Security update for forgejo-cli (important)

openSUSE security update: security update for forgejo-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21605-1 Rating: important References: bsc1242683 bsc1248047 bsc1274529 Cross-References: CVE-2025-3416 CVE-2025-55159 CVE-2026-25541 CVSS score...

forgejo-cli-0.6.0-2.1 on GA media (moderate)

forgejo-cli-0.6.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11529-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA...

sccache-0.17.0~1-2.1 on GA media (moderate)

sccache-0.17.01-2.1 on GA media Announcement ID: openSUSE-SU-2026:11527-1 Rating: moderate Cross-References: CVE-2026-25541 CVE-2026-66746 CVE-2026-66754 CVE-2026-67181 CVE-2026-67182 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

wasm-bindgen-0.2.100-2.1 on GA media (moderate)

wasm-bindgen-0.2.100-2.1 on GA media Announcement ID: openSUSE-SU-2026:11528-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

Security update for git-cliff (important)

openSUSE Security Update: Security update for git-cliff Announcement ID: openSUSE-SU-2026:0287-1 Rating: important References: 1248065 1274523 Cross-References: CVE-2025-55159 CVE-2026-25541 CVSS scores: CVE-2025-55159 SUSE: 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

cargo-audit-0.22.2~git0.281452c-2.1 on GA media (moderate)

cargo-audit-0.22.2git0.281452c-2.1 on GA media Announcement ID: openSUSE-SU-2026:11512-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

cargo-c-0.10.23-2.1 on GA media (moderate)

cargo-c-0.10.23-2.1 on GA media Announcement ID: openSUSE-SU-2026:11513-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

git-cliff-2.13.1-1.1 on GA media (moderate)

git-cliff-2.13.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11495-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

Security update for snpguest

This update for snpguest fixes the following issues: CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274139. CVE-2026-41678: openssl: incorrect bounds assertion in AES keywrap can lead to an out-of-bounds write bsc1270642. CVE-2026-4232...

OPENSUSE-SU-2026:21560-1 Security update for kak-lsp

This update for kak-lsp fixes the following issues: Changes in kak-lsp: - Update to version 21.0.2: Fix a regression that broke compatibility with Kakoune versions older than 2026.05.21 Add a default configuration for Hare, using hare-lsp Fix hangs after editing a file without a trailing newline,...

kak-lsp-21.0.2-1.1 on GA media (moderate)

kak-lsp-21.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11475-1 Rating: moderate Cross-References: CVE-2025-3416 CVE-2025-55159 CVE-2026-25541 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3...

gitoxide-0.56.0-1.1 on GA media (moderate)

gitoxide-0.56.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11474-1 Rating: moderate Cross-References: CVE-2026-25541 CVE-2026-40034 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7...

CLEANSTART-2026-VU15180 Security fixes in wasmtime 40.0.0-r0

Package wasmtime version 40.0.0-r0 fixes 3 vulnerabilities: CVE-2026-25541, ghsa-434x-w66g-qw3r, ghsa-cq8v-f236-94qc...

openSUSE 16 Security Update : nm-configurator (openSUSE-SU-2026:21428-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21428-1 advisory. This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in...

SUSE-SU-2026:22935-1 Security update for nm-configurator

This update for nm-configurator fixes the following issue Update to version 0.3.5. Security issue fixed: - CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes bsc1271392. Other updates and bugfixes: - Version 0.3.5: Bump version to v0.3.5 206 Bum...

SUSE-SU-2026:22787-1 Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.10.0.git73.b97f772. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270175. - CVE-2026-41677: openssl: out-of-bounds read in PEM passwor...

nm-configurator-0.3.5-2.1 on GA media (moderate)

nm-configurator-0.3.5-2.1 on GA media Announcement ID: openSUSE-SU-2026:11280-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can...

Security Bulletin: IBM DataPower Gateway vulnerable to Denial of Service due to use of Bytes (CVE-2026-25541)

Summary IBM DataPower Gateway uses Bytes in the 'Gateway Peering' feature, and in 10.6.0 and 10.6CD only the 'GitOps' feature. Vulnerability Details CVEID:CVE-2026-25541 DESCRIPTION: Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to...

Security Bulletin: IBM Edge Data Collector uses bytes-1.10.0.crate which is vulnerable to CVE-2026-25541.

Summary IBM Edge Data Collector uses bytes-1.10.0.crate which is vulnerable to CVE-2026-25541. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-25541 DESCRIPTION: Bytes is a utility library for working with bytes. From version 1.2.1 to before...

CVE-2026-25541

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...