body:
--17635567546.e35e.31657
Date: Wed, 19 Nov 2025 12:52:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1253759

            Bug ID: 1253759
           Summary: freetype 2.14.1 breaks python-Pillow
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Python
          Assignee: python-maintainers-at-suse.com
          Reporter: ana.guerrero-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The update of freeytype to 2.14.1 (SR#1318307) breaks python-Pillow

[  171s] XFAIL
Tests/test_image_resample.py::TestCoreResampleAlphaCorrect::test_levels_rgb=
a -
Current implementation isn't precise enough
[  171s] XFAIL
Tests/test_image_resample.py::TestCoreResampleAlphaCorrect::test_levels_la -
Current implementation isn't precise enough
[  171s] XFAIL Tests/test_imagedraw.py::test_line_h_s1_w2 - failing test
[  171s] FAILED Tests/test_imagedraw.py::test_default_font_size - Failed: g=
ot
differen...
[  171s] FAILED Tests/test_imagefont.py::test_colr[0] - AssertionError:=20
average pixel...
[  171s] FAILED Tests/test_imagefont.py::test_colr_mask[0] - AssertionError=
:=20
average ...
[  171s] FAILED Tests/test_imagefont.py::test_default_font - Failed: got
different con...
[  171s] =3D 4 failed, 4576 passed, 399 skipped, 6 deselected, 3 xfailed, 5
warnings in 54.25s =3D

...
full error messages

[  171s] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D FAILURES
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
[  171s] ____________________________ test_default_font_size
____________________________
[  171s]=20
[  171s]     def test_default_font_size() -> None:
[  171s]         freetype_support =3D features.check_module("freetype2")
[  171s]         text =3D "Default font at a specific size."
[  171s]=20=20=20=20=20
[  171s]         im =3D Image.new("RGB", (220, 25))
[  171s]         draw =3D ImageDraw.Draw(im)
[  171s]=20=20=20=20=20
[  171s]         def check(func: Callable[[], None]) -> None:
[  171s]             if freetype_support:
[  171s]                 func()
[  171s]             else:
[  171s]                 with pytest.raises(ImportError):
[  171s]                     func()
[  171s]=20=20=20=20=20
[  171s]         def draw_text() -> None:
[  171s]             draw.text((0, 0), text, font_size=3D16)
[  171s]             assert_image_equal_tofile(im,
"Tests/images/imagedraw_default_font_size.png")
[  171s]=20=20=20=20=20
[  171s] >       check(draw_text)
[  171s]=20
[  171s] Tests/test_imagedraw.py:1496:=20
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s] Tests/test_imagedraw.py:1487: in check
[  171s]     func()
[  171s] Tests/test_imagedraw.py:1494: in draw_text
[  171s]     assert_image_equal_tofile(im,
"Tests/images/imagedraw_default_font_size.png")
[  171s] Tests/helper.py:107: in assert_image_equal_tofile
[  171s]     assert_image_equal(a, img, msg)
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s]=20
[  171s] a =3D <PIL.Image.Image image mode=3DRGB size=3D220x25 at 0xF4BAAE3=
0>
[  171s] b =3D <PIL.PngImagePlugin.PngImageFile image mode=3DRGB size=3D220=
x25 at
0xF32FDA50>
[  171s] msg =3D None
[  171s]=20
[  171s]     def assert_image_equal(a: Image.Image, b: Image.Image, msg: st=
r |
None =3D None) -> None:
[  171s]         assert a.mode =3D=3D b.mode, msg or f"got mode {repr(a.mod=
e)},
expected {repr(b.mode)}"
[  171s]         assert a.size =3D=3D b.size, msg or f"got size {repr(a.siz=
e)},
expected {repr(b.size)}"
[  171s]         if a.tobytes() !=3D b.tobytes():
[  171s]             try:
[  171s]                 url =3D upload(a, b)
[  171s]                 if url:
[  171s]                     logger.error("URL for test images: %s", url)
[  171s]             except Exception:
[  171s]                 pass
[  171s]=20=20=20=20=20
[  171s] >           pytest.fail(msg or "got different content")
[  171s] E           Failed: got different content
[  171s]=20
[  171s] Tests/helper.py:95: Failed
[  171s] _________________________________ test_colr[0]
_________________________________
[  171s]=20
[  171s] layout_engine =3D <Layout.BASIC: 0>
[  171s]=20
[  171s]     @skip_unless_feature_version("freetype2", "2.10.0")
[  171s]     def test_colr(layout_engine: ImageFont.Layout) -> None:
[  171s]         font =3D ImageFont.truetype(
[  171s]             "Tests/fonts/BungeeColor-Regular_colr_Windows.ttf",
[  171s]             size=3D64,
[  171s]             layout_engine=3Dlayout_engine,
[  171s]         )
[  171s]=20=20=20=20=20
[  171s]         im =3D Image.new("RGB", (300, 75), "white")
[  171s]         d =3D ImageDraw.Draw(im)
[  171s]=20=20=20=20=20
[  171s]         d.text((15, 5), "Bungee", font=3Dfont, embedded_color=3DTr=
ue)
[  171s]=20=20=20=20=20
[  171s] >       assert_image_similar_tofile(im,
"Tests/images/colr_bungee.png", 21)
[  171s]=20
[  171s] Tests/test_imagefont.py:1085:=20
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s] Tests/helper.py:148: in assert_image_similar_tofile
[  171s]     assert_image_similar(a, img, epsilon, msg)
[  171s] Tests/helper.py:138: in assert_image_similar
[  171s]     raise e
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s]=20
[  171s] a =3D <PIL.Image.Image image mode=3DRGB size=3D300x75 at 0xF4BBC99=
0>
[  171s] b =3D <PIL.PngImagePlugin.PngImageFile image mode=3DRGB size=3D300=
x75 at
0xF32AE490>
[  171s] epsilon =3D 21, msg =3D None
[  171s]=20
[  171s]     def assert_image_similar(
[  171s]         a: Image.Image, b: Image.Image, epsilon: float, msg: str |
None =3D None
[  171s]     ) -> None:
[  171s]         assert a.mode =3D=3D b.mode, msg or f"got mode {repr(a.mod=
e)},
expected {repr(b.mode)}"
[  171s]         assert a.size =3D=3D b.size, msg or f"got size {repr(a.siz=
e)},
expected {repr(b.size)}"
[  171s]=20=20=20=20=20
[  171s]         a, b =3D convert_to_comparable(a, b)
[  171s]=20=20=20=20=20
[  171s]         diff =3D 0
[  171s]         for ach, bch in zip(a.split(), b.split()):
[  171s]             chdiff =3D ImageMath.lambda_eval(
[  171s]                 lambda args: abs(args["a"] - args["b"]), a=3Dach, =
b=3Dbch
[  171s]             ).convert("L")
[  171s]             diff +=3D sum(i * num for i, num in
enumerate(chdiff.histogram()))
[  171s]=20=20=20=20=20
[  171s]         ave_diff =3D diff / (a.size[0] * a.size[1])
[  171s]         try:
[  171s] >           assert epsilon >=3D ave_diff, (
[  171s]                 (msg or "")
[  171s]                 + f" average pixel value difference {ave_diff:.4f}=
 >
epsilon {epsilon:.4f}"
[  171s]             )
[  171s] E           AssertionError:  average pixel value difference 38.325=
2 >
epsilon 21.0000
[  171s] E           assert 21 >=3D 38.325244444444444
[  171s]=20
[  171s] Tests/helper.py:127: AssertionError
[  171s] ______________________________ test_colr_mask[0]
_______________________________
[  171s]=20
[  171s] layout_engine =3D <Layout.BASIC: 0>
[  171s]=20
[  171s]     @skip_unless_feature_version("freetype2", "2.10.0")
[  171s]     def test_colr_mask(layout_engine: ImageFont.Layout) -> None:
[  171s]         font =3D ImageFont.truetype(
[  171s]             "Tests/fonts/BungeeColor-Regular_colr_Windows.ttf",
[  171s]             size=3D64,
[  171s]             layout_engine=3Dlayout_engine,
[  171s]         )
[  171s]=20=20=20=20=20
[  171s]         im =3D Image.new("RGB", (300, 75), "white")
[  171s]         d =3D ImageDraw.Draw(im)
[  171s]=20=20=20=20=20
[  171s]         d.text((15, 5), "Bungee", "black", font=3Dfont)
[  171s]=20=20=20=20=20
[  171s] >       assert_image_similar_tofile(im,
"Tests/images/colr_bungee_mask.png", 22)
[  171s]=20
[  171s] Tests/test_imagefont.py:1101:=20
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s] Tests/helper.py:148: in assert_image_similar_tofile
[  171s]     assert_image_similar(a, img, epsilon, msg)
[  171s] Tests/helper.py:138: in assert_image_similar
[  171s]     raise e
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s]=20
[  171s] a =3D <PIL.Image.Image image mode=3DRGB size=3D300x75 at 0xF3246CB=
0>
[  171s] b =3D <PIL.PngImagePlugin.PngImageFile image mode=3DRGB size=3D300=
x75 at
0xF3246F30>
[  171s] epsilon =3D 22, msg =3D None
[  171s]=20
[  171s]     def assert_image_similar(
[  171s]         a: Image.Image, b: Image.Image, epsilon: float, msg: str |
None =3D None
[  171s]     ) -> None:
[  171s]         assert a.mode =3D=3D b.mode, msg or f"got mode {repr(a.mod=
e)},
expected {repr(b.mode)}"
[  171s]         assert a.size =3D=3D b.size, msg or f"got size {repr(a.siz=
e)},
expected {repr(b.size)}"
[  171s]=20=20=20=20=20
[  171s]         a, b =3D convert_to_comparable(a, b)
[  171s]=20=20=20=20=20
[  171s]         diff =3D 0
[  171s]         for ach, bch in zip(a.split(), b.split()):
[  171s]             chdiff =3D ImageMath.lambda_eval(
[  171s]                 lambda args: abs(args["a"] - args["b"]), a=3Dach, =
b=3Dbch
[  171s]             ).convert("L")
[  171s]             diff +=3D sum(i * num for i, num in
enumerate(chdiff.histogram()))
[  171s]=20=20=20=20=20
[  171s]         ave_diff =3D diff / (a.size[0] * a.size[1])
[  171s]         try:
[  171s] >           assert epsilon >=3D ave_diff, (
[  171s]                 (msg or "")
[  171s]                 + f" average pixel value difference {ave_diff:.4f}=
 >
epsilon {epsilon:.4f}"
[  171s]             )
[  171s] E           AssertionError:  average pixel value difference 32.036=
0 >
epsilon 22.0000
[  171s] E           assert 22 >=3D 32.036
[  171s]=20
[  171s] Tests/helper.py:127: AssertionError
[  171s] ______________________________ test_default_font
_______________________________
[  171s]=20
[  171s]     def test_default_font() -> None:
[  171s]         # Arrange
[  171s]         txt =3D "This is a default font using FreeType support."
[  171s]         im =3D Image.new(mode=3D"RGB", size=3D(300, 100))
[  171s]         draw =3D ImageDraw.Draw(im)
[  171s]=20=20=20=20=20
[  171s]         # Act
[  171s]         default_font =3D ImageFont.load_default()
[  171s]         draw.text((10, 10), txt, font=3Ddefault_font)
[  171s]=20=20=20=20=20
[  171s]         larger_default_font =3D ImageFont.load_default(size=3D14)
[  171s]         draw.text((10, 60), txt, font=3Dlarger_default_font)
[  171s]=20=20=20=20=20
[  171s]         # Assert
[  171s] >       assert_image_equal_tofile(im,
"Tests/images/default_font_freetype.png")
[  171s]=20
[  171s] Tests/test_imagefont.py:553:=20
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s] Tests/helper.py:107: in assert_image_equal_tofile
[  171s]     assert_image_equal(a, img, msg)
[  171s] _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ =
_ _
_ _ _ _ _=20
[  171s]=20
[  171s] a =3D <PIL.Image.Image image mode=3DRGB size=3D300x100 at 0xF524F6=
50>
[  171s] b =3D <PIL.PngImagePlugin.PngImageFile image mode=3DRGB size=3D300=
x100 at
0xF3263F30>
[  171s] msg =3D None
[  171s]=20
[  171s]     def assert_image_equal(a: Image.Image, b: Image.Image, msg: st=
r |
None =3D None) -> None:
[  171s]         assert a.mode =3D=3D b.mode, msg or f"got mode {repr(a.mod=
e)},
expected {repr(b.mode)}"
[  171s]         assert a.size =3D=3D b.size, msg or f"got size {repr(a.siz=
e)},
expected {repr(b.size)}"
[  171s]         if a.tobytes() !=3D b.tobytes():
[  171s]             try:
[  171s]                 url =3D upload(a, b)
[  171s]                 if url:
[  171s]                     logger.error("URL for test images: %s", url)
[  171s]             except Exception:
[  171s]                 pass
[  171s]=20=20=20=20=20
[  171s] >           pytest.fail(msg or "got different content")
[  171s] E           Failed: got different content
[  171s]=20
[  171s] Tests/helper.py:95: Failed
[  171s] =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D warnings summary
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D
[  171s] Tests/helper.py:167
[  171s] Tests/helper.py:167
[  171s] Tests/helper.py:167
[  171s] Tests/helper.py:167
[  171s] Tests/helper.py:167
[  171s]=20=20
/home/abuild/rpmbuild/BUILD/python-Pillow-11.3.0-build/pillow-11.3.0/Tests/=
helper.py:167:
PytestUnknownMarkWarning: Unknown pytest.mark.timeout - is this a typo?  You
can register custom marks to avoid this warning - for details, see
https://docs.pytest.org/en/stable/how-to/mark.html
[  171s]     return pytest.mark.timeout(timeout)
[  171s]=20
[  171s]

