SUSE-SU-2026:0130-1 Security update for python310

This update for python310 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using xml.dom.minidom methods that depend on clearidcache can lead to availability issues when building excessively nested documents bsc1254997. - CVE-2025-13836: use of...

CLSA-2026-1768480470 python3.11: Fix of CVE-2025-13836

CVE-2025-13836: fixed memory exhaustion vulnerability when reading HTTP responses with malicious Content-Length headers...

spi: fsl-cpm: Check length parity before switching to 16 bit mode

...

ksmbd: fix buffer validation by including null terminator size in EA length

...

CVE-2025-68773

In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce "spi: fsl-cpm: Use 16 bit mode for large transfers with even size" failed to make sure that the size is really even before switching to 16 bit...

kernel: i40e: add validation for ring_len param

A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ringlen parameter supplied by a VF virtual function is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ringlen, it may allow the device to...

SUSE CVE-2025-68806

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix buffer validation by including null terminator size in EA length The smb2setea function, which handles Extended Attributes EA, was performing buffer validation checks that incorrectly omitted the size of the null...

GPAC 安全漏洞

GPAC is an open source multimedia framework. GPAC suffers from a stack buffer overflow vulnerability that stems from the vorbistointern function failing to correctly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002456)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002456 advisory. The llcuirecvmsg function in net/llc/afllc.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003521)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003521 advisory. In the function wmisetie, the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ielen' argument can cause...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001847)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001847 advisory. Off-by-one error in the builduncpathtoroot function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service memory...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002003)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002003 advisory. The UDF filesystem implementation in the Linux kernel before 3.18.2 does not validate certain lengths, which allows local users to cause a denial of service buffer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001984)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001984 advisory. The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service infinite loop via a sma...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003551 advisory. In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the sctpmakechunk function net/sctp/smmakechunk.c when handling...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002843 advisory. The iscsiifrx function in drivers/scsi/scsitransportiscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of service panic by leveraging...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002157)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002157 advisory. Buffer overflow in the qethsnmpcommand function in drivers/s390/net/qethcoremain.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service...

GPAC 安全漏洞

GPAC is an open source multimedia framework. GPAC has a stack buffer overflow vulnerability , the vulnerability stems from the dumpttxtsample function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

GPAC 安全漏洞

GPAC is an open source multimedia framework. GPAC has a buffer overflow vulnerability that stems from the vobsubgetsubpicduration function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002235 advisory. Off-by-one error in the builduncpathtoroot function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service memory...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003321 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image,...