Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 76 articles for you...
203
security advisorycriticalsecurity fixMageia 9 Suricata Critical Performance Security Issues MGASA-2026-0181
Security update. Publication date: 09 Jun 2026 URL: https://advisories.mageia.org/MGASA-2026-0181.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-45797, CVE-2024-47187, CVE-2024-47188, CVE-2024-47522, CVE-2024-45795, CVE-2024-45796, CVE-2024-55605, CVE-2024-55626, CVE-2024-55627, CVE-2024-55628, CVE-2024-55629, CVE-2025-29916, CVE-2025-29917, CVE-2025-29918 Description: Various security, performance, accuracy, and stability issues have been fixed, plus we have moved to a supported version. References: - https://bugs.mageia.org/show_bug.cgi?id=33666 - https://lists.fedoraproject.org/archives/list/
Jun 09, 2026
•Critical
Mageia
89
security advisoryfedorasoftware updateFedora 44 python-tomli Update 2.4.1 Performance Issue Fix 2026-42d4c822e4
Update to 2.4.1. Limit number of parts of a TOML key to address quadratic time complexity. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-42d4c822e4 2026-04-25 01:21:36.172373+00:00 -------------------------------------------------------------------------------- Name : python-tomli Product : Fedora 44 Version : 2.4.1 Release : 1.fc44 URL : https://pypi.org/project/tomli/ Summary : A little TOML parser for Python Description : Tomli is a Python library for parsing TOML. Tomli is fully compatible with TOML v1.0.0. -------------------------------------------------------------------------------- Update Information: Update to 2.4.1. Limit number of parts of a TOML key to address quadratic time complexity -------------------------------------------------------------------------------- ChangeLog: * Thu Mar 26 2026 Maxwell G - 2.4.1-1 - Update to 2.4.1. Fixes rhbz#2451567. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2451567 - python-tomli-2.4.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2451567 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-42d4c822e4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Apr 25, 2026
•Informational
Fedora
202
security advisoryimportantperformance issueopenSUSE 15.6 nodejs22 Important Security Update 2026-1509-1
An update that solves seven vulnerabilities can now be installed.. # Security update for nodejs22 Announcement ID: SUSE-SU-2026:1509-1 Release Date: 2026-04-21T06:27:54Z Rating: important References: * bsc#1256576 * bsc#1260455 * bsc#1260462 * bsc#1260463 * bsc#1260480 * bsc#1260482 * bsc#1260494 Cross-References: * CVE-2026-21637 * CVE-2026-21710 * CVE-2026-21713 * CVE-2026-21714 * CVE-2026-21715 * CVE-2026-21716 * CVE-2026-21717 CVSS scores: * CVE-2026-21637 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-21637 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-21637 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21637 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21710 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-21710 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21710 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21713 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-21713 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-21713 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-21714 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-21714 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21714 ( NVD ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-21715 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-21715 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-21715 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-21716 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-21716 ( SUSE ): 4.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-21716 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-21717 ( SUSE ): 7.2 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-21717 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-21717 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves seven vulnerabilities can now be installed. ## Description: This update for nodejs22 fixes the following issues: Update to version 22.22.2. * CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). * CVE-2026-21716: incomplete fix for CVE-2024-36137 allows promise-based FileHandle methods to be used to modify file permissions and ownership on already-open file descriptors (bsc#1260462). * CVE-2026-21715: flaw in the Permission Model filesystem