summary: freetype 2.14.1 breaks python-Pillow


--17636309583.d93Fbe6FB.1033
Date: Thu, 20 Nov 2025 09:29:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1253930
https://bugzilla.suse.com/show_bug.cgi?id=3D1253930#c1

            Bug ID: 1253930
           Summary: VUL-0: CVE-2025-58181: git-bug: golang.org/x/crypto/ssh: invalidated
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/482381/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58181:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1253784
  Target Milestone: ---
          Found By: ---
           Blocker: ---

-


--17636308501.eDFd.988
Date: Thu, 20 Nov 2025 09:27:30 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1253864

            Bug ID: 1253864
           Summary: VUL-0: CVE-2025-58181: keybase-client: golang.org/x/crypto/ssh: invalidated
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/482381/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58181:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: marix-at-marix.org
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1253784
  Target Milestone: ---
          Found By: ---
           Blocker: ---

SSH servers parsing GSSAPI authentication requests do not validate the numb=
er
of mechanisms specified in the request, allowing an attacker to cause unbou=
nded
memory consumption.

References:
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58181
https://www.cve.org/CVERecord?id=3DCVE-2025-58181
https://go.dev/cl/721961
https://go.dev/issue/76363
https://pkg.go.dev/vuln/GO-2025-4134
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/58xxx/CVE-2025=
-58181.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17636308501.eDFd.988
Date: Thu, 20 Nov 2025 09:27:30 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1253864

          Summary
          VUL-0: CVE-2025-58181: keybase-client: golang.org/x/crypto/ss=
h: invalidated

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482381/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58181:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          marix@marix.org

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1253784

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

SSH servers parsing GSSAPI authentication requests do not va=
lidate the number
of mechanisms specified in the request, allowing an attacker to cause unbou=
nded
memory consumption.

