Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
100
security advisorySuSEimportantSUSE libpng16 Important Heap Buffer Overflow Memory Leak Vuln 20530-1
An update that solves five vulnerabilities can now be installed.. # Security update for libpng16 Announcement ID: SUSE-SU-2026:20530-1 Release Date: 2026-02-26T11:25:49Z Rating: important References: * bsc#1256525 * bsc#1256526 * bsc#1257364 * bsc#1257365 * bsc#1258020 Cross-References: * CVE-2025-28162 * CVE-2025-28164 * CVE-2026-22695 * CVE-2026-22801 * CVE-2026-25646 CVSS scores: * CVE-2025-28162 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-28162 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2025-28162 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-28164 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-28164 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2025-28164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-22695 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-22695 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-22695 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-22695 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-22801 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-22801 ( SUSE ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-22801 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-22801 ( NVD ): 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-25646 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-25646 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-25646 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25646 ( NVD ): 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for libpng16 fixes the following issues: * CVE-2026-25646: Fixed a heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020). * CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364). * CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365). * CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525). * CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-411=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libpng16-16-debuginfo-1.6.43-slfo.1.1_3.1 * libpng16-16-1.6.43-slfo.1.1_3.1 * libpng16-debugsource-1.6.43-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-28162.html * https://www.suse.com/security/cve/CVE-2025-28164.html * https://www.suse.com/security/cve/CVE-2026-22695.html * https://www.suse.com/security/cve/CVE-2026-22801.html * https://www.suse.com/security/cve/CVE-2026-25646.html * https://bugzilla.suse.com/show_bug.cgi?id=1256525 * https://bugzilla.suse.com/show_bug.cgi?id=1256526 * https://bugzilla.suse.com/show_bug.cgi?id=1257364 * https://bugzilla.suse.com/show_bug.cgi?id=1257365 * https://bugzilla.suse.com/show_bug.cgi?id=1258020 . An important update for libpng16 addresses five vulnerabilities affecting SUSE. Ensure timely installation.. SUSE libpng16 update vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Mar 04, 2026
•Important
SuSE
202
security advisorymoderatebuffer overflowopenSUSE Leap 15.2: 2021:0136-1 Moderate: ImageMagick Issues
An update that fixes 35 vulnerabilities is now available. . openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0136-1 Rating: moderate References: #1179103 #1179202 #1179208 #1179212 #1179221 #1179223 #1179240 #1179244 #1179260 #1179268 #1179269 #1179276 #1179278 #1179281 #1179285 #1179311 #1179312 #1179313 #1179315 #1179317 #1179321 #1179322 #1179327 #1179333 #1179336 #1179338 #1179339 #1179343 #1179345 #1179346 #1179347 #1179361 #1179362 #1179397 #1179753 Cross-References: CVE-2020-19667 CVE-2020-25664 CVE-2020-25665 CVE-2020-25666 CVE-2020-25674 CVE-2020-25675 CVE-2020-25676 CVE-2020-27750 CVE-2020-27751 CVE-2020-27752 CVE-2020-27753 CVE-2020-27754 CVE-2020-27755 CVE-2020-27756 CVE-2020-27757 CVE-2020-27758 CVE-2020-27759 CVE-2020-27760 CVE-2020-27761 CVE-2020-27762 CVE-2020-27763 CVE-2020-27764 CVE-2020-27765 CVE-2020-27766 CVE-2020-27767 CVE-2020-27768 CVE-2020-27769 CVE-2020-27770 CVE-2020-27771 CVE-2020-27772 CVE-2020-27773 CVE-2020-27774 CVE-2020-27775 CVE-2020-27776 CVE-2020-29599 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes 35 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103). - CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202). - CVE-2020-25665: Fixed a heap-based bufferoverflow in WritePALMImage (bsc#1179208). - CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212). - CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223). - CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240). - CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244). - CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260). - CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269). - CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346). - CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397). - CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336). - CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345). - CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221). - CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268). - CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276). - CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313). - CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281). - CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315). - CVE-2020-27762: Fixed an outside the range of representablevalues of type 'unsigned char' (bsc#1179278). - CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312). - CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317). - CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311). - CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361). - CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322). - CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339). - CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321). - CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343). - CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327). - CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347). - CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285). - CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333). - CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338). - CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362). - CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaSTonline_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-136=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): ImageMagick-7.0.7.34-lp152.12.9.1 ImageMagick-config-7-SUSE-7.0.7.34-lp152.12.9.1 ImageMagick-config-7-upstream-7.0.7.34-lp152.12.9.1 ImageMagick-debuginfo-7.0.7.34-lp152.12.9.1 ImageMagick-debugsource-7.0.7.34-lp152.12.9.1 ImageMagick-devel-7.0.7.34-lp152.12.9.1 ImageMagick-extra-7.0.7.34-lp152.12.9.1 ImageMagick-extra-debuginfo-7.0.7.34-lp152.12.9.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp152.12.9.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp152.12.9.1 libMagick++-devel-7.0.7.34-lp152.12.9.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp152.12.9.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.9.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp152.12.9.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp152.12.9.1 perl-PerlMagick-7.0.7.34-lp152.12.9.1 perl-PerlMagick-debuginfo-7.0.7.34-lp152.12.9.1 - openSUSE Leap 15.2 (noarch): ImageMagick-doc-7.0.7.34-lp152.12.9.1 - openSUSE Leap 15.2 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp152.12.9.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp152.12.9.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp152.12.9.1 libMagick++-devel-32bit-7.0.7.34-lp152.12.9.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.9.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.9.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp152.12.9.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp152.12.9.1 References: https://www.suse.com/security/cve/CVE-2020-19667.html https://www.suse.com/security/cve/CVE-2020-25664.html https://www.suse.com/security/cve/CVE-2020-25665.html https://www.suse.com/security/cve/CVE-2020-25666.html https://www.suse.com/security/cve/CVE-2020-25674.html https://www.suse.com/security/cve/CVE-2020-25675.html https://www.suse.com/security/cve/CVE-2020-25676.html https://www.suse.com/security/cve/CVE-2020-27750.html https://www.suse.com/security/cve/CVE-2020-27751.html https://www.suse.com/security/cve/CVE-2020-27752.html https://www.suse.com/security/cve/CVE-2020-27753.html https://www.suse.com/security/cve/CVE-2020-27754.html https://www.suse.com/security/cve/CVE-2020-27755.html https://www.suse.com/security/cve/CVE-2020-27756.html https://www.suse.com/security/cve/CVE-2020-27757.html https://www.suse.com/security/cve/CVE-2020-27758.html https://www.suse.com/security/cve/CVE-2020-27759.html https://www.suse.com/security/cve/CVE-2020-27760.html https://www.suse.com/security/cve/CVE-2020-27761.html https://www.suse.com/security/cve/CVE-2020-27762.html https://www.suse.com/security/cve/CVE-2020-27763.html https://www.suse.com/security/cve/CVE-2020-27764.html https://www.suse.com/security/cve/CVE-2020-27765.html https://www.suse.com/security/cve/CVE-2020-27766.html https://www.suse.com/security/cve/CVE-2020-27767.html https://www.suse.com/security/cve/CVE-2020-27768.html https://www.suse.com/security/cve/CVE-2020-27769.html https://www.suse.com/security/cve/CVE-2020-27770.html https://www.suse.com/security/cve/CVE-2020-27771.html https://www.suse.com/security/cve/CVE-2020-27772.html https://www.suse.com/security/cve/CVE-2020-27773.html https://www.suse.com/security/cve/CVE-2020-27774.html https://www.suse.com/security/cve/CVE-2020-27775.html https://www.suse.com/security/cve/CVE-2020-27776.html https://www.suse.com/security/cve/CVE-2020-29599.html