Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 9 articles for you...
203
security advisorydenial of servicebuffer overflowMageia Imager Critical Heap Buffer Overflow Denial Of Service 2026-0284
Security update. Publication date: 20 Jul 2026 URL: https://advisories.mageia.org/MGASA-2026-0284.html Type: security Affected Mageia releases: 10, 9 CVE: CVE-2024-53901, CVE-2026-13705, CVE-2026-13708, CVE-2026-14454 Description: The updated package fixes security vulnerabilities: The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image. (CVE-2024-53901) Imager versions before 1.032 for Perl have a heap out-of-bounds read in the bundled Imager::File::SGI reader via a 16-bit RLE literal run in read_rgb_16_rle. (CVE-2026-13705) Imager::File::JPEG versions before 1.003 for Perl leak heap memory when reading a JPEG with repeated APP13 markers in i_readjpeg_wiol. (CVE-2026-13708) Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. (CVE-2026-14454) References: - https://bugs.mageia.org/show_bug.cgi?id=35848 - https://lists.fedoraproject.org/archives/list/
Jul 20, 2026
•Critical
Mageia
89
security advisoryfedoraimportantFedora 43 perl-HTML-Gumbo Important Memory Disclosure Vuln 2026-a457bf78b4
This package provides the Perl module HTML::Gumbo. Versions before 0.19 disclose heap memory via type confusion. Support for the element was added to libgumbo 0.10.0 in 2015, but the walk_tree function in lib/HTML/Gumbo.xs was not updated to support it. The element was treated as a text-node, where strlen() over-reads the heap block that the. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-a457bf78b4 2026-07-11 00:52:57.708567+00:00 -------------------------------------------------------------------------------- Name : perl-HTML-Gumbo Product : Fedora 43 Version : 0.19 Release : 1.fc43 URL : https://metacpan.org/dist/HTML-Gumbo Summary : HTML5 parser based on gumbo C library Description : Gumbo is an implementation of the HTML5 parsing algorithm implemented as a pure C99 library with no outside dependencies. -------------------------------------------------------------------------------- Update Information: This package provides the Perl module HTML::Gumbo. Versions before 0.19 disclose heap memory via type confusion. Support for the element was added to libgumbo 0.10.0 in 2015, but the walk_tree function in lib/HTML/Gumbo.xs was not updated to support it. The element was treated as a text-node, where strlen() over-reads the heap block that the pointer addresses. -------------------------------------------------------------------------------- ChangeLog: * Sat May 30 2026 Emmanuel Seyman - 0.19-1 - Update to 0.19 - Update dependencies - Use /usr/bin/perl instead of %{__perl} -------------------------------------------------------------------------------- References: [ 1 ] Bug #2496536 - CVE-2025-15646 perl-HTML-Gumbo: HTML::Gumbo: Information disclosure through HTML template processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2496536 -------------------------------------------------------------------------------- This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a457bf78b4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 10, 2026
•Important
Fedora
100
security advisorySuSEimportantSUSE Perl-XML-LibXML Important Memory Error CVE-2026-8177
An update that solves one vulnerability can now be installed.. # Security update for perl-XML-LibXML Announcement ID: SUSE-SU-2026:2402-1 Release Date: 2026-06-15T17:04:02Z Rating: important References: * bsc#1264715 Cross-References: * CVE-2026-8177 CVSS scores: * CVE-2026-8177 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-8177 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for perl-XML-LibXML fixes the following issue * CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2402=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2402=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * perl-XML-LibXML-2.0019-6.8.1 * perl-XML-LibXML-debuginfo-2.0019-6.8.1 * perl-XML-LibXML-debugsource-2.0019-6.8.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * perl-XML-LibXML-2.0019-6.8.1 * perl-XML-LibXML-debuginfo-2.0019-6.8.1 * perl-XML-LibXML-debugsource-2.0019-6.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8177.html * https://bugzilla.suse.com/show_bug.cgi?id=1264715 .Critical security update for perl-XML-LibXML in SUSE to fix heap memory issue. Immediate action needed!. SUSE Security, XML Library Update, Perl Security Patch, Important Security Alert. . Severity: Important. LinuxSecurity.com Team
Jun 16, 2026
•Important
SuSE
100
security advisorySuSEimportantCritical Out-Of-Bounds Heap Memory Flaw in SUSE Perl XML LibXML Fixed