enforcement allows for file existence disclosure and filesystem path enumeration via `fs.realpathSync.native()` (bsc#1260482). * CVE-2026-21714: memory leak in Node.js HTTP/2 server allows for resource exhaustion via `WINDOW_UPDATE` frames sent on stream 0 (bsc#1260480). * CVE-2026-21713: timing side-channel due to flaw in Node.js HMAC verification allows for discovery of HMAC values and potential MAC forgery (bsc#1260463). * CVE-2026-21710: uncaught `TypeError` when handling HTTP requests allows for a process crash via requests with a header named `__proto__` when the application accesses `req.headersDistinct` (bsc#1260455). * CVE-2026-21637: flaw in TLS error handling allows for resource exhaustion and crash when `pskCallback` or `ALPNCallback` are in use (bsc#1256576). ## Patch Instructions: To installthis SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1509=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1509=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1509=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * npm22-22.22.2-150600.13.15.1 * nodejs22-debugsource-22.22.2-150600.13.15.1 * nodejs22-22.22.2-150600.13.15.1 * corepack22-22.22.2-150600.13.15.1 * nodejs22-devel-22.22.2-150600.13.15.1 * nodejs22-debuginfo-22.22.2-150600.13.15.1 * openSUSE Leap 15.6 (noarch) * nodejs22-docs-22.22.2-150600.13.15.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * npm22-22.22.2-150600.13.15.1 * nodejs22-debugsource-22.22.2-150600.13.15.1 * nodejs22-22.22.2-150600.13.15.1 * nodejs22-devel-22.22.2-150600.13.15.1 * nodejs22-debuginfo-22.22.2-150600.13.15.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * nodejs22-docs-22.22.2-150600.13.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * npm22-22.22.2-150600.13.15.1 * nodejs22-debugsource-22.22.2-150600.13.15.1 * nodejs22-22.22.2-150600.13.15.1 * nodejs22-devel-22.22.2-150600.13.15.1 * nodejs22-debuginfo-22.22.2-150600.13.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * nodejs22-docs-22.22.2-150600.13.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-21637.html * https://www.suse.com/security/cve/CVE-2026-21710.html * https://www.suse.com/security/cve/CVE-2026-21713.html * https://www.suse.com/security/cve/CVE-2026-21714.html * https://www.suse.com/security/cve/CVE-2026-21715.html *https://www.suse.com/security/cve/CVE-2026-21716.html * https://www.suse.com/security/cve/CVE-2026-21717.html * https://bugzilla.suse.com/show_bug.cgi?id=1256576 * https://bugzilla.suse.com/show_bug.cgi?id=1260455 * https://bugzilla.suse.com/show_bug.cgi?id=1260462 * https://bugzilla.suse.com/show_bug.cgi?id=1260463 * https://bugzilla.suse.com/show_bug.cgi?id=1260480 * https://bugzilla.suse.com/show_bug.cgi?id=1260482 * https://bugzilla.suse.com/show_bug.cgi?id=1260494 . Update for nodejs22 in openSUSE addresses seven critical security issues requiring immediate attention and fixes.. SUSE nodejs22 update important security patch vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Apr 21, 2026
•Important
OpenSUSE
100
security advisorySuSEweb applicationSUSE Nodejs20 Important Issues Update 2026-1371-1 CVE-2026-21637
An update that solves seven vulnerabilities can now be installed.. # Security update for nodejs20 Announcement ID: SUSE-SU-2026:1371-1 Release Date: 2026-04-15T14:46:55Z Rating: important References: * bsc#1256576 * bsc#1260455 * bsc#1260462 * bsc#1260463 * bsc#1260480 * bsc#1260482 * bsc#1260494 Cross-References: * CVE-2026-21637 * CVE-2026-21710 * CVE-2026-21713 * CVE-2026-21714 * CVE-2026-21715 * CVE-2026-21716 * CVE-2026-21717 CVSS scores: * CVE-2026-21637 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-21637 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-21637 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21637 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21710 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-21710 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21710 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21713 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-21713 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-21713 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-21714 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-21714 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21714 ( NVD ): 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-21715 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-21715 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-21715 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-21716 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-21716 ( SUSE ): 4.