References:
https=
://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58181
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-58181
https://go.dev/cl/721961
https://go.dev/issue/76363
https://pkg.go.dev/vuln/GO=
-2025-4134
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/58xxx/CVE-2025-58181.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17636308501.eDFd.988--


--17636309526.aB2ee4.1030
Date: Thu, 20 Nov 2025 09:29:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1253927

            Bug ID: 1253927
           Summary: VUL-0: CVE-2025-58181: netbird: golang.org/x/crypto/ssh: invalidated
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/482381/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-58181:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dleuenberger-at-suse.com
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1253784
  Target Milestone: ---
          Found By: ---
           Blocker: ---

SSH servers parsing GSSAPI authentication requests do not validate the numb=
er
of mechanisms specified in the request, allowing an attacker to cause unbou=
nded
memory consumption.

References:
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58181
https://www.cve.org/CVERecord?id=3DCVE-2025-58181
https://go.dev/cl/721961
https://go.dev/issue/76363
https://pkg.go.dev/vuln/GO-2025-4134
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/58xxx/CVE-2025=
-58181.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17636309526.aB2ee4.1030
Date: Thu, 20 Nov 2025 09:29:12 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1253927

          Summary
          VUL-0: CVE-2025-58181: netbird: golang.org/x/crypto/ssh: inva=
lidated

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482381/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-58181:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dleuenberger@suse.com

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1253784

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

SSH servers parsing GSSAPI authentication requests do not va=
lidate the number
of mechanisms specified in the request, allowing an attacker to cause unbou=
nded
memory consumption.

References:
https=
://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-58181
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-58181
https://go.dev/cl/721961
https://go.dev/issue/76363
https://pkg.go.dev/vuln/GO=
-2025-4134
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/58xxx/CVE-2025-58181.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17636309526.aB2ee4.1030--


--17636517586.A771c25.2085
Date: Thu, 20 Nov 2025 15:15:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254023

            Bug ID: 1254023
           Summary: VUL-0: CVE-2025-47914: keybase-client: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/482380/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47914:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: marix-at-marix.org
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1253967
  Target Milestone: ---
          Found By: ---
           Blocker: ---

SSH Agent servers do not validate the size of messages when processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-47914
https://www.cve.org/CVERecord?id=3DCVE-2025-47914
https://go.dev/cl/721960
https://go.dev/issue/76364
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
https://pkg.go.dev/vuln/GO-2025-4135
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/47xxx/CVE-2025=
-47914.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17636517586.A771c25.2085
Date: Thu, 20 Nov 2025 15:15:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254023

          Summary
          VUL-0: CVE-2025-47914: keybase-client: golang.org/x/crypto/ss=
h/agent: non validated message size can cause a panic due to an out of boun=
ds read

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482380/

          OS
          Other

          Status
          NEW

          Whiteboard
          CVSSv3.1:SUSE:CVE-2025-47914:5.3:(AV:N/AC:L/PR:N/UI:N/S:U/C:N=
/I:N/A:L)=20

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          marix@marix.org

          Reporter
          serena.ferracci@suse.com

          QA Contact
          security-team@suse.de

          Blocks
          1253967

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

SSH Agent servers do not validate the size of messages when =
processing new
identity requests, which may cause the program to panic if the message is
malformed due to an out of bounds read.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-47914
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-47914
https://go.dev/cl/721960
https://go.dev/issue/76364
https=
://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
https://pkg.go.dev/vuln/GO=
-2025-4135
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/47xxx/CVE-2025-47914.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17636517586.A771c25.2085--


--17636518922.02b2.2101
Date: Thu, 20 Nov 2025 15:18:12 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254084
https://bugzilla.suse.com/show_bug.cgi?id=3D1254084#c1

            Bug ID: 1254084
           Summary: VUL-0: CVE-2025-47914: git-bug: golang.org/x/crypto/ssh/agent: non validated message size can cause a panic due to an out of bounds read
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://smash.suse.de/issue/482380/
                OS: Other
            Status: NEW
        Whiteboard: CVSSv3.1:SUSE:CVE-2025-47914:5.3:(AV:N/AC:L/PR:N/UI:N/
                    S:U/C:N/I:N/A:L)
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: mcepl-at-suse.com
          Reporter: serena.ferracci-at-suse.com
        QA Contact: security-team-at-suse.de
            Blocks: 1253967
  Target Milestone: ---
          Found By: ---
           Blocker: ---

-


body:
--17636534243.8834f6B.2176
Date: Thu, 20 Nov 2025 15:43:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254087

            Bug ID: 1254087
           Summary: bash 5.3 breaks mdcheck
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Slowroll
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Basesystem
          Assignee: screening-team-bugs-at-suse.de
          Reporter: nicolas.morey-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Tested on OpenSUSE Slowroll with
mdadm-4.4+29.gf8bb524b-1.1.x86_64
bash-5.3.3-2.2.x86_64

It seems bash 5.3.x (not sure which) introduced a behaviour change that bre=
aks
at least mdcheck.

To get the device names from sysfs, mdcheck uses this function
devname() {
    local dev
    [[ -f "$1/uevent" ]] && \
            dev=3D$(. "$1/uevent" && echo -n "$DEVNAME")
    [[ "$dev" && -b "/dev/$dev" ]] || return 1
    echo -n "/dev/$dev"
}

Which in my setup ends up running:
. /sys/block/md126/uevent && echo -n "$DEVNAME"

Using bash 5.2, this does load the variable and work as expected.
With bash 5.3.3, stderr gets a '-bash: /sys/block/md126/uevent: Success'
but nothing on stdout.
A quick trip through the debugger show that the issue seems to be in
builtins/evalfile.c:
60            nr =3D read (fd, string, file_size);
161           if (nr >=3D 0)
162             string[nr] =3D '\0';
163           if (nr !=3D file_size)
164             nr =3D -1;                /* XXX - didn't get the whole fil=
e */

In this case, file_size is 4096 (I'm guessing the kernel put all these file=
 as
1 memory page), but the content is only 51B.=20
So we end up returning from evalfile_internal with nr =3D -1 and errno =3D =
0 which
is very confusing.

As a side effect of this, mdcheck does not check/scrub any RAIDs.

In the meantime, the mdcheck issue can be worked around by replacing:
            dev=3D$(. "$1/uevent" && echo -n "$DEVNAME")
by=20
            dev=3D$(. <( cat "$1/uevent") && echo -n "$DEVNAME")
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17636534243.8834f6B.2176
Date: Thu, 20 Nov 2025 15:43:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254087

          Summary
          bash 5.3 breaks mdcheck

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Slowroll

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Basesystem

          Assignee
          screening-team-bugs@suse.de

          Reporter
          nicolas.morey@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Tested on OpenSUSE Slowroll with
mdadm-4.4+29.gf8bb524b-1.1.x86_64
bash-5.3.3-2.2.x86_64

It seems bash 5.3.x (not sure which) introduced a behaviour change that bre=
aks
at least mdcheck.

