Операционные системы: уязвимости стека · Страница 196

Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303).

• Обновитесь до 11-150500.2.1
• Обновитесь до 17-2.1

Security update for gcc13

This update for gcc13 fixes the following issues: Security issue fixed: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: - Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: - Update to final GCC 13.5

• Обновитесь до 13.5.0+git10516-159998.1.1

ALPINE-CVE-2026-113351

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.

• Обновитесь до 2.10.0-r0

Cockpit-machines: cockpit-appstream: vnc console password disclosure through virt-xml command-line arguments

A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a command-line argument to an underlying system utility. A local unprivileged attacker on a host that allows cross-user process inspection could read the exposed password from the process list while another user modifies settings. This credential disclosure can allow unauthorized access to the guest virtual machine's graphical console.

• Обновитесь до 360-1

Cockpit-machines: cockpit-appstream: rhsm access-token disclosure through image helper command-line arguments

A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper processes during image retrieval operations. A local, unprivileged attacker on a system permitting cross-user process inspection can view these arguments while the process is active. This flaw can lead to information disclosure, potentially allowing unauthorized access to RHSM resources within the token's validity period.

• Обновитесь до 360-1

Security update for python3

This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599 bsc#1274743). - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429 bsc#1262467). - CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). - CVE-2026-3446:

• Обновитесь до 3.6.15-150300.10.129.1

Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). - CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). - CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). - CVE-2026-106571: a crafted local call to the GetVirtualPixels API can t

• Обновитесь до 6.8.8.1-71.280.1

DokuWiki before 2026-07-14c PHP Object Injection via Draft Race Condition

DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without restricting allowed classes. Authenticated users with edit rights can race concurrent draft rewrites to splice serialized data, instantiating gadgets like MemoryIndex or Installer for arbitrary file write, deletion, and code execution.

• Обновитесь до 2026-07-14.c+dfsg-1
• Обновитесь до 2026-07-14c

uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft_find_resumeable() loads, abusing FILE pointers to write /proc/self/mem and execute code.

libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset

libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the same reset parser fail with XML_ERROR_NO_MEMORY until it is recreated.

Red Hat Security Advisory: rust-sequoia-sq security update

Red Hat Security Advisory: rust-sequoia-sq security update

• Обновитесь до 0:1.4.0.1-4.el10_2

Red Hat Security Advisory: openssh security update

Red Hat Security Advisory: openssh security update

• Обновитесь до 0:9.9p1-29.el10_2

Red Hat Security Advisory: postgresql:18 security update

Red Hat Security Advisory: postgresql:18 security update

• Обновитесь до 0:0.8.7-1.module+el9.8.0+25065+515b563e
• Обновитесь до 0:1.5.3-1.module+el9.8.0+23739+1c42644c
• Обновитесь до 0:18.0-1.module+el9.8.0+23739+1c42644c
• Обновитесь до 0:3.6.1-4.module+el9.8.0+24879+1364ef12

Red Hat Security Advisory: postgresql:16 security update

Red Hat Security Advisory: postgresql:16 security update

• Обновитесь до 0:0.8.7-1.module+el9.8.0+25064+c8e71655
• Обновитесь до 0:1.5.1-1.module+el9.8.0+24090+8f0ee565
• Обновитесь до 0:16.0-1.module+el9.8.0+24090+8f0ee565
• Обновитесь до 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

• Обновитесь до 0:4.18.0-553.176.1.rt7.517.el8_10

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

• Обновитесь до 0:4.18.0-553.176.1.el8_10

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:13.2.4-0.1.hum1

Red Hat Security Advisory: bubblewrap security update

Red Hat Security Advisory: bubblewrap security update

• Обновитесь до 0:0.4.1-8.el9_6.1

Red Hat Security Advisory: bubblewrap security update

Red Hat Security Advisory: bubblewrap security update

• Обновитесь до 0:0.4.0-3.el8_6

Red Hat Security Advisory: bubblewrap security update

Red Hat Security Advisory: bubblewrap security update

• Обновитесь до 0:0.4.1-7.el9_2.1