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-21716 ( NVD ): 3.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-21717 ( SUSE ): 7.2 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-21717 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-21717 ( NVD ): 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for nodejs20 fixes the following issues: Update to version 20.20.2. * CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). * CVE-2026-21716: incomplete fix for CVE-2024-36137 allows promise-based FileHandle methods to be used to modify file permissions and ownership on already-open file descriptors (bsc#1260462). * CVE-2026-21715: flaw in the Permission Model filesystem enforcement allows for file existence disclosure and filesystem path enumeration via `fs.realpathSync.native()` (bsc#1260482). * CVE-2026-21714: memory leak in Node.js HTTP/2 server allows for resource exhaustion via `WINDOW_UPDATE` frames sent on stream 0 (bsc#1260480). * CVE-2026-21713: timing side-channel due to flaw in Node.js HMAC verification allows for discovery of HMAC values and potential MAC forgery (bsc#1260463). * CVE-2026-21710: uncaught `TypeError` when handling HTTP requests allows for a process crash via requests with a header named `__proto__` when the application accesses `req.headersDistinct`(bsc#1260455). * CVE-2026-21637: flaw in TLS error handling allows for resource exhaustion and crash when `pskCallback` or `ALPNCallback` are in use (bsc#1256576). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-1371=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1371=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1371=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1371=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1371=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * nodejs20-debuginfo-20.20.2-150500.11.27.1 * nodejs20-devel-20.20.2-150500.11.27.1 * corepack20-20.20.2-150500.11.27.1 * nodejs20-20.20.2-150500.11.27.1 * nodejs20-debugsource-20.20.2-150500.11.27.1 * npm20-20.20.2-150500.11.27.1 * openSUSE Leap 15.5 (noarch) * nodejs20-docs-20.20.2-150500.11.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * nodejs20-debuginfo-20.20.2-150500.11.27.1 * nodejs20-devel-20.20.2-150500.11.27.1 * nodejs20-debugsource-20.20.2-150500.11.27.1 * npm20-20.20.2-150500.11.27.1 * nodejs20-20.20.2-150500.11.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * nodejs20-docs-20.20.2-150500.11.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * nodejs20-debuginfo-20.20.2-150500.11.27.1 * nodejs20-devel-20.20.2-150500.11.27.1 * nodejs20-debugsource-20.20.2-150500.11.27.1 *npm20-20.20.2-150500.11.27.1 * nodejs20-20.20.2-150500.11.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * nodejs20-docs-20.20.2-150500.11.27.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * nodejs20-debuginfo-20.20.2-150500.11.27.1 * nodejs20-devel-20.20.2-150500.11.27.1 * nodejs20-debugsource-20.20.2-150500.11.27.1 * npm20-20.20.2-150500.11.27.1 * nodejs20-20.20.2-150500.11.27.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * nodejs20-docs-20.20.2-150500.11.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * nodejs20-debuginfo-20.20.2-150500.11.27.1 * nodejs20-devel-20.20.2-150500.11.27.1 * nodejs20-debugsource-20.20.2-150500.11.27.1 * npm20-20.20.2-150500.11.27.1 * nodejs20-20.20.2-150500.11.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * nodejs20-docs-20.20.2-150500.11.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-21637.html * https://www.suse.com/security/cve/CVE-2026-21710.html * https://www.suse.com/security/cve/CVE-2026-21713.html * https://www.suse.com/security/cve/CVE-2026-21714.html * https://www.suse.com/security/cve/CVE-2026-21715.html * https://www.suse.com/security/cve/CVE-2026-21716.html * https://www.suse.com/security/cve/CVE-2026-21717.html * https://bugzilla.suse.com/show_bug.cgi?id=1256576 * https://bugzilla.suse.com/show_bug.cgi?id=1260455 * https://bugzilla.suse.com/show_bug.cgi?id=1260462 * https://bugzilla.suse.com/show_bug.cgi?id=1260463 * https://bugzilla.suse.com/show_bug.cgi?id=1260480 * https://bugzilla.suse.com/show_bug.cgi?id=1260482 * https://bugzilla.suse.com/show_bug.cgi?id=1260494 . This update for SUSE nodejs20 addresses seven important issues to enhance security and performance. Install recommended patches.. Nodejs20, SUSE, security audit, system updates. . Severity: Important. LinuxSecurity.com Team
