SUSE-SU-2026:23572-1: gstreamer-devtools&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2026:23572-1 is a vulnerability in gstreamer-devtools&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 30-08-2026
   PublishedVulnerability first disclosed.
2. 29-09-2026
   Last modifiedVulnerability information updated.

Description

Security update for gstreamer-devtools This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal `Channel` type's `Drop` method has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output when logged and lead to terminal manipulation (bsc#1249015). - CVE-2026-25541: bytes: integer overflow in `BytesMut:reserve` can lead to undefined behavior and crashes (bsc#1274306). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257914). - CVE-2026-72813: actix-files: empty `Range` header in GET requests for static files can lead to a process crash (bsc#1275210). - CVE-2026-72814: actix-files: non-existing folders passed as an argument to the `actix_files::Files::new()` method can lead to information disclosure (bsc#1275209).

No weakness data has been published for this record.