This update for rabbitmq-server addresses multiple improvements and breaking changes in version 4.1.5, including enhanced AMQP 1.0 support, removal of classic queue mirroring, and changes to frame size negotiation. It is identified as a security update by SUSE Product Security Team under CVE-2025-30219. No specific vulnerability details or exploit information are provided. The update includes performance enhancements and configuration changes that may affect client compatibility.
A low severity vulnerability (CVE-2025-11961) in libpcap involves missing validation of a MAC-48 address string in the pcap_ether_aton() function, which can cause out-of-bounds read and write operations. The vulnerability affects specific SUSE libpcap packages version 1.10.5-160000.4.1 on aarch64 and ppc64le architectures. No patch or remediation details are provided in the available data.
This update for libsoup2 fixes the following issues:
- CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).
- CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (bsc#1254876).
- CVE-2025-32049: Denial of Service attack to websocket server (bsc#1240751).
- CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418).
- CVE-2026-0719: stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution (bsc#1256399).
- CVE-2026-1467: lack of input sanitization can lead to unintended or unauthorized HTTP requests (bsc#1257398).
- CVE-2026-1539: proxy authentication credentials leaked via the Proxy-Authorization header when handling HTTP redirects
(bsc#1257441).
- CVE-2026-1760: improper handling of HTTP requests combining certain headers by SoupServer can lead to HTTP request
smuggling and potential DoS (bsc#1257597).
- CVE-2026-2369: Buffer overread due to integer underflow when handling zero-length resources (bsc#1258120).
- CVE-2026-2443: out-of-bounds read when processing specially crafted HTTP Range headers can lead to heap information
disclosure to remote attackers (bsc#1258170).
- CVE-2026-2708: HTTP request smuggling via duplicate Content-Length headers (bsc#1258508).
A security update for python-weasyprint addresses a server-side request forgery (SSRF) vulnerability identified as CVE-2025-68616. The issue was present in the default fetcher component of python-weasyprint. This vulnerability could allow an attacker to induce the server to make unintended requests. The update fixes this SSRF vulnerability, mitigating the associated risk.
This update for open-vm-tools fixes the following issues:
Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
Please refer to the Release Notes at
https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
The granular changes that have gone into the open-vm-tools 13.0.5 release
are in the ChangeLog at
https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
There are no new features in the open-vm-tools 13.0.5 release. This is
primarily a maintenance release that addresses a security issue.
This release resolves and includes the patch for CVE-2025-41244. For more
information on this vulnerability and its impact on Broadcom products,
see VMSA-2025-0015.
A minor enhancement has been made for Guest OS Customization. The
DeployPkg plugin has been updated to use "systemctl reboot", if available.
For a more complete list of issues addressed in this release, see the
What's New and Resolved Issues section of the Release Notes.
Security updates for Rust versions 1.91.0 and 1.92.0 have been released by SUSE Product Security Team. These updates address unspecified security issues in these Rust versions. No detailed vulnerability or exploit information is provided in the available data.
A security update for ffmpeg-4 addresses an integer overflow vulnerability in the yuv2ya16_X_c_template() function within the swscale/output component. This flaw is tracked as CVE-2025-63757 and has been fixed by the SUSE Product Security Team. The vulnerability is considered high severity due to the potential risks associated with integer overflows. No specific affected versions are provided in the available data.
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.
Security Fix(es):
* postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.
Security Fix(es):
* poppler: Out-of-Bounds Read in Poppler (CVE-2025-32365)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
An update for Red Hat Build of Apache Camel 4.10 for Quarkus 3.20 update is now available (RHBQ 3.20.4.SP1).
The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products:
* lz4-java: lz4-java: Information Disclosure via Insufficient Output
Buffer Clearing (CVE-2025-66566)
A critical security update for Docker addresses multiple issues including a critical vulnerability identified as CVE-2025-54388. The update covers Docker Engine versions 28.3.3-ce through 28.5.1-ce and docker-buildx versions 0.26.0 through 0.29.0. It also fixes a nil pointer panic in the 'docker push' command and includes changes specific to SUSE Linux Enterprise systems. Users are advised to set DOCKER_BUILDKIT=0 to avoid automatic use of docker-buildx due to secret injection compatibility issues.
This security update for go-sendxmpp addresses multiple issues including vulnerabilities in the embedded golang.org/x/net library that could lead to performance degradation and excessive memory consumption when parsing specially crafted HTML inputs. The update also includes various feature additions and improvements across multiple versions, enhancing authentication mechanisms, error handling, and protocol support.
Multiple security vulnerabilities were identified and fixed in GIMP version 3.0.6, including heap-based buffer overflows, out-of-bounds writes, integer overflows, and stack-based buffer overflows in various file parsing components. These issues could potentially allow remote code execution. The update addresses these vulnerabilities and includes various core and GUI improvements. The vulnerabilities were reported by the Zero Day Initiative and have been proactively mitigated by developers. A security update is available and should be applied to affected systems.
This security update for cpp-httplib addresses critical vulnerabilities involving IP spoofing, log poisoning, and authorization bypass. These issues arise from the acceptance and parsing of client-controlled injected HTTP headers, including unconditional acceptance of 'X-Forwarded-For' and 'X-Real-IP' headers. The vulnerabilities could allow attackers to spoof client IPs and poison access and error logs, potentially bypassing authorization mechanisms.
This security update for Erlang addresses multiple vulnerabilities in the SSH component related to resource consumption caused by improper handling of data from unauthenticated and authenticated SFTP users. The issues include overly tolerant processing of key exchange messages and unverified paths and file handles from SFTP users, which may lead to excessive resource consumption.
This security update provides a functional equivalent of RHSA-2026:0693.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:0693.
A stack overflow vulnerability (CVE-2025-46397) exists in the xfig component of the transfig utility, which translates FIG or PIC figures into LaTeX graphics languages. This vulnerability allows possible code execution via local input manipulation. Red Hat has issued a security update for transfig in Red Hat Enterprise Linux 8 to address this issue. The security impact is rated as moderate. No known exploits are reported in the wild at this time.
This security update for wget2 addresses multiple vulnerabilities and bugs, including fixes for a file overwrite issue with metalink (CVE-2025-69194) and a remote buffer overflow in get_local_filename_real() (CVE-2025-69195). The update also resolves regressions, improves compatibility and messaging, and fixes several buffer overflow and file handling issues. These fixes are included in wget2 release 2.2.1 and 2.2.0.
This security update for curl addresses multiple vulnerabilities including broken TLS options for threaded LDAPS, bearer token leakage on cross-protocol redirects, libssh global knownhost override, libssh key passphrase bypass without agent set, and an OpenSSL partial chain store policy bypass. These issues collectively pose a medium severity risk and have been fixed in this update.