An update that solves 2 vulnerabilities can now be installed.. # libsqlite3-0-3.49.1-3.1 on GA media Announcement ID: openSUSE-SU-2025:14991-1 Rating: moderate Cross-References: * CVE-2025-29087 * CVE-2025-29088 CVSS scores: * CVE-2025-29087 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2025-29087 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2025-29088 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-29088 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the libsqlite3-0-3.49.1-3.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * libsqlite3-0 3.49.1-3.1 * libsqlite3-0-32bit 3.49.1-3.1 * libsqlite3-0-x86-64-v3 3.49.1-3.1 * sqlite3 3.49.1-3.1 * sqlite3-devel 3.49.1-3.1 * sqlite3-doc 3.49.1-3.1 * sqlite3-tcl 3.49.1-3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-29087.html * https://www.suse.com/security/cve/CVE-2025-29088.html . Fedora Rawhide has introduced libsqlite3-0-3.49.2-5.1, addressing various critical vulnerabilities. Upgrade today for enhanced protection.. openSUSE libsqlite3 moderate updates fixes. . LinuxSecurity.com Team
The container bci/python was updated. The following patches have been included in this update:. SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2022:2360-1 Container Tags : bci/python:3 , bci/python:3.9 , bci/python:3.9-18.124 Container Release : 18.124 Severity : important Type : security References : 1189802 1195773 1201680 1201783 1203018 CVE-2021-36690 CVE-2021-46828 CVE-2022-31252 CVE-2022-35737 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:3304-1 Released: Mon Sep 19 11:43:25 2022 Summary: Recommended update for libassuan Type: recommended Severity: moderate References: This update for libassuan fixes the following issues: - Add a timeout for writing to a SOCKS5 proxy - Add workaround for a problem with LD_LIBRARY_PATH on newer systems - Fix issue in the logging code - Fix some build trivialities - Upgrade autoconf ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3305-1 Released: Mon Sep 19 11:45:57 2022 Summary: Security update for libtirpc Type: security Severity: important References: 1201680,CVE-2021-46828 This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3307-1 Released: Mon Sep 19 13:26:51 2022 Summary: Security update for sqlite3 Type: security Severity: moderate References: 1189802,1195773,1201783,CVE-2021-36690,CVE-2022-35737 This update for sqlite3 fixes the following issues: - CVE-2022-35737: Fixed an array-bounds overflow ifbillions of bytes are used in a string argument to a C API (bnc#1201783). - CVE-2021-36690: Fixed an issue with the SQLite Expert extension when a column has no collating sequence (bsc#1189802). - Package the Tcl bindings here again so that we only ship one copy of SQLite (bsc#1195773). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3394-1 Released: Mon Sep 26 16:05:19 2022 Summary: Security update for permissions Type: security Severity: moderate References: 1203018,CVE-2022-31252 This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018). The following package changes have been done: - libassuan0-2.5.5-150000.4.3.1 updated - libsqlite3-0-3.39.3-150000.3.17.1 updated - libtirpc-netconfig-1.2.6-150300.3.14.1 updated - libtirpc3-1.2.6-150300.3.14.1 updated - permissions-20181225-150200.23.15.1 updated - container:sles15-image-15.0.0-17.20.44 updated . SUSE Container Upgrade for bci/python introduces critical security enhancements addressing denial of service vulnerabilities and permission-related challenges.. bci/python, security advisory, SUSE Container Update, denial of service , permissions fixes. . Severity: Important. LinuxSecurity.com Team
- Update the libsqlite3-sys crate to version 0.23.2. - Update the rusqlite crate to version 0.26.3. This update also contains a fix for RUSTSEC-2021-0128.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-f454d8494c 2021-12-18 01:21:16.715033 --------------------------------------------------------------------------------Name : rust-rusqlite Product : Fedora 35 Version : 0.26.3 Release : 1.fc35 URL : Summary : Ergonomic wrapper for SQLite Description : Ergonomic wrapper for SQLite. --------------------------------------------------------------------------------Update Information: - Update the libsqlite3-sys crate to version 0.23.2. - Update the rusqlite crate to version 0.26.3. This update also contains a fix for RUSTSEC-2021-0128. --------------------------------------------------------------------------------ChangeLog: * Thu Dec 9 2021 Fabio Valentini 0.26.3-1 - Update to version 0.26.3; Fixes RHBZ#2030136 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-f454d8494c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.