An update that solves one vulnerability can now be installed.. # Security update for perl-XML-LibXML Announcement ID: SUSE-SU-2026:2324-1 Release Date: 2026-06-09T14:33:45Z Rating: important References: * bsc#1264715 Cross-References: * CVE-2026-8177 CVSS scores: * CVE-2026-8177 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-8177 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for perl-XML-LibXML fixes the following issue * CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2324=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2324=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2324=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2324=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2324=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2324=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2324=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2324=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2324=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2324=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2324=1 ## Package List: * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 *Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * perl-XML-LibXML-debuginfo-2.0132-150000.3.8.1 * perl-XML-LibXML-debugsource-2.0132-150000.3.8.1 * perl-XML-LibXML-2.0132-150000.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8177.html * https://bugzilla.suse.com/show_bug.cgi?id=1264715 . Critical patch for SUSE fixing CVE-2026-8177 vulnerability in perl-XML-LibXML affectingmultiple releases.. SUSE perl-XML-LibXML patch CVE-2026-8177 heap memory. . Severity: Important. LinuxSecurity.com Team
Jun 09, 2026
•Important
SuSE
100
security advisorybuffer overflowSuSESUSE Openjpeg2 Important Heap Memory Issue Vuln 2026-21995-1
An update that solves one vulnerability can now be installed.. # Security update for openjpeg2 Announcement ID: SUSE-SU-2026:21995-1 Release Date: 2026-05-29T08:43:29Z Rating: important References: * bsc#1247650 Cross-References: * CVE-2025-54874 CVSS scores: * CVE-2025-54874 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54874 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54874 ( NVD ): 6.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-54874 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for openjpeg2 fixes the following issue * CVE-2025-54874: openjpeg: missing error check can lead to the use of an uninitialized pointer and cause an out-of- bounds heap memory write (bsc#1247650). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-823=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-823=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * openjpeg2-debuginfo-2.5.3-160000.4.1 * openjpeg2-devel-2.5.3-160000.4.1 * openjpeg2-debugsource-2.5.3-160000.4.1 * openjpeg2-2.5.3-160000.4.1 * libopenjp2-7-2.5.3-160000.4.1 * libopenjp2-7-debuginfo-2.5.3-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * openjpeg2-devel-doc-2.5.3-160000.4.1 * SUSE Linux Enterprise Server 16.0(x86_64) * libopenjp2-7-x86-64-v3-debuginfo-2.5.3-160000.4.1 * libopenjp2-7-x86-64-v3-2.5.3-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * openjpeg2-debuginfo-2.5.3-160000.4.1 * openjpeg2-devel-2.5.3-160000.4.1 * openjpeg2-debugsource-2.5.3-160000.4.1 * openjpeg2-2.5.3-160000.4.1 * libopenjp2-7-2.5.3-160000.4.1 * libopenjp2-7-debuginfo-2.5.3-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * openjpeg2-devel-doc-2.5.3-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libopenjp2-7-x86-64-v3-debuginfo-2.5.3-160000.4.1 * libopenjp2-7-x86-64-v3-2.5.3-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2025-54874.html * https://bugzilla.suse.com/show_bug.cgi?id=1247650 . Important security update for openjpeg2 in SUSE Linux addressing CVE-2025-54874, enhancing system protection.. openjpeg2 update SUSE security patch CVE-2025-54874. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2026
•Important
SuSE
202
security advisoryimportantOpenSUSEopenSUSE Leap 16.0 perl-XML-LibXML Major Heap Memory Update 2026-20908-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for perl-xml-libxml ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20908-1 Rating: important References: * bsc#1264715 Cross-References: * CVE-2026-8177 CVSS scores: * CVE-2026-8177 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-893=1 Package List: - openSUSE Leap 16.0: perl-XML-LibXML-2.0210-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-8177.html . Critical update for openSUSE Leap 16.0 addressing CVE-2026-8177 impacting perl-XML-LibXML.. openSUSE security patch perl XML-LibXML CVE-2026-8177. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2026
