-1/