To get the device names from sysfs, mdcheck uses this function
devname() {
    local dev
    [[ -f "$1/uevent" ]] && \
            dev=3D$(. "$1/uevent" && echo -n "$DEVNA=
ME")
    [[ "$dev" && -b "/dev/$dev" ]] || return 1
    echo -n "/dev/$dev"
}

Which in my setup ends up running:
. /sys/block/md126/uevent && echo -n "$DEVNAME"

Using bash 5.2, this does load the variable and work as expected.
With bash 5.3.3, stderr gets a '-bash: /sys/block/md126/uevent: Success'
but nothing on stdout.
A quick trip through the debugger show that the issue seems to be in
builtins/evalfile.c:
60            nr =3D read (fd, string, file_size);
161           if (nr >=3D 0)
162             string[nr] =3D '\0';
163           if (nr !=3D file_size)
164             nr =3D -1;                /* XXX - didn't get the whole fil=
e */

In this case, file_size is 4096 (I'm guessing the kernel put all these file=
 as
1 memory page), but the content is only 51B.=20
So we end up returning from evalfile_internal with nr =3D -1 and errno =3D =
0 which
is very confusing.

As a side effect of this, mdcheck does not check/scrub any RAIDs.

In the meantime, the mdcheck issue can be worked around by replacing:
            dev=3D$(. "$1/uevent" && echo -n "$DEVNA=
ME")
by=20
            dev=3D$(. <( cat "$1/uevent") && echo -n &=
quot;$DEVNAME")

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17636534243.8834f6B.2176--

pkgs: bash mdadm

summary: bash 5.3 breaks mdcheck


--17636777882.dbCf18FF5.2713
Date: Thu, 20 Nov 2025 22:29:48 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254096

            Bug ID: 1254096
           Summary: Log messages when unmounting samba shares.
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Network
          Assignee: screening-team-bugs-at-suse.de
          Reporter: alexsecret-at-hotmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Hi,

After the latest Tumbleweed update (20251119), there are some messages that
appear in the logs, every time a samba mount that was mounted with mount.ci=
fs
is unmounted. The messages are the following:

Nov 20 22:14:27 TurboX kernel: BUG: workqueue leaked atomic, lock or RCU:
kworker/0:4[8429]
                                    preempt=3D0x7fffffff lock=3D0->0 RCU=3D=
0->0
workfn=3Dcfids_invalidation_worker [cifs]
Nov 20 22:14:27 TurboX kernel: CPU: 0 UID: 0 PID: 8429 Comm: kworker/0:4
Tainted: G        W           6.17.8-1-default #1 PREEMPT(voluntary) openSU=
SE
Tumbleweed  8ad56dc56d3a6839fe6d3c5e13fd5c7f3b7ccb91
Nov 20 22:14:27 TurboX kernel: Tainted: [W]=3DWARN
Nov 20 22:14:27 TurboX kernel: Hardware name: Removed      , BIOS Removed
Nov 20 22:14:27 TurboX kernel: Workqueue: cfid_put_wq cfids_invalidation_wo=
rker
[cifs]
Nov 20 22:14:27 TurboX kernel: Call Trace:
Nov 20 22:14:27 TurboX kernel:  <TASK>
Nov 20 22:14:27 TurboX kernel:  dump_stack_lvl+0x5b/0x80
Nov 20 22:14:27 TurboX kernel:  process_one_work.cold+0x4e/0x82
Nov 20 22:14:27 TurboX kernel:  ? __pfx_cfids_invalidation_worker+0x10/0x10
[cifs b408af59655bb2eae818af74fb9aeff0a81df112]
Nov 20 22:14:27 TurboX kernel:  worker_thread+0x2d7/0x410
Nov 20 22:14:27 TurboX kernel:  ? __pfx_worker_thread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  kthread+0xfc/0x230
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork+0x1c4/0x1f0
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork_asm+0x1a/0x30
Nov 20 22:14:27 TurboX kernel:  </TASK>
Nov 20 22:14:27 TurboX kernel: BUG: scheduling while atomic:
kworker/0:4/8429/0x00000000
Nov 20 22:14:27 TurboX kernel: Modules linked in: gcm cmac nls_utf8 cifs
cifs_arc4 nls_ucs2_utils cifs_md4 dns_resolver netfs wireguard
curve25519_x86_64 libcurve25519_generic ip6_udp_tunnel udp_tunnel snd_seq_d=
ummy
snd_hrtimer snd_seq af_packet nf_conntrack_netbios_ns nf_conntrack_broadcast
nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ip=
v4
nf_reject_ipv6 rfkill nft_reject nft_ct nft_chain_nat ip6table_nat
ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntr=
ack
nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security
ip6table_filter ip6_tables qrtr nf_tables iptable_filter it87 hwmon_vid msr
binfmt_misc snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi
snd_hda_codec_intelhdmi snd_seq_device snd_hda_codec_hdmi snd_hda_codec_alc=
662
pwc snd_hda_codec_realtek_lib videobuf2_vmalloc videobuf2_memops
snd_hda_codec_generic videobuf2_v4l2 videobuf2_common snd_hda_intel videodev
snd_hda_codec mc snd_hda_core intel_rapl_msr snd_intel_dspcfg intel_rapl_co=
mmon
snd_intel_sdw_acpi
Nov 20 22:14:27 TurboX kernel:  snd_hwdep x86_pkg_temp_thermal snd_pcm
intel_powerclamp mei_hdcp coretemp r8169 snd_timer mei_pxp iTCO_wdt at24 snd
gpio_ich intel_pmc_bxt ppdev kvm_intel iTCO_vendor_support realtek kvm pcsp=
kr
mei_me mdio_devres irqbypass libphy mei soundcore mdio_bus i2c_i801
tiny_power_button parport_pc parport lpc_ich i2c_smbus button i2c_mux squas=
hfs
fuse loop efi_pstore nfnetlink ip_tables x_tables xts dm_crypt essiv authenc
trusted asn1_encoder tee sr_mod cdrom hid_generic ata_generic usbhid i915
ata_piix ahci libahci libata sd_mod i2c_algo_bit drm_buddy video wmi
scsi_dh_emc scsi_dh_rdac ttm scsi_dh_alua sg ehci_pci scsi_mod ehci_hcd
drm_display_helper ghash_clmulni_intel scsi_common cec usbcore rc_core
intel_oc_wdt serio_raw btrfs blake2b_generic xor raid6_pq dm_mirror
dm_region_hash dm_log dm_mod dmi_sysfs
Nov 20 22:14:27 TurboX kernel: CPU: 0 UID: 0 PID: 8429 Comm: kworker/0:4
Tainted: G        W           6.17.8-1-default #1 PREEMPT(voluntary) openSU=
SE
Tumbleweed  8ad56dc56d3a6839fe6d3c5e13fd5c7f3b7ccb91
Nov 20 22:14:27 TurboX kernel: Tainted: [W]=3DWARN
Nov 20 22:14:27 TurboX kernel: Hardware name: Removed      , BIOS Removed
Nov 20 22:14:27 TurboX kernel: Workqueue:  0x0 (cfid_put_wq)
Nov 20 22:14:27 TurboX kernel: Call Trace:
Nov 20 22:14:27 TurboX kernel:  <TASK>
Nov 20 22:14:27 TurboX kernel:  dump_stack_lvl+0x5b/0x80
Nov 20 22:14:27 TurboX kernel:  __schedule_bug.cold+0x42/0x4e
Nov 20 22:14:27 TurboX kernel:  __schedule+0x1127/0x13e0
Nov 20 22:14:27 TurboX kernel:  ? ret_from_fork_asm+0x1a/0x30
Nov 20 22:14:27 TurboX kernel:  ? dump_stack_lvl+0x64/0x80
Nov 20 22:14:27 TurboX kernel:  ? process_one_work.cold+0x4e/0x82
Nov 20 22:14:27 TurboX kernel:  schedule+0x27/0xd0
Nov 20 22:14:27 TurboX kernel:  worker_thread+0x1b4/0x410
Nov 20 22:14:27 TurboX kernel:  ? __pfx_worker_thread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  kthread+0xfc/0x230
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork+0x1c4/0x1f0
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork_asm+0x1a/0x30
Nov 20 22:14:27 TurboX kernel:  </TASK>
Nov 20 22:14:27 TurboX systemd[1]: run-media-IdCentre\x2dLAN_Public.mount:
Deactivated successfully.