https://bugzilla.suse.com/1179103 https://bugzilla.suse.com/1179202 https://bugzilla.suse.com/1179208 https://bugzilla.suse.com/1179212 https://bugzilla.suse.com/1179221 https://bugzilla.suse.com/1179223 https://bugzilla.suse.com/1179240 https://bugzilla.suse.com/1179244 https://bugzilla.suse.com/1179260 https://bugzilla.suse.com/1179268 https://bugzilla.suse.com/1179269 https://bugzilla.suse.com/1179276 https://bugzilla.suse.com/1179278 https://bugzilla.suse.com/1179281 https://bugzilla.suse.com/1179285 https://bugzilla.suse.com/1179311 https://bugzilla.suse.com/1179312 https://bugzilla.suse.com/1179313 https://bugzilla.suse.com/1179315 https://bugzilla.suse.com/1179317 https://bugzilla.suse.com/1179321 https://bugzilla.suse.com/1179322 https://bugzilla.suse.com/1179327 https://bugzilla.suse.com/1179333 https://bugzilla.suse.com/1179336 https://bugzilla.suse.com/1179338 https://bugzilla.suse.com/1179339 https://bugzilla.suse.com/1179343 https://bugzilla.suse.com/1179345 https://bugzilla.suse.com/1179346 https://bugzilla.suse.com/1179347 https://bugzilla.suse.com/1179361 https://bugzilla.suse.com/1179362 https://bugzilla.suse.com/1179397 https://bugzilla.suse.com/1179753 . The recent ImageMagick upgrade for openSUSE resolves a variety of concerns, improving both performance and security by implementing crucial updates.. ImageMagick Fixes, openSUSE Security Updates, Buffer Overflow, Memory Leak, Application Security. . LinuxSecurity.com Team
Jan 22, 2021
OpenSUSE
202
security advisorykernel updatesecurity fixopenSUSE Leap 15.2: 2021:0089-1 Important: open-iscsi Security Update
An update that contains security fixes can now be installed. . openSUSE Security Update: Security update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0089-1 Rating: important References: #1179440 #1179908 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for open-iscsi fixes the following issues: - Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908, including: * uip: check for TCP urgent pointer past end of frame * uip: check for u8 overflow when processing TCP options * uip: check for header length underflow during checksum calculation * fwparam_ppc: Fix memory leak in fwparam_ppc.c * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c * sysfs: Verify parameter of sysfs_device_get() * fwparam_ppc: Fix NULL pointer dereference in find_devtree() * open-iscsi: Clean user_param list when process exit * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev() * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req() * open-iscsi: Fix invalid pointer deference in find_initiator() * iscsiuio: Fix invalid parameter when call fstat() * iscsi-iname: Verify open() return value before calling read() * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface - Updatged to latest upstream, including: * iscsiadm: Optimize the the verification of mode paramters * iscsid: Poll timeout value to 1 minute for iscsid * iscsiadm: fix host stats mode coredump * iscsid: fix logging level when starting and shutting down daemon * Updated iscsiadm man page. * Fix memory leak in sysfs_get_str * libopeniscsiusr: Compare withmax int instead of max long - Systemd unit files should not depend on network.target (bsc#1179440). - Updated to latest upstream, including async login ability: * Implement login "no_wait" for iscsiadm NODE mode * iscsiadm buffer overflow regression when discovering many targets at once * iscsid: Check Invalid Session id for stop connection * Add ability to attempt target logins asynchronously - %service_del_postun_without_restart is now available on SLE More accurately it's been introduced in SLE12-SP2+ and SLE15+ This update was imported from the SUSE:SLE-15-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-89=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): iscsiuio-0.7.8.6-lp152.18.6.1 iscsiuio-debuginfo-0.7.8.6-lp152.18.6.1 libopeniscsiusr0_2_0-2.1.3-lp152.18.6.1 libopeniscsiusr0_2_0-debuginfo-2.1.3-lp152.18.6.1 open-iscsi-2.1.3-lp152.18.6.1 open-iscsi-debuginfo-2.1.3-lp152.18.6.1 open-iscsi-debugsource-2.1.3-lp152.18.6.1 open-iscsi-devel-2.1.3-lp152.18.6.1 References: https://bugzilla.suse.com/1179440 https://bugzilla.suse.com/1179908 . Important openSUSE Security Patch for open-iscsi resolves several vulnerabilities including buffer overflows and connection handling errors.. openSUSE Update, Open-Iscsi Security, Kernel Patch, Memory Leak Fixes, TCP Issues. . Severity: Important. LinuxSecurity.com Team
Jan 16, 2021
•Important
OpenSUSE
200
security advisorymoderatekernel updateScientific Linux: 2009-10-22 Moderate Kernel Update Security Advisory
Moderate: kernel security and bug fix update. Date: Wed, 28 Oct 2009 11:40:32 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: kernel on SL4.x i386/x86_64 Comments: To: "
Oct 28, 2009
Scientific Linux
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!