Apr 15, 2026
•Important
SuSE
100
security advisorySuSElowSUSE: python36 Low Security Fix for Performance Issues 2025:4487-1
An update that solves two vulnerabilities can now be installed.. # Security update for python36 Announcement ID: SUSE-SU-2025:4487-1 Release Date: 2025-12-18T14:44:31Z Rating: low References: * bsc#1251305 * bsc#1252974 Cross-References: * CVE-2025-6075 * CVE-2025-8291 CVSS scores: * CVE-2025-6075 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-6075 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-6075 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-8291 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-8291 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-8291 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for python36 fixes the following issues: * CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). * CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSSExtended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4487=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python36-debugsource-3.6.15-94.1 * libpython3_6m1_0-debuginfo-3.6.15-94.1 * python36-debuginfo-3.6.15-94.1 * python36-3.6.15-94.1 * libpython3_6m1_0-3.6.15-94.1 * python36-devel-3.6.15-94.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-94.1 * libpython3_6m1_0-32bit-3.6.15-94.1 * python36-base-debuginfo-3.6.15-94.1 * python36-base-3.6.15-94.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6075.html * https://www.suse.com/security/cve/CVE-2025-8291.html * https://bugzilla.suse.com/show_bug.cgi?id=1251305 * https://bugzilla.suse.com/show_bug.cgi?id=1252974 . A low-severity security update for python36 on SUSE addresses two vulnerabilities affecting performance and ZIP file processing.. python36 update SUSE vulnerability performance. . Severity: Low. LinuxSecurity.com Team
Dec 18, 2025
•Low
SuSE
202
security advisorypythonlowopenSUSE Leap 15.6: python Low Threat Performance Issue Fix 2025:4389-1
An update that solves two vulnerabilities can now be installed.. # Security update for python Announcement ID: SUSE-SU-2025:4389-1 Release Date: 2025-12-12T13:49:32Z Rating: low References: * bsc#1251305 * bsc#1252974 Cross-References: * CVE-2025-6075 * CVE-2025-8291 CVSS scores: * CVE-2025-6075 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-6075 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-6075 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-8291 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-8291 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-8291 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP6 * SUSE Package Hub 15 15-SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for python fixes the following issues: * CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). * CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the`zipfile` module (bsc#1251305). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4389=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-4389=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-4389=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python-gdbm-2.7.18-150000.89.1 * python-base-2.7.18-150000.89.2 * python-xml-debuginfo-2.7.18-150000.89.2 * libpython2_7-1_0-2.7.18-150000.89.2 * python-tk-2.7.18-150000.89.1 * python-base-debugsource-2.7.18-150000.89.2 * libpython2_7-1_0-debuginfo-2.7.18-150000.89.2 * python-2.7.18-150000.89.1 * python-tk-debuginfo-2.7.18-150000.89.1 * python-xml-2.7.18-150000.89.2 * python-curses-2.7.18-150000.89.1 * python-curses-debuginfo-2.7.18-150000.89.1 * python-demo-2.7.18-150000.89.1 * python-devel-2.7.18-150000.89.2 * python-idle-2.7.18-150000.89.1 * python-debugsource-2.7.18-150000.89.1 * python-base-debuginfo-2.7.18-150000.89.2 * python-debuginfo-2.7.18-150000.89.1 * python-gdbm-debuginfo-2.7.18-150000.89.1 * openSUSE Leap 15.6 (x86_64) * python-32bit-2.7.18-150000.89.1 * python-base-32bit-debuginfo-2.7.18-150000.89.2 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.89.2 * python-32bit-debuginfo-2.7.18-150000.89.1 * python-base-32bit-2.7.18-150000.89.2 * libpython2_7-1_0-32bit-2.7.18-150000.89.2 * openSUSE Leap 15.6 (noarch) * python-doc-pdf-2.7.18-150000.89.1 * python-doc-2.7.18-150000.89.