The mounting process takes 3-5 seconds to complete whereas it was instant
before the update. Both mounting and unmounting of the samba shares are wor=
king
properly though. We can see the unmount message at the end. Both the server=
 and
the client are running the updated (20251119) Tumbleweed.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17636777882.dbCf18FF5.2713
Date: Thu, 20 Nov 2025 22:29:48 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254096

          Summary
          Log messages when unmounting samba shares.

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Network

          Assignee
          screening-team-bugs@suse.de

          Reporter
          alexsecret@hotmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Hi,

After the latest Tumbleweed update (20251119), there are some messages that
appear in the logs, every time a samba mount that was mounted with mount.ci=
fs
is unmounted. The messages are the following:

Nov 20 22:14:27 TurboX kernel: BUG: workqueue leaked atomic, lock or RCU:
kworker/0:4[8429]
                                    preempt=3D0x7fffffff lock=3D0->0 RCU=
=3D0->0
workfn=3Dcfids_invalidation_worker [cifs]
Nov 20 22:14:27 TurboX kernel: CPU: 0 UID: 0 PID: 8429 Comm: kworker/0:4
Tainted: G        W           6.17.8-1-default #1 PREEMPT(voluntary) openSU=
SE
Tumbleweed  8ad56dc56d3a6839fe6d3c5e13fd5c7f3b7ccb91
Nov 20 22:14:27 TurboX kernel: Tainted: [W]=3DWARN
Nov 20 22:14:27 TurboX kernel: Hardware name: Removed      , BIOS Removed
Nov 20 22:14:27 TurboX kernel: Workqueue: cfid_put_wq cfids_invalidation_wo=
rker
[cifs]
Nov 20 22:14:27 TurboX kernel: Call Trace:
Nov 20 22:14:27 TurboX kernel:  <TASK>
Nov 20 22:14:27 TurboX kernel:  dump_stack_lvl+0x5b/0x80
Nov 20 22:14:27 TurboX kernel:  process_one_work.cold+0x4e/0x82
Nov 20 22:14:27 TurboX kernel:  ? __pfx_cfids_invalidation_worker+0x10/0x10
[cifs b408af59655bb2eae818af74fb9aeff0a81df112]
Nov 20 22:14:27 TurboX kernel:  worker_thread+0x2d7/0x410
Nov 20 22:14:27 TurboX kernel:  ? __pfx_worker_thread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  kthread+0xfc/0x230
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork+0x1c4/0x1f0
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork_asm+0x1a/0x30
Nov 20 22:14:27 TurboX kernel:  </TASK>
Nov 20 22:14:27 TurboX kernel: BUG: scheduling while atomic:
kworker/0:4/8429/0x00000000
Nov 20 22:14:27 TurboX kernel: Modules linked in: gcm cmac nls_utf8 cifs
cifs_arc4 nls_ucs2_utils cifs_md4 dns_resolver netfs wireguard
curve25519_x86_64 libcurve25519_generic ip6_udp_tunnel udp_tunnel snd_seq_d=
ummy
snd_hrtimer snd_seq af_packet nf_conntrack_netbios_ns nf_conntrack_broadcast
nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ip=
v4
nf_reject_ipv6 rfkill nft_reject nft_ct nft_chain_nat ip6table_nat
ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntr=
ack
nf_defrag_ipv6 nf_defrag_ipv4 iptable_mangle iptable_raw iptable_security
ip6table_filter ip6_tables qrtr nf_tables iptable_filter it87 hwmon_vid msr
binfmt_misc snd_usb_audio snd_usbmidi_lib snd_ump snd_rawmidi
snd_hda_codec_intelhdmi snd_seq_device snd_hda_codec_hdmi snd_hda_codec_alc=
662
pwc snd_hda_codec_realtek_lib videobuf2_vmalloc videobuf2_memops
snd_hda_codec_generic videobuf2_v4l2 videobuf2_common snd_hda_intel videodev
snd_hda_codec mc snd_hda_core intel_rapl_msr snd_intel_dspcfg intel_rapl_co=
mmon
snd_intel_sdw_acpi
Nov 20 22:14:27 TurboX kernel:  snd_hwdep x86_pkg_temp_thermal snd_pcm
intel_powerclamp mei_hdcp coretemp r8169 snd_timer mei_pxp iTCO_wdt at24 snd
gpio_ich intel_pmc_bxt ppdev kvm_intel iTCO_vendor_support realtek kvm pcsp=
kr
mei_me mdio_devres irqbypass libphy mei soundcore mdio_bus i2c_i801
tiny_power_button parport_pc parport lpc_ich i2c_smbus button i2c_mux squas=
hfs
fuse loop efi_pstore nfnetlink ip_tables x_tables xts dm_crypt essiv authenc
trusted asn1_encoder tee sr_mod cdrom hid_generic ata_generic usbhid i915
ata_piix ahci libahci libata sd_mod i2c_algo_bit drm_buddy video wmi
scsi_dh_emc scsi_dh_rdac ttm scsi_dh_alua sg ehci_pci scsi_mod ehci_hcd
drm_display_helper ghash_clmulni_intel scsi_common cec usbcore rc_core
intel_oc_wdt serio_raw btrfs blake2b_generic xor raid6_pq dm_mirror
dm_region_hash dm_log dm_mod dmi_sysfs
Nov 20 22:14:27 TurboX kernel: CPU: 0 UID: 0 PID: 8429 Comm: kworker/0:4
Tainted: G        W           6.17.8-1-default #1 PREEMPT(voluntary) openSU=
SE
Tumbleweed  8ad56dc56d3a6839fe6d3c5e13fd5c7f3b7ccb91
Nov 20 22:14:27 TurboX kernel: Tainted: [W]=3DWARN
Nov 20 22:14:27 TurboX kernel: Hardware name: Removed      , BIOS Removed
Nov 20 22:14:27 TurboX kernel: Workqueue:  0x0 (cfid_put_wq)
Nov 20 22:14:27 TurboX kernel: Call Trace:
Nov 20 22:14:27 TurboX kernel:  <TASK>
Nov 20 22:14:27 TurboX kernel:  dump_stack_lvl+0x5b/0x80
Nov 20 22:14:27 TurboX kernel:  __schedule_bug.cold+0x42/0x4e
Nov 20 22:14:27 TurboX kernel:  __schedule+0x1127/0x13e0
Nov 20 22:14:27 TurboX kernel:  ? ret_from_fork_asm+0x1a/0x30
Nov 20 22:14:27 TurboX kernel:  ? dump_stack_lvl+0x64/0x80
Nov 20 22:14:27 TurboX kernel:  ? process_one_work.cold+0x4e/0x82
Nov 20 22:14:27 TurboX kernel:  schedule+0x27/0xd0
Nov 20 22:14:27 TurboX kernel:  worker_thread+0x1b4/0x410
Nov 20 22:14:27 TurboX kernel:  ? __pfx_worker_thread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  kthread+0xfc/0x230
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork+0x1c4/0x1f0
Nov 20 22:14:27 TurboX kernel:  ? __pfx_kthread+0x10/0x10
Nov 20 22:14:27 TurboX kernel:  ret_from_fork_asm+0x1a/0x30
Nov 20 22:14:27 TurboX kernel:  </TASK>
Nov 20 22:14:27 TurboX systemd[1]: run-media-IdCentre\x2dLAN_Public.mount:
Deactivated successfully.