•Important
OpenSUSE
100
security advisorymoderateSuSESUSE Linux Micro 6.2 sqlite3 Moderate Memory Leak of Integers 2026-21095-1
An update that solves two vulnerabilities and has two fixes can now be installed.. # Security update for sqlite3 Announcement ID: SUSE-SU-2026:21095-1 Release Date: 2026-04-10T19:09:48Z Rating: moderate References: * bsc#1248586 * bsc#1252217 * bsc#1254670 * bsc#1259619 Cross-References: * CVE-2025-70873 * CVE-2025-7709 CVSS scores: * CVE-2025-70873 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-70873 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2025-70873 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-7709 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-7709 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2025-7709 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities and has two fixes can now be installed. ## Description: This update for sqlite3 fixes the following issues: Update sqlite3 to version 3.51.3: Security issues: * CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). * CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). Non security issue: * sqlite3 won't build when using --with icu (bsc#1248586). Changelog: Update to version 3.51.3: * Fix the WAL-reset database corruption bug: https://sqlite.org/wal.html#walresetbug * Other minor bug fixes. Update to version 3.51.2: * Fix an obscure deadlock in the new broken-posix-lock detection logic. * Fix multiple problems in the EXISTS-to-JOIN optimization. Update to version 3.51.1: * Fix incorrect results from nested EXISTSqueries caused by the optimization in item 6b in the 3.51.0 release. * Fix a latent bug in fts5vocab virtual table, exposed by new optimizations in the 3.51.0 release Update to version 3.51.0: * New macros in sqlite3.h: \- SQLITE_SCM_BRANCH -> the name of the branch from which the source code is taken. \- SQLITE_SCM_TAGS -> space-separated list of tags on the source code check-in. \- SQLITE_SCM_DATETIME -> ISO-8601 date and time of the source * Two new JSON functions, jsonb_each() and jsonb_tree() work the same as the existing json_each() and json_tree() functions except that they return JSONB for the "value" column when the "type" is 'array' or 'object'. * The carray and percentile extensions are now built into the amalgamation, though they are disabled by default and must be activated at compile-time using the -DSQLITE_ENABLE_CARRAY and/or -DSQLITE_ENABLE_PERCENTILE options, respectively. * Enhancements to TCL Interface: \- Add the -asdict flag to the eval command to have it set the row data as a dict instead of an array. \- User-defined functions may now break to return an SQL NULL. * CLI enhancements: \- Increase the precision of ".timer" to microseconds. \- Enhance the "box" and "column" formatting modes to deal with double-wide characters. \- The ".imposter" command provides read-only imposter tables that work with VACUUM and do not require the --unsafe-testing option. \- Add the --ifexists option to the CLI command-line option and to the .open command. \- Limit columns widths set by the ".width" command to 30,000 or less, as there is not good reason to have wider columns, but supporting wider columns provides opportunity to malefactors. * Performance enhancements: \- Use fewer CPU cycles to commit a read transaction. \- Early detection of joins that return no rows due to one or more of the tables containing no rows. \- Avoid evaluation of scalar subqueries if the result of the subquery does not change the result of the overall expression. \- Faster window function queries when using "BETWEEN:x FOLLOWING AND :y FOLLOWING" with a large :y. * Add the PRAGMA wal_checkpoint=NOOP; command and the SQLITE_CHECKPOINT_NOOP argument for sqlite3_wal_checkpoint_v2(). * Add the sqlite3_set_errmsg() API for use by extensions. * Add the sqlite3_db_status64() API, which works just like the existing sqlite3_db_status() API except that it returns 64-bit results. * Add the SQLITE_DBSTATUS_TEMPBUF_SPILL option to the sqlite3_db_status() and sqlite3_db_status64() interfaces. * In the session extension add the sqlite3changeset_apply_v3() interface. * For the built-in printf() and the format() SQL function, omit the leading '-' from negative floating point numbers if the '+' flag is omitted and the "#" flag is present and all displayed digits are '0'. Use '%#f' or similar to avoid outputs like '-0.00' and instead show just '0.00'. * Improved error messages generated by FTS5. * Enforce STRICT typing on computed columns. * Improved support for VxWorks * JavaScript/WASM now supports 64-bit WASM. The canonical builds continue to be 32-bit but creating one's own 64-bit build is now as simple as running "make". * Improved resistance to database corruption caused by an application breaking Posix advisory locks using close(). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-529=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * sqlite3-debugsource-3.51.3-160000.1.1 * sqlite3-debuginfo-3.51.3-160000.1.1 * libsqlite3-0-debuginfo-3.51.3-160000.1.1 * libsqlite3-0-3.51.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-70873.html * https://www.suse.com/security/cve/CVE-2025-7709.html * https://bugzilla.suse.com/show_bug.cgi?id=1248586 * https://bugzilla.suse.com/show_bug.cgi?id=1252217 *https://bugzilla.suse.com/show_bug.cgi?id=1254670 * https://bugzilla.suse.com/show_bug.cgi?id=1259619 . Update for sqlite3 addresses two moderate issues with integer overflow and memory disclosure in SUSE Linux Micro.. SQLite Security Update, Moderate Vulnerabilities, SUSE Linux Micro, sqlite3 Fixed Issues, Integer Overflow Exploit. . LinuxSecurity.com Team
Apr 16, 2026
SuSE
100
security advisorymoderateSuSESUSE Linux Enterprise openssl Safety Warning Notifier SUSE-SU-2026-2053-1
An update that solves two vulnerabilities can now be installed.. # Security update for sqlite3 Announcement ID: SUSE-SU-2026:1065-1 Release Date: 2026-03-26T10:38:35Z Rating: moderate References: * bsc#1254670 * bsc#1259619 Cross-References: * CVE-2025-70873 * CVE-2025-7709 CVSS scores: * CVE-2025-70873 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-70873 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2025-70873 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-7709 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-7709 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2025-7709 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for sqlite3 fixes the following issues: Update sqlite3 to 3.51.3: * CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). * CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). Changelog: * Fix the WAL-reset database corruption bug: https://sqlite.org/wal.html#walresetbug ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2026-1065=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1065=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1065=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1065=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1065=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-1065=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1065=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-1065=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2026-1065=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * sqlite3-tcl-debuginfo-3.51.3-150000.3.39.1 * sqlite3-devel-3.51.3-150000.3.39.1 * openSUSE Leap 15.6 (x86_64) * libsqlite3-0-32bit-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-32bit-3.51.3-150000.3.39.1 * openSUSE Leap 15.6 (noarch) * sqlite3-doc-3.51.3-150000.3.39.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * SUSELinux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * sqlite3-tcl-debuginfo-3.51.3-150000.3.39.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * sqlite3-tcl-debuginfo-3.51.3-150000.3.39.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * sqlite3-tcl-debuginfo-3.51.3-150000.3.39.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * sqlite3-debugsource-3.51.3-150000.3.39.1 * sqlite3-3.51.3-150000.3.39.1 * sqlite3-tcl-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debuginfo-3.51.3-150000.3.39.1 * sqlite3-tcl-debuginfo-3.51.3-150000.3.39.1 * sqlite3-devel-3.51.3-150000.3.39.1 * Basesystem Module 15-SP7 (x86_64) * libsqlite3-0-32bit-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-32bit-3.51.3-150000.3.39.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 *sqlite3-debugsource-3.51.3-150000.3.39.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * sqlite3-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-debuginfo-3.51.3-150000.3.39.1 * libsqlite3-0-3.51.3-150000.3.39.1 * sqlite3-debugsource-3.51.3-150000.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-70873.html * https://www.suse.com/security/cve/CVE-2025-7709.html * https://bugzilla.suse.com/show_bug.cgi?id=1254670 * https://bugzilla.suse.com/show_bug.cgi?id=1259619 . SUSE sqlite3 Moderate Patch notification for integer overflow and memory issues, ensuring secure system integrity.. sqlite3 security update, SUSE patch, integer overflow risk, sqlite memory disclosure, SUSE Linux advisory. . LinuxSecurity.com Team
Mar 26, 2026
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!