Операционные системы: уязвимости стека · Страница 59

Security update for openssh8.4

This update for openssh8.4 fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). - CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). - CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). - CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). - CVE-2026-60001: sshd: honor th

• Обновитесь до 8.4p1-8.30.1

Security update for krb5

This update for krb5 fixes the following issues: - CVE-2026-107708: Denial of Service via malformed PAC in S4U2Proxy requests (bsc#1284816). - CVE-2026-107778: Denial of Service via crafted forwarded credentials (bsc#1284817).

• Обновитесь до 1.20.1-150500.3.26.1

Security update for python, python-base, python-doc

This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).

• Обновитесь до 2.7.18-33.93.1

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285283). - CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285135). Changes for google-osconfig-agent: - Update to version 20261015.00 * Add scalibr os benchmarks (#1044)

• Обновитесь до 20261015.00-159998.1.1

GNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow

A security vulnerability has been detected in GNOME libgsf up to 1.14.60. The impacted element is the function ole_info_read_metabat of the file gsf/gsf-infile-msole.c of the component OLE2 Parser. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The identifier of the patch is a8e25560b74f84c3f86df6ca0ac59195fa5af68a. It is recommended to apply a patch to fix this issue.

traefik-3.7.16-1.1 on GA media

These are all security issues fixed in the traefik-3.7.16-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.7.16-1.1

python313-nltk-3.10.4-1.1 on GA media

These are all security issues fixed in the python313-nltk-3.10.4-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.10.4-1.1

python313-langgraph-sdk-0.4.9-1.1 on GA media

These are all security issues fixed in the python313-langgraph-sdk-0.4.9-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.4.9-1.1

python313-fpdf2-2.8.9-2.1 on GA media

These are all security issues fixed in the python313-fpdf2-2.8.9-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 2.8.9-2.1

python313-djangorestframework-3.18.2-1.1 on GA media

These are all security issues fixed in the python313-djangorestframework-3.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.18.2-1.1

perl-Starman-0.4019-1.1 on GA media

These are all security issues fixed in the perl-Starman-0.4019-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.4019-1.1

perl-Plack-1.0057-1.1 on GA media

These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.0057-1.1

libonnxruntime1-1.31.0-1.1 on GA media

These are all security issues fixed in the libonnxruntime1-1.31.0-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.31.0-1.1

benchdnn-3.14-1.1 on GA media

These are all security issues fixed in the benchdnn-3.14-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 3.14-1.1

liblldpctl4-1.0.23-1.1 on GA media

These are all security issues fixed in the liblldpctl4-1.0.23-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.0.23-1.1

kured-1.23.0-1.1 on GA media

These are all security issues fixed in the kured-1.23.0-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.23.0-1.1

flannel-0.28.10-1.1 on GA media

These are all security issues fixed in the flannel-0.28.10-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 0.28.10-1.1

dlib-devel-20.0.1-1.1 on GA media

These are all security issues fixed in the dlib-devel-20.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 20.0.1-1.1

azure-storage-azcopy-10.34.1-1.1 on GA media

These are all security issues fixed in the azure-storage-azcopy-10.34.1-1.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 10.34.1-1.1

amazon-cloudwatch-agent-1.300073.2-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.2-2.1 package on the GA media of openSUSE Tumbleweed.

• Обновитесь до 1.300073.2-2.1