The mounting process takes 3-5 seconds to complete whereas it was instant
before the update. Both mounting and unmounting of the samba shares are wor=
king
properly though. We can see the unmount message at the end. Both the server=
 and
the client are running the updated (20251119) Tumbleweed.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17636777882.dbCf18FF5.2713--


--17639972451.dAA4D0c.6845
Date: Mon, 24 Nov 2025 15:14:05 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254186

            Bug ID: 1254186
           Summary: VUL-0: CVE-2025-65498: libcoap: null pointer dereference can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482770/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl=
.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/obgm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65498
https://www.cve.org/CVERecord?id=3DCVE-2025-65498
https://github.com/obgm/libcoap/issues/1746
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639972451.dAA4D0c.6845
Date: Mon, 24 Nov 2025 15:14:05 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254186

          Summary
          VUL-0: CVE-2025-65498: libcoap: null pointer dereference can =
cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482770/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

NULL pointer dereference in coap_dtls_generate_cookie() in s=
rc/coap_openssl.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/ob=
gm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65498
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65498
https://github.com/=
obgm/libcoap/issues/1746

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639972451.dAA4D0c.6845--


--17639975744.DAdAc7cc.6869
Date: Mon, 24 Nov 2025 15:19:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254187

            Bug ID: 1254187
           Summary: VUL-0: CVE-2025-65493: libcoap: null pointer dereference in BIO_get_data() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482765/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows
remote attackers to cause a denial of service via a crafted DTLS/TLS connec=
tion
that triggers BIO_get_data() to return NULL.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65493
https://www.cve.org/CVERecord?id=3DCVE-2025-65493
https://github.com/obgm/libcoap/issues/1743
https://github.com/obgm/libcoap/pull/1750
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639975744.DAdAc7cc.6869
Date: Mon, 24 Nov 2025 15:19:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254187

          Summary
          VUL-0: CVE-2025-65493: libcoap: null pointer dereference in B=
IO_get_data() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482765/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

NULL pointer dereference in src/coap_openssl.c in OISM libco=
ap 4.3.5 allows
remote attackers to cause a denial of service via a crafted DTLS/TLS connec=
tion
that triggers BIO_get_data() to return NULL.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65493
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65493
https://github.com/=
obgm/libcoap/issues/1743
https://github.com/ob=
gm/libcoap/pull/1750

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639975744.DAdAc7cc.6869--


--17639976450.20F27.6875
Date: Mon, 24 Nov 2025 15:20:45 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254188

            Bug ID: 1254188
           Summary: VUL-0: CVE-2025-65494: libcoap: null pointer dereference in sk_GENERAL_NAME_value() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482766/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c=
 in
OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via=
 a
crafted X.509 certificate that causes sk_GENERAL_NAME_value() to return NUL=
L.

References:
https://github.com/obgm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65494
https://www.cve.org/CVERecord?id=3DCVE-2025-65494
https://github.com/obgm/libcoap/issues/1745
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639976450.20F27.6875
Date: Mon, 24 Nov 2025 15:20:45 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254188

          Summary
          VUL-0: CVE-2025-65494: libcoap: null pointer dereference in s=
k_GENERAL_NAME_value() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482766/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

NULL pointer dereference in get_san_or_cn_from_cert() in src=
/coap_openssl.c in
OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via=
 a
crafted X.509 certificate that causes sk_GENERAL_NAME_value() to return NUL=
L.

References:
https://github.com/ob=
gm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65494
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65494
https://github.com/=
obgm/libcoap/issues/1745

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639976450.20F27.6875--


--17639977760.1957654ba.6887
Date: Mon, 24 Nov 2025 15:22:56 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254189

            Bug ID: 1254189
           Summary: VUL-0: CVE-2025-65496: libcoap: null pointer dereference in SSL_get_SSL_CTX() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482768/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl=
.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/obgm/libcoap/pull/1750
https://github.com/obgm/libcoap/issues/1745
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65496
https://www.cve.org/CVERecord?id=3DCVE-2025-65496
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639977760.1957654ba.6887
Date: Mon, 24 Nov 2025 15:22:56 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254189

          Summary
          VUL-0: CVE-2025-65496: libcoap: null pointer dereference in S=
SL_get_SSL_CTX() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482768/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

NULL pointer dereference in coap_dtls_generate_cookie() in s=
rc/coap_openssl.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/ob=
gm/libcoap/pull/1750
https://github.com/=
obgm/libcoap/issues/1745
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65496
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65496

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639977760.1957654ba.6887--


--17639979197.536fd.6905
Date: Mon, 24 Nov 2025 15:25:19 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254190

            Bug ID: 1254190
           Summary: VUL-0: CVE-2025-65497: libcoap: null pointer dereference in coap_dtls_generate_cookie() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482769/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl=
.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/obgm/libcoap/pull/1750
https://github.com/obgm/libcoap/issues/1745
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65497
https://www.cve.org/CVERecord?id=3DCVE-2025-65497
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639979197.536fd.6905
Date: Mon, 24 Nov 2025 15:25:19 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254190

          Summary
          VUL-0: CVE-2025-65497: libcoap: null pointer dereference in c=
oap_dtls_generate_cookie() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482769/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

NULL pointer dereference in coap_dtls_generate_cookie() in s=
rc/coap_openssl.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/ob=
gm/libcoap/pull/1750
https://github.com/=
obgm/libcoap/issues/1745
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65497
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65497

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639979197.536fd.6905--


--17639980401.1D8eAaA14.6911
Date: Mon, 24 Nov 2025 15:27:20 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254191

            Bug ID: 1254191
           Summary: VUL-0: CVE-2025-65495: libcoap: integer signedness error in tls_verify_call_back() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482767/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in
OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via=
 a
crafted TLS certificate that causes i2d_X509() to return -1 and be misused =
as a
malloc() size parameter.

References:
https://github.com/obgm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65495
https://www.cve.org/CVERecord?id=3DCVE-2025-65495
https://github.com/obgm/libcoap/issues/1744
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639980401.1D8eAaA14.6911
Date: Mon, 24 Nov 2025 15:27:20 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254191

          Summary
          VUL-0: CVE-2025-65495: libcoap: integer signedness error in t=
ls_verify_call_back() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482767/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Integer signedness error in tls_verify_call_back() in src/co=
ap_openssl.c in
OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via=
 a
crafted TLS certificate that causes i2d_X509() to return -1 and be misused =
as a
malloc() size parameter.

References:
https://github.com/ob=
gm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65495
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65495
https://github.com/=
obgm/libcoap/issues/1744

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639980401.1D8eAaA14.6911--


--17639981161.Ef021.6917
Date: Mon, 24 Nov 2025 15:28:36 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254192

            Bug ID: 1254192
           Summary: VUL-0: CVE-2025-65500: libcoap: null pointer dereference in coap_dtls_generate_cookie() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482772/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl=
.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/obgm/libcoap/pull/1750
https://github.com/obgm/libcoap/issues/1746
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65500
https://www.cve.org/CVERecord?id=3DCVE-2025-65500
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639981161.Ef021.6917
Date: Mon, 24 Nov 2025 15:28:36 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254192

          Summary
          VUL-0: CVE-2025-65500: libcoap: null pointer dereference in c=
oap_dtls_generate_cookie() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482772/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

NULL pointer dereference in coap_dtls_generate_cookie() in s=
rc/coap_openssl.c
in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service =
via
a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.

References:
https://github.com/ob=
gm/libcoap/pull/1750
https://github.com/=
obgm/libcoap/issues/1746
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65500
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65500

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639981161.Ef021.6917--


--17639981725.9f6B.6923
Date: Mon, 24 Nov 2025 15:29:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254193

            Bug ID: 1254193
           Summary: VUL-0: CVE-2025-65501: libcoap: null pointer dereference in coap_dtls_info_callback() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482773/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5
allows remote attackers to cause a denial of service via a DTLS handshake w=
here
SSL_get_app_data() returns NULL.

