SUSE Product Security Team vulnerabilities and threats

This security update for gdk-pixbuf addresses two high severity vulnerabilities: a heap buffer overflow in the JPEG image loading function and an uninitialized memory issue that could lead to leaking arbitrary memory contents. Both vulnerabilities are fixed in the update. No specific affected versions beyond the provided package versions are detailed.

This update for rabbitmq-server addresses multiple improvements and breaking changes in version 4.1.5, including enhanced AMQP 1.0 support, removal of classic queue mirroring, and changes to frame size negotiation. It is identified as a security update by SUSE Product Security Team under CVE-2025-30219. No specific vulnerability details or exploit information are provided. The update includes performance enhancements and configuration changes that may affect client compatibility.

This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF file that exercises the overlay image item path (bsc#1255735).

A low severity vulnerability (CVE-2025-11961) in libpcap involves missing validation of a MAC-48 address string in the pcap_ether_aton() function, which can cause out-of-bounds read and write operations. The vulnerability affects specific SUSE libpcap packages version 1.10.5-160000.4.1 on aarch64 and ppc64le architectures. No patch or remediation details are provided in the available data.

A security update for python-weasyprint addresses a server-side request forgery (SSRF) vulnerability identified as CVE-2025-68616. The issue was present in the default fetcher component of python-weasyprint. This vulnerability could allow an attacker to induce the server to make unintended requests. The update fixes this SSRF vulnerability, mitigating the associated risk.

Security updates for Rust versions 1.91.0 and 1.92.0 have been released by SUSE Product Security Team. These updates address unspecified security issues in these Rust versions. No detailed vulnerability or exploit information is provided in the available data.

A security update for ffmpeg-4 addresses an integer overflow vulnerability in the yuv2ya16_X_c_template() function within the swscale/output component. This flaw is tracked as CVE-2025-63757 and has been fixed by the SUSE Product Security Team. The vulnerability is considered high severity due to the potential risks associated with integer overflows. No specific affected versions are provided in the available data.

A critical security update for Docker addresses multiple issues including a critical vulnerability identified as CVE-2025-54388. The update covers Docker Engine versions 28.3.3-ce through 28.5.1-ce and docker-buildx versions 0.26.0 through 0.29.0. It also fixes a nil pointer panic in the 'docker push' command and includes changes specific to SUSE Linux Enterprise systems. Users are advised to set DOCKER_BUILDKIT=0 to avoid automatic use of docker-buildx due to secret injection compatibility issues.

This security update for go-sendxmpp addresses multiple issues including vulnerabilities in the embedded golang.org/x/net library that could lead to performance degradation and excessive memory consumption when parsing specially crafted HTML inputs. The update also includes various feature additions and improvements across multiple versions, enhancing authentication mechanisms, error handling, and protocol support.

This security update for cpp-httplib addresses critical vulnerabilities involving IP spoofing, log poisoning, and authorization bypass. These issues arise from the acceptance and parsing of client-controlled injected HTTP headers, including unconditional acceptance of 'X-Forwarded-For' and 'X-Real-IP' headers. The vulnerabilities could allow attackers to spoof client IPs and poison access and error logs, potentially bypassing authorization mechanisms.

This security update for Erlang addresses multiple vulnerabilities in the SSH component related to resource consumption caused by improper handling of data from unauthenticated and authenticated SFTP users. The issues include overly tolerant processing of key exchange messages and unverified paths and file handles from SFTP users, which may lead to excessive resource consumption.

This security update for wget2 addresses multiple vulnerabilities and bugs, including fixes for a file overwrite issue with metalink (CVE-2025-69194) and a remote buffer overflow in get_local_filename_real() (CVE-2025-69195). The update also resolves regressions, improves compatibility and messaging, and fixes several buffer overflow and file handling issues. These fixes are included in wget2 release 2.2.1 and 2.2.0.

This security update for curl addresses multiple vulnerabilities including broken TLS options for threaded LDAPS, bearer token leakage on cross-protocol redirects, libssh global knownhost override, libssh key passphrase bypass without agent set, and an OpenSSL partial chain store policy bypass. These issues collectively pose a medium severity risk and have been fixed in this update.

This security update for Squid addresses two vulnerabilities: CVE-2025-62168, which involves failure to redact HTTP authentication credentials in error handling leading to credential disclosure, and CVE-2025-59362, a stack-based buffer overflow in the SNMP message processing component. Both issues could lead to sensitive information exposure or potential memory corruption. The vulnerabilities are rated as high severity. No specific affected versions or patch details are provided in the input data.

This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries (bsc#1252399) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249011)

This security update for libmicrohttpd addresses two vulnerabilities: a heap-based buffer overflow (CVE-2025-62689) and a NULL pointer dereference (CVE-2025-59777). Both vulnerabilities can be triggered by specially crafted packets and may lead to application crashes or memory corruption. The update fixes these issues to improve the security of libmicrohttpd. No specific patch details or affected version ranges are provided.

Multiple heap buffer over-read and out-of-bounds read vulnerabilities exist in libpng16, affecting processing of malformed or specially crafted PNG images. These vulnerabilities can cause memory corruption or crashes when handling certain palette indices, 8-bit input with specific conversion enabled, palette images with alpha optimization, 16-bit interlaced PNGs with 8-bit output, and palette PNGs with partial transparency and gamma correction. The issues are rated high severity. No explicit patch or remediation details are provided.

This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: quadratic complexity of string concatenation operations used by the `HTTPHeaders.add` method can lead o DoS when processing a maliciously crafted HTTP request (bsc#1254905). - CVE-2025-67726: quadratic complexity algorithm used in the `_parseparam` function of `httputil.py` can lead to DoS when processing maliciously crafted parameters in a `Content-Disposition` header (bsc#1254904).

This security update for the matio library addresses multiple issues including a heap-based buffer overflow and an array index out of bounds error when printing UTF-8 character data. The update to version 1.5.29 fixes these vulnerabilities along with other bugs related to access violations in Mat_VarPrint. The update also includes fixes from version 1.5.28 addressing bugs in reading and writing MAT files and other improvements.