7 matches found
SUSE SLES15 Security Update : wicked2nm (SUSE-SU-2026:4405-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4405-1 advisory. This update for wicked2nm fixes the following issue: - serdewith: KeyValueMap serialization panics on empty sequence or map entries...
SUSE-SU-2026:4405-1 Security update for wicked2nm
This update for wicked2nm fixes the following issue: - serdewith: KeyValueMap serialization panics on empty sequence or map entries bsc1271848. Changes for wicked2nm: - Update v1.5.2. - Update v1.5.1: Update agama to fix default vlan flags bsc1271079...
openSUSE 16 Security Update : wicked2nm (openSUSE-SU-2026:21716-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21716-1 advisory. This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - serdewith: KeyValueMap serialization panics on empty...
OPENSUSE-SU-2026:21716-1 Security update for wicked2nm
This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - serdewith: KeyValueMap serialization panics on empty sequence or map entries bsc1271848. Other updates and bugfixes: Builddeps: bump serdewith from 3.18.0 to 3.21.0. Fix flaky tests. Fix teamlacpethtoo...
PT-2026-89833
This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - serde with: KeyValueMap serialization panics on empty sequence or map entries bsc1271848. Other updates and bugfixes: Builddeps: bump serde with from 3.18.0 to 3.21.0. Fix flaky tests. Fix team lacp...
serde_with: KeyValueMap serialization panics on empty sequence or map entries
Summary The public KeyValueMap serializer assumes that each mapped element has at least one field or item to use as the map key, but it subtracts 1 from the caller-visible length before validating that assumption. An application that serializes attacker-controlled data through serdeasas =...
GHSA-7GCF-G7XR-8HXJ serde_with: KeyValueMap serialization panics on empty sequence or map entries
Summary The public KeyValueMap serializer assumes that each mapped element has at least one field or item to use as the map key, but it subtracts 1 from the caller-visible length before validating that assumption. An application that serializes attacker-controlled data through serdeasas =...