References:
https://github.com/obgm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65501
https://www.cve.org/CVERecord?id=3DCVE-2025-65501
https://github.com/obgm/libcoap/issues/1748
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639981725.9f6B.6923
Date: Mon, 24 Nov 2025 15:29:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254193

          Summary
          VUL-0: CVE-2025-65501: libcoap: null pointer dereference in c=
oap_dtls_info_callback() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482773/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Null pointer dereference in coap_dtls_info_callback() in OIS=
M libcoap 4.3.5
allows remote attackers to cause a denial of service via a DTLS handshake w=
here
SSL_get_app_data() returns NULL.

References:
https://github.com/ob=
gm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65501
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65501
https://github.com/=
obgm/libcoap/issues/1748

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639981725.9f6B.6923--


--17639982443.a2b999a.6935
Date: Mon, 24 Nov 2025 15:30:44 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254194

            Bug ID: 1254194
           Summary: VUL-0: CVE-2025-65499: libcopa: array index error in tls_verify_call_back() can cause a denial of service
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/482771/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: Andreas.Stieger-at-gmx.de
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM
libcoap 4.3.5 allows remote attackers to cause a denial of service via a
crafted DTLS handshake that triggers SSL_get_ex_data_X509_STORE_CTX_idx() to
return -1.

References:
https://github.com/obgm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65499
https://www.cve.org/CVERecord?id=3DCVE-2025-65499
https://github.com/obgm/libcoap/issues/1747
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17639982443.a2b999a.6935
Date: Mon, 24 Nov 2025 15:30:44 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254194

          Summary
          VUL-0: CVE-2025-65499: libcopa: array index error in tls_veri=
fy_call_back() can cause a denial of service

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/482771/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          Andreas.Stieger@gmx.de

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Array index error in tls_verify_call_back() in src/coap_open=
ssl.c in OISM
libcoap 4.3.5 allows remote attackers to cause a denial of service via a
crafted DTLS handshake that triggers SSL_get_ex_data_X509_STORE_CTX_idx() to
return -1.

References:
https://github.com/ob=
gm/libcoap/pull/1750
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-65499
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-65499
https://github.com/=
obgm/libcoap/issues/1747

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17639982443.a2b999a.6935--


--17640711800.aDa0.8459
Date: Tue, 25 Nov 2025 11:46:20 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254218

            Bug ID: 1254218
           Summary: AUDIT-0: account-utils: review of pam_unix_ng.so
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: matthias.gerstner-at-suse.com
          Reporter: matthias.gerstner-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: kukuk-at-suse.com, matthias.gerstner-at-suse.com,
                    security-team-at-suse.de
            Blocks: 1253052
  Target Milestone: ---
          Found By: ---
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1253052

This sub-bug keeps track of the review of the new pam_unix_ng PAM module.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17640711800.aDa0.8459
Date: Tue, 25 Nov 2025 11:46:20 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254218

          Summary
          AUDIT-0: account-utils: review of pam_unix_ng.so

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          matthias.gerstner@suse.com

          Reporter
          matthias.gerstner@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          kukuk@suse.com, matthias.gerstner@suse.com, security-=
team@suse.de

          Blocks
          1253052

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1253052

This sub-bug keeps track of the review of the new pam_unix_ng PAM module.</=
pre>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17640711800.aDa0.8459--


--17641537961.8C77E4b.10213
Date: Wed, 26 Nov 2025 10:43:16 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254253

            Bug ID: 1254253
           Summary: [Build M.80.1] openQA test fails in journal_check - syntax error in transactional-update 5.5.1
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/5478555/modules/jour
                    nal_check/steps/22
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: santiago.zarate-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

At least since: https://build.opensuse.org/requests/1318427
(transactional-update 5.5.1) there's a syntax error reported by
transactional-update:

> Nov 25 09:24:48.998762 localhost.localdomain transactional-update[1567]: =
/sbin/transactional-update: line 932: [: : integer expected

This is easy to reproduce with the images from staging:

> localhost:~ # transactional-update pkg install htop
> Checking for newer version.
> /sbin/transactional-update: line 932: [: : integer expected
> transactional-update 5.5.1 started
> Options: pkg install htop

openQA test in scenario
microos-Staging:M-Staging-DVD-x86_64-microos@uefi-staging fails in
[journal_check](https://openqa.opensuse.org/tests/5478555/modules/journal_c=
heck/steps/22)

## Test suite description

## Reproducible

Fails since (at least) Build
[M.76.1](https://openqa.opensuse.org/tests/5444032)

## Expected result

Last good: [M.75.1](https://openqa.opensuse.org/tests/5439029) (or more rec=
ent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dmi=
croos&flavor=3DStaging-DVD&machine=3Duefi-staging&test=3Dmicroos&version=3D=
Staging%3AM)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17641537961.8C77E4b.10213
Date: Wed, 26 Nov 2025 10:43:16 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254253

          Summary
          [Build M.80.1] openQA test fails in journal_check - syntax er=
ror in transactional-update 5.5.1

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/5478555/modules/journal_che=
ck/steps/22

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          santiago.zarate@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

At least since: htt=
ps://build.opensuse.org/requests/1318427
(transactional-update 5.5.1) there's a syntax error reported by
transactional-update:

> Nov 25 09:24:48.998762 localhost.localdomain tra=
nsactional-update[1567]: /sbin/transactional-update: line 932: [: : integer=
 expected

This is easy to reproduce with the images from staging:

> localhost:~ # transactional-update pkg install h=
top
> Checking for newer version.
> /sbin/transactional-update: line 932: [: : integer expected
> transactional-update 5.5.1 started
> Options: pkg install htop

openQA test in scenario
microos-Staging:M-Staging-DVD-x86_64-microos@uefi-staging fails in
[journal_check](https://openqa.opensuse.org/tests/5478555/modules=
/journal_check/steps/22)

## Test suite description

## Reproducible

Fails since (at least) Build
[M.76.1](https://open=
qa.opensuse.org/tests/5444032)

## Expected result

Last good: [M.75.1](h=
ttps://openqa.opensuse.org/tests/5439029) (or more recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tes=
ts/latest?arch=3Dx86_64&distri=3Dmicroos&flavor=3DStaging-DVD&m=
achine=3Duefi-staging&test=3Dmicroos&version=3DStaging%3AM)</pr=
e>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17641537961.8C77E4b.10213--


--17642187760.1AC5fF3.11943
Date: Thu, 27 Nov 2025 04:46:16 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254285

            Bug ID: 1254285
           Summary: VUL-0: CVE-2025-66040: python-spotipy: Prior to version 2.25.2, there is a cross-site scripting (XSS) vulnerability in the OAuth callback server that allows for JavaScript injection through the unsanitized error parameter.
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/483136/
                OS: Other
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Security
          Assignee: python-maintainers-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

Spotipy is a Python library for the Spotify Web API. Prior to version 2.25.=
2,
there is a cross-site scripting (XSS) vulnerability in the OAuth callback
server that allows for JavaScript injection through the unsanitized error
parameter. Attackers can execute arbitrary JavaScript in the user's browser
during OAuth authentication. This issue has been patched in version 2.25.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-66040
https://www.cve.org/CVERecord?id=3DCVE-2025-66040
https://github.com/spotipy-dev/spotipy/commit/880b92d7243dcf2b83bf31dc365a8=
58d8b5e6767
https://github.com/spotipy-dev/spotipy/security/advisories/GHSA-r77h-rpp9-w=
2xm
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17642187760.1AC5fF3.11943
Date: Thu, 27 Nov 2025 04:46:16 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254285

          Summary
          VUL-0: CVE-2025-66040: python-spotipy: Prior to version 2.25.=
2, there is a cross-site scripting (XSS) vulnerability in the OAuth callbac=
k server that allows for JavaScript injection through the unsanitized error=
 parameter.

