Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

openSUSE: Addressing Moderate Data Exposure in python-cbor2 CVE-2025-68131

opensuse
Calendar Grey January 12, 2026
Dist Opensuse Esm H88
Update released for python-cbor2 in openSUSE addressing moderate security issues, including data exposure risks.
An update that fixes one vulnerability is now available.

Description

This update for python-cbor2 fixes the following issues:

- CVE-2025-68131: Fixed that a attacker-controlled message can read data

from previously decoded messages if the decoder is reused across trust

boundaries (boo#1255783)

Topics%20covered

Topics Covered

security advisory moderate data exposure OpenSUSE python-cbor2 cve-2025-68131

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2026-9=1

Package List

- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):

python311-cbor2-5.5.1-bp157.2.3.1

References

https://www.suse.com/security/cve/CVE-2025-68131.html

https://bugzilla.suse.com/1255783

Announcement ID: openSUSE-SU-2026:0009-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP7

Topics%20covered

Topics Covered

security advisory moderate data exposure OpenSUSE python-cbor2 cve-2025-68131

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.