openSUSE: cheat Important Memory Consumption Fix CVE-2025-21613 2025:0482-1
opensuse
December 24, 2025
An update that fixes 8 vulnerabilities is now available.
Description
This update for cheat fixes the following issues:
Security:
* CVE-2025-47913: Fix client process termination (boo#1253593)
* CVE-2025-58181: Fix potential unbounded memory consumption
(boo#1253922)
* CVE-2025-47914: Fix panic due to an out of bounds read (boo#1254051)
* Replace golang.org/x/crypto=golang.org/x/crypto@v0.45.0
* Replace golang.org/x/net=golang.org/x/net@v0.47.0
* Replace golang.org/x/sys=golang.org/x/sys@v0.38.0
- Packaging improvements:
* Service go_modules replace dependencies with CVEs
* Replace github.com/cloudflare/circl=github.com/cloudflare/circl@v1.6.1
Fix GO-2025-3754 GHSA-2x5j-vhc8-9cwm
* Replace golang.org/x/net=golang.org/x/net@v0.36.0 Fixes GO-2025-3503
CVE-2025-22870
* Replace golang.org/x/crypto=golang.org/x/crypto@v0.35.0 Fixes
GO-2023-2402 CVE-2023-48795 GHSA-45x7-px36-x8w8 Fixes GO-2025-3487
CVE-2025-22869
* Replace
...
Read the Full Advisory
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Backports SLE-15-SP7:
zypper in -t patch openSUSE-2025-482=1
Package List
- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):
cheat-4.4.2-bp157.2.3.1
References
https://www.suse.com/security/cve/CVE-2023-48795.html
https://www.suse.com/security/cve/CVE-2025-21613.html
https://www.suse.com/security/cve/CVE-2025-21614.html
https://www.suse.com/security/cve/CVE-2025-22869.html
https://www.suse.com/security/cve/CVE-2025-22870.html
https://www.suse.com/security/cve/CVE-2025-47913.html
https://www.suse.com/security/cve/CVE-2025-47914.html
https://www.suse.com/security/cve/CVE-2025-58181.html
https://bugzilla.suse.com/1247629
https://bugzilla.suse.com/1253593
https://bugzilla.suse.com/1253922
https://bugzilla.suse.com/1254051
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2025:0482-1
Rating: important
Affected Products:
openSUSE Backports SLE-15-SP7
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!