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/483136/

          OS
          Other

          Status
          NEW

          Severity
          Minor

          Priority
          P5 - None

          Component
          Security

          Assignee
          python-maintainers@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

Spotipy is a Python library for the Spotify Web API. Prior t=
o version 2.25.2,
there is a cross-site scripting (XSS) vulnerability in the OAuth callback
server that allows for JavaScript injection through the unsanitized error
parameter. Attackers can execute arbitrary JavaScript in the user's browser
during OAuth authentication. This issue has been patched in version 2.25.2.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-66040
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-66040
https://github.com/spotipy-dev/spotipy/commit/880b9=
2d7243dcf2b83bf31dc365a858d8b5e6767
https://github.com/spotipy-dev/spotipy/security/advisories/=
GHSA-r77h-rpp9-w2xm

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17642187760.1AC5fF3.11943--


--17642343322.8D5aAA.12195
Date: Thu, 27 Nov 2025 09:05:32 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254289

            Bug ID: 1254289
           Summary: VUL-0: CVE-2021-4472: python-mistralclient: a local file inclusion may result in disclosure of arbitrary files content
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/483080/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: dmueller-at-suse.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: serena.ferracci-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

The mistral-dashboard plugin for openstack has a local file inclusion
vulnerability through the 'Create Workbook' feature that may result in
disclosure of arbitrary local files content.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2021-4472
https://bugzilla.redhat.com/show_bug.cgi?id=3D2417321
https://www.cve.org/CVERecord?id=3DCVE-2021-4472
https://access.redhat.com/security/cve/CVE-2021-4472
https://bugs.launchpad.net/horizon/+bug/1931558
https://review.opendev.org/c/openstack/mistral-dashboard/+/800952
https://review.opendev.org/c/openstack/python-mistralclient/+/800950
https://github.com/CVEProject/cvelistV5/blob/main//cves/2021/4xxx/CVE-2021-=
4472.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17642343322.8D5aAA.12195
Date: Thu, 27 Nov 2025 09:05:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254289

          Summary
          VUL-0: CVE-2021-4472: python-mistralclient: a local file incl=
usion may result in disclosure of arbitrary files content

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/483080/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          dmueller@suse.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          serena.ferracci@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

The mistral-dashboard plugin for openstack has a local file =
inclusion
vulnerability through the 'Create Workbook' feature that may result in
disclosure of arbitrary local files content.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2021-4472
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2417321
https://www.cv=
e.org/CVERecord?id=3DCVE-2021-4472
https://ac=
cess.redhat.com/security/cve/CVE-2021-4472
https://bugs.la=
unchpad.net/horizon/+bug/1931558
https://review.opendev.org/c/openstack/mistral-dashboard/+/800952
https://review.opendev.org/c/openstack/python-mistralclient/+/800950<=
/a>
https://github.com/CVEProject/cvelistV5/blob/main//cv=
es/2021/4xxx/CVE-2021-4472.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17642343322.8D5aAA.12195--


--17646278683.F4b6f44C.21119
Date: Mon, 1 Dec 2025 22:24:28 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254389

            Bug ID: 1254389
           Summary: Kaidan cannot be installed or updated from MAIN repo
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: KDE Applications
          Assignee: opensuse-kde-bugs-at-opensuse.org
          Reporter: rskunath-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Using the version of Kaidan in the MAIN repo it cannot be installed because=
 of
a missing dependency:

nothing provides 'libQt6Gui.so.6(Qt_6.10.0_PRIVATE_API)(64bit)' needed by t=
he
to be installed kaidan-0.13.0-1.3.x86_64

This I discovered after a recent update to Tumbleweed and Kaidan could not =
be
updated.

TIA
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17646278683.F4b6f44C.21119
Date: Mon, 1 Dec 2025 22:24:28 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254389

          Summary
          Kaidan cannot be installed or updated from MAIN repo

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          KDE Applications

          Assignee
          opensuse-kde-bugs@opensuse.org

          Reporter
          rskunath@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Using the version of Kaidan in the MAIN repo it cannot be in=
stalled because of
a missing dependency:

nothing provides 'libQt6Gui.so.6(Qt_6.10.0_PRIVATE_API)(64bit)' needed by t=
he
to be installed kaidan-0.13.0-1.3.x86_64

This I discovered after a recent update to Tumbleweed and Kaidan could not =
be
updated.

TIA

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17646278683.F4b6f44C.21119--


--17646660980.d20AcEd.21482
Date: Tue, 2 Dec 2025 09:01:38 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1254398

            Bug ID: 1254398
           Summary: VUL-0: CVE-2025-34297: kissfft: KissFFT Integer Overflow Heap Buffer Overflow via kiss_fft_alloc
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 16.1
          Hardware: Other
               URL: https://smash.suse.de/issue/483419/
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: aloisio-at-gmx.com
          Reporter: smash_bz-at-suse.de
        QA Contact: security-team-at-suse.de
                CC: stoyan.manolov-at-suse.com
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

KissFFT versions prior to the fix commit 1b083165 contain an integer overfl=
ow
in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. The =
nfft
parameter is not validated before being used in a size calculation
(sizeof(kiss_fft_cpx) * (nfft - 1)), which can wrap to a small value when n=
fft
is large. As a result, malloc() allocates an undersized buffer and the
subsequent twiddle-factor initialization loop writes nfft elements, causing=
 a
heap buffer overflow. This vulnerability only affects 32-bit architectures.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-34297
https://www.cve.org/CVERecord?id=3DCVE-2025-34297
https://github.com/mborgerding/kissfft/commit/1b08316582049c3716154caefc0de=
ab8758506e3
https://github.com/mborgerding/kissfft/issues/120
https://www.vulncheck.com/advisories/kissfft-integer-overflow-heap-buffer-o=
verflow
https://bugzilla.redhat.com/show_bug.cgi?id=3D2418080
https://github.com/CVEProject/cvelistV5/blob/main//cves/2025/34xxx/CVE-2025=
-34297.json
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17646660980.d20AcEd.21482
Date: Tue, 2 Dec 2025 09:01:38 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1254398

          Summary
          VUL-0: CVE-2025-34297: kissfft: KissFFT Integer Overflow Heap=
 Buffer Overflow via kiss_fft_alloc

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 16.1

          Hardware
          Other

          URL
          https://smash.suse.de/issue/483419/

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          aloisio@gmx.com

          Reporter
          smash_bz@suse.de

          QA Contact
          security-team@suse.de

          CC
          stoyan.manolov@suse.com

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

KissFFT versions prior to the fix commit 1b083165 contain an=
 integer overflow
in kiss_fft_alloc() in kiss_fft.c on platforms where size_t is 32-bit. The =
nfft
parameter is not validated before being used in a size calculation
(sizeof(kiss_fft_cpx) * (nfft - 1)), which can wrap to a small value when n=
fft
is large. As a result, malloc() allocates an undersized buffer and the
subsequent twiddle-factor initialization loop writes nfft elements, causing=
 a
heap buffer overflow. This vulnerability only affects 32-bit architectures.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2025-34297
https://www.c=
ve.org/CVERecord?id=3DCVE-2025-34297
https://github.com/mborgerding/kissfft/commit/1b083=
16582049c3716154caefc0deab8758506e3
https://githu=
b.com/mborgerding/kissfft/issues/120
https://www.vulncheck.com/advisories/kissfft-integer-ov=
erflow-heap-buffer-overflow
https://b=
ugzilla.redhat.com/show_bug.cgi?id=3D2418080
https://github.com/CVEProject/cvelistV5/blob/main//=
cves/2025/34xxx/CVE-2025-34297.json

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17646660980.d20AcEd.21482--