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) * python-gdbm-2.7.18-150000.89.1 * python-base-2.7.18-150000.89.2 * python-xml-debuginfo-2.7.18-150000.89.2 *libpython2_7-1_0-2.7.18-150000.89.2 * python-base-debugsource-2.7.18-150000.89.2 * libpython2_7-1_0-debuginfo-2.7.18-150000.89.2 * python-2.7.18-150000.89.1 * python-xml-2.7.18-150000.89.2 * python-curses-2.7.18-150000.89.1 * python-curses-debuginfo-2.7.18-150000.89.1 * python-debugsource-2.7.18-150000.89.1 * python-base-debuginfo-2.7.18-150000.89.2 * python-debuginfo-2.7.18-150000.89.1 * python-gdbm-debuginfo-2.7.18-150000.89.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python-gdbm-2.7.18-150000.89.1 * python-base-2.7.18-150000.89.2 * python-xml-debuginfo-2.7.18-150000.89.2 * libpython2_7-1_0-2.7.18-150000.89.2 * python-base-debugsource-2.7.18-150000.89.2 * libpython2_7-1_0-debuginfo-2.7.18-150000.89.2 * python-2.7.18-150000.89.1 * python-xml-2.7.18-150000.89.2 * python-curses-2.7.18-150000.89.1 * python-curses-debuginfo-2.7.18-150000.89.1 * python-debugsource-2.7.18-150000.89.1 * python-base-debuginfo-2.7.18-150000.89.2 * python-debuginfo-2.7.18-150000.89.1 * python-gdbm-debuginfo-2.7.18-150000.89.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6075.html * https://www.suse.com/security/cve/CVE-2025-8291.html * https://bugzilla.suse.com/show_bug.cgi?id=1251305 * https://bugzilla.suse.com/show_bug.cgi?id=1252974 . The latest openSUSE python update addresses two low-severity vulnerabilities related to performance and ZIP archive issues.. openSUSE python update, low severity security, performance issues, ZIP security patch, CVE 2025. . Severity: Low. LinuxSecurity.com Team
Dec 12, 2025
•Low
OpenSUSE
202
security advisorylowperformance issueopenSUSE Leap 15.3: Python3 Low Performance Issues Advisory 2025:4368-1
An update that solves two vulnerabilities can now be installed.. # Security update for python3 Announcement ID: SUSE-SU-2025:4368-1 Release Date: 2025-12-11T15:12:56Z Rating: low References: * bsc#1251305 * bsc#1252974 Cross-References: * CVE-2025-6075 * CVE-2025-8291 CVSS scores: * CVE-2025-6075 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-6075 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-6075 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-8291 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-8291 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-8291 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP6 * Basesystem Module 15-SP7 * Development Tools Module 15-SP6 * Development Tools Module 15-SP7 * openSUSE Leap 15.3 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for python3 fixesthe following issues: * CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). * CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-4368=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-4368=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-4368=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-4368=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-4368=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-4368=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-4368=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-4368=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4368=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2025-4368=1 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2025-4368=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-4368=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-4368=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-tk-debuginfo-3.6.15-150300.10.100.1 *python3-dbm-3.6.15-150300.10.100.1 * python3-curses-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * python3-core-debugsource-3.6.15-150300.10.100.1 * python3-doc-devhelp-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-idle-3.6.15-150300.10.100.1 * python3-devel-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * python3-testsuite-debuginfo-3.6.15-150300.10.100.1 * python3-doc-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-tk-3.6.15-150300.10.100.1 * python3-devel-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-testsuite-3.6.15-150300.10.100.1 * python3-curses-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-debuginfo-3.6.15-150300.10.100.1 * python3-tools-3.6.15-150300.10.100.1 * openSUSE Leap 15.3 (x86_64) * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-32bit-3.6.15-150300.10.100.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_6m1_0-64bit-3.6.15-150300.10.100.1 * libpython3_6m1_0-64bit-debuginfo-3.6.15-150300.10.100.