Описание
Security update for cmake3
This update for cmake3 fixes the following issues:
- CVE-2025-9301: Fixed assertion failure due to improper validation (bsc#1248461)
Список пакетов
openSUSE Leap 15.6
cmake3-3.20.0-150200.6.6.1
cmake3-full-3.20.0-150200.6.6.1
Ссылки
- Link for SUSE-SU-2025:02975-1
- E-Mail link for SUSE-SU-2025:02975-1
- SUSE Security Ratings
- SUSE Bug 1248461
- SUSE CVE CVE-2025-9301 page
Описание
A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx. This manipulation causes reachable assertion. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Patch name: 37e27f71bc356d880c908040cd0cb68fa2c371b8. It is suggested to install a patch to address this issue.
Затронутые продукты
openSUSE Leap 15.6:cmake3-3.20.0-150200.6.6.1
openSUSE Leap 15.6:cmake3-full-3.20.0-150200.6.6.1
Ссылки
- CVE-2025-9301
- SUSE Bug 1248461