Операционные системы: уязвимости стека · Страница 57

Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

• Обновитесь до 13-160000.1.1

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

• Обновитесь до 10-160000.1.1

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). - CVE-2026-64054:

• Обновитесь до 9-160000.1.1

Security update for squid

This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). - CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). - CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). - CVE-2026-47729: out-of-bounds

• Обновитесь до 5.7-150400.3.41.1

Security update for openssh8.4

This update for openssh8.4 fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). - CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). - CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). - CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). - CVE-2026-60001: sshd: honor th

• Обновитесь до 8.4p1-8.30.1

Security update for krb5

This update for krb5 fixes the following issues: - CVE-2026-107708: Denial of Service via malformed PAC in S4U2Proxy requests (bsc#1284816). - CVE-2026-107778: Denial of Service via crafted forwarded credentials (bsc#1284817).

• Обновитесь до 1.20.1-150500.3.26.1

Security update for python, python-base, python-doc

This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).

• Обновитесь до 2.7.18-33.93.1

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285283). - CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285135). Changes for google-osconfig-agent: - Update to version 20261015.00 * Add scalibr os benchmarks (#1044)

• Обновитесь до 20261015.00-159998.1.1

GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

traefik-3.7.16-1.1 on GA media

These are all security issues fixed in the traefik-3.7.16-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.7.16-1.1

python313-nltk-3.10.4-1.1 on GA media

These are all security issues fixed in the python313-nltk-3.10.4-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.10.4-1.1

python313-langgraph-sdk-0.4.9-1.1 on GA media

These are all security issues fixed in the python313-langgraph-sdk-0.4.9-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.4.9-1.1

python313-fpdf2-2.8.9-2.1 on GA media

These are all security issues fixed in the python313-fpdf2-2.8.9-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 2.8.9-2.1

python313-djangorestframework-3.18.2-1.1 on GA media

These are all security issues fixed in the python313-djangorestframework-3.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.18.2-1.1

perl-Starman-0.4019-1.1 on GA media

These are all security issues fixed in the perl-Starman-0.4019-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.4019-1.1

perl-Plack-1.0057-1.1 on GA media

These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.0057-1.1

libonnxruntime1-1.31.0-1.1 on GA media

These are all security issues fixed in the libonnxruntime1-1.31.0-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.31.0-1.1

benchdnn-3.14-1.1 on GA media

These are all security issues fixed in the benchdnn-3.14-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.14-1.1

liblldpctl4-1.0.23-1.1 on GA media

These are all security issues fixed in the liblldpctl4-1.0.23-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.0.23-1.1

kured-1.23.0-1.1 on GA media

These are all security issues fixed in the kured-1.23.0-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.23.0-1.1