Операционные системы: уязвимости стека · Страница 200

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:0.162.0-0.1.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:0.162.0-0.1.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:3.1.2-0.1.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

• Обновитесь до 0:3.1.3-0.2.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:1.27.1-2.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:3.7.2-0.1.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

• Обновитесь до 0:2.46.1-1.2.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

• Обновитесь до 0:13.1.3-0.7.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:1.28-2.hum1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

• Обновитесь до 0:4.2.0-1.hum1

Security update for libXi

This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in li

• Обновитесь до 1.8.1-159998.1.1

Security update for rekor

This update for rekor rebuilds it against the current go security release.

• Обновитесь до 1.4.3-150400.4.40.1

Security update for unbound

This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission (bsc#1280405). - CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). - CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). - CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). - CVE-2026-827

• Обновитесь до 1.26.1-slfo.1.1_1.1

QBinaryJson::fromBinaryData() integer overflow leading to OOB read

A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read.

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. (bsc#1268596) - Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC-843, bsc#1268900). - Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed. (bsc#1159776) - InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478). - Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE v

• Обновитесь до 1.23.0-150500.3.48.1

Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled (specified in the KmsConnectionConfig) or file-controlled. If the user does not leverage application control for this parameter, a file-controlled KMS URL is forwarded to a pluggable KmsClient implementation. If the KMS implementation does not perform host validation and makes use of the provided KMS URL, a KMS token can be sent to a malicious ho

• Обновитесь до 26.0.0

fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize(), normalize(), or resolve() are called with the non-default option reference set to suffix on a reference that has no authority, the emitted relative reference can contain a bare colon in its first path segment without escaping it, even though RFC 3986 forbids that because it makes the string reparse as an absolute URI with a scheme. An application that serializes or normalizes a relative reference with the suffix option and then treats the result as a URI can turn iner

• Обновитесь до 2.4.8
• Обновитесь до 3.1.9
• Обновитесь до 4.2.3
• Обновитесь до 8.20.0~ds+~cs7.2.4-1

fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape() function before validating it, so an input whose decoded scheme is a dangerous token is emitted as a live scheme even though RFC 3986 does not allow percent-encoding in a scheme and no other parser accepts it. An application that screens dangerous schemes on the raw input and then stores or renders the normalized or resolved result can turn an inert string into an executable javascript, data, or vbscript UR

• Обновитесь до 2.4.8
• Обновитесь до 3.1.9
• Обновитесь до 4.2.3
• Обновитесь до 8.20.0~ds+~cs7.2.4-1

fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost() function passes the parsed host to the WHATWG URL parser and adopts its hostname without checking that the parser consumed the entire input as a host, so the authority can be silently rewritten: data before an at-sign is dropped and tab, carriage-return, and line-feed characters are stripped, with no error reported. An application that enforces host-based policy such as denylists, loopback filtering, redirect validation, or out

• Обновитесь до 2.4.8
• Обновитесь до 3.1.9
• Обновитесь до 4.2.3
• Обновитесь до 8.20.0~ds+~cs7.2.4-1

fast-uri vulnerable to improper path equivalence in relative reference normalization

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and serialize() functions apply RFC 3986 dot-segment removal to the path of a relative-path reference, even though that algorithm is defined only for the merged target path during resolution, so a leading parent-directory segment can be dropped and a document-relative reference can become root-relative. An application that normalizes an attacker-supplied or user-supplied relative reference and then resolves it, or uses it as a cache, deduplication, or authorization key,

• Обновитесь до 2.4.8
• Обновитесь до 3.1.9
• Обновитесь до 4.2.3
• Обновитесь до 8.20.0~ds+~cs7.2.4-1