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-tk-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-3.6.15-150300.10.100.1 * python3-curses-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-idle-3.6.15-150300.10.100.1 * python3-devel-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * python3-testsuite-debuginfo-3.6.15-150300.10.100.1 * python3-doc-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-tk-3.6.15-150300.10.100.1 *python3-devel-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-tools-3.6.15-150300.10.100.1 * python3-curses-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-debuginfo-3.6.15-150300.10.100.1 * python3-testsuite-3.6.15-150300.10.100.1 * python3-doc-devhelp-3.6.15-150300.10.100.1 * openSUSE Leap 15.6 (x86_64) * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-32bit-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 *python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * python3-tk-debuginfo-3.6.15-150300.10.100.1 * python3-idle-3.6.15-150300.10.100.1 * python3-devel-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-3.6.15-150300.10.100.1 * python3-curses-3.6.15-150300.10.100.1 * python3-tk-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-curses-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-debuginfo-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-devel-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * python3-tk-debuginfo-3.6.15-150300.10.100.1 * python3-idle-3.6.15-150300.10.100.1 * python3-devel-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-3.6.15-150300.10.100.1 * python3-curses-3.6.15-150300.10.100.1 * python3-tk-3.6.15-150300.10.100.1 *python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-curses-debuginfo-3.6.15-150300.10.100.1 * python3-dbm-debuginfo-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-devel-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-tools-3.6.15-150300.10.100.1 * python3-core-debugsource-3.6.15-150300.10.100.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-tools-3.6.15-150300.10.100.1 * python3-core-debugsource-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.100.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.100.1 * python3-base-debuginfo-3.6.15-150300.10.100.1 * python3-base-3.6.15-150300.10.100.1 * python3-3.6.15-150300.10.100.1 * python3-debuginfo-3.6.15-150300.10.100.1 * libpython3_6m1_0-3.6.15-150300.10.100.1 * python3-debugsource-3.6.15-150300.10.100.1 ## References: * https://www.suse.com/security/cve/CVE-2025-6075.html * https://www.suse.com/security/cve/CVE-2025-8291.html * https://bugzilla.suse.com/show_bug.cgi?id=1251305 * https://bugzilla.suse.com/show_bug.cgi?id=1252974 . SUSE releases a low-severity update for python3 addressing two performance and processing issues. Apply now!. python3 security issues, openSUSE python update, lowseverity advisory. . Severity: Low. LinuxSecurity.com Team
Dec 11, 2025
•Low
OpenSUSE
89
security advisoryfedorasegmentation faultFedora 41: Critical Performance Fixes for mingw-exiv2 CVE-2025-54080
Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-e5ab9a2288 2025-10-22 01:31:30.739329+00:00 -------------------------------------------------------------------------------- Name : mingw-exiv2 Product : Fedora 41 Version : 0.28.7 Release : 1.fc41 URL : https://exiv2.org/ Summary : MinGW Windows exiv2 library Description : MinGW Windows exiv2 library. -------------------------------------------------------------------------------- Update Information: Update to exiv2-0.28.7, fixes CVE-2025-54080 and CVE-2025-55304. -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 2 2025 Sandro Mani - 0.28.7-1 - Update to 0.28.7 * Fri Aug 29 2025 Sandro Mani - 0.28.6-1 - Update to 0.28.6 * Thu Jul 24 2025 Fedora Release Engineering - 0.28.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild * Sun Mar 23 2025 Sandro Mani - 0.28.5-1 - Update to 0.28.5 * Sat Mar 22 2025 Sandro Mani - 0.27.7-3 - Rebuild * Fri Jan 17 2025 Fedora Release Engineering - 0.27.7-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2391816 - CVE-2025-54080 mingw-exiv2: Exiv2 Segmentation Faults [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2391816 [ 2 ] Bug #2391837 - CVE-2025-55304 mingw-exiv2: Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2391837 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-e5ab9a2288' at the command line. For more information, refer to the dnf documentationavailable at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Oct 22, 2025
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!