Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1378-1

Опубликовано: 16 апр. 2026
Источник: suse-cvrf

Описание

Security update for kea

This update for kea fixes the following issues:

Update to release 2.6.5:

  • A large number of bracket pairs in a JSON payload directed to any endpoint would result in a stack overflow, due to recursive calls when parsing the JSON. This has been fixed. (CVE-2026-3608) [bsc#1260380]
  • A null dereference is now no longer possible when configuring the Control Agent with a socket that lacks the mandatory socket-name entry.
  • UNIX sockets are now created as group-writable.
  • Corrected an issue in logging configuration when parsing 'syslog:'
  • Earlier Kea versions could crash when handling misconfigured global reservations. This has been fixed.
  • Support for recent versions of Sphinx has been added.

Список пакетов

Container suse/kea:2.6
kea-2.6.5-150700.3.6.1
libkea-asiodns49-2.6.5-150700.3.6.1
libkea-asiolink72-2.6.5-150700.3.6.1
libkea-cc69-2.6.5-150700.3.6.1
libkea-cfgclient67-2.6.5-150700.3.6.1
libkea-cryptolink50-2.6.5-150700.3.6.1
libkea-d2srv47-2.6.5-150700.3.6.1
libkea-database62-2.6.5-150700.3.6.1
libkea-dhcp++92-2.6.5-150700.3.6.1
libkea-dhcp_ddns57-2.6.5-150700.3.6.1
libkea-dhcpsrv112-2.6.5-150700.3.6.1
libkea-dns++57-2.6.5-150700.3.6.1
libkea-eval69-2.6.5-150700.3.6.1
libkea-exceptions33-2.6.5-150700.3.6.1
libkea-hooks102-2.6.5-150700.3.6.1
libkea-http72-2.6.5-150700.3.6.1
libkea-log61-2.6.5-150700.3.6.1
libkea-mysql71-2.6.5-150700.3.6.1
libkea-pgsql71-2.6.5-150700.3.6.1
libkea-process76-2.6.5-150700.3.6.1
libkea-stats41-2.6.5-150700.3.6.1
libkea-util87-2.6.5-150700.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
python3-kea-2.6.5-150700.3.6.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
kea-2.6.5-150700.3.6.1
kea-devel-2.6.5-150700.3.6.1
kea-doc-2.6.5-150700.3.6.1
kea-hooks-2.6.5-150700.3.6.1
libkea-asiodns49-2.6.5-150700.3.6.1
libkea-asiolink72-2.6.5-150700.3.6.1
libkea-cc69-2.6.5-150700.3.6.1
libkea-cfgclient67-2.6.5-150700.3.6.1
libkea-cryptolink50-2.6.5-150700.3.6.1
libkea-d2srv47-2.6.5-150700.3.6.1
libkea-database62-2.6.5-150700.3.6.1
libkea-dhcp++92-2.6.5-150700.3.6.1
libkea-dhcp_ddns57-2.6.5-150700.3.6.1
libkea-dhcpsrv112-2.6.5-150700.3.6.1
libkea-dns++57-2.6.5-150700.3.6.1
libkea-eval69-2.6.5-150700.3.6.1
libkea-exceptions33-2.6.5-150700.3.6.1
libkea-hooks102-2.6.5-150700.3.6.1
libkea-http72-2.6.5-150700.3.6.1
libkea-log61-2.6.5-150700.3.6.1
libkea-mysql71-2.6.5-150700.3.6.1
libkea-pgsql71-2.6.5-150700.3.6.1
libkea-process76-2.6.5-150700.3.6.1
libkea-stats41-2.6.5-150700.3.6.1
libkea-tcp19-2.6.5-150700.3.6.1
libkea-util-io0-2.6.5-150700.3.6.1
libkea-util87-2.6.5-150700.3.6.1

Ссылки

Описание

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

Затронутые продукты
Container suse/kea:2.6:kea-2.6.5-150700.3.6.1
Container suse/kea:2.6:libkea-asiodns49-2.6.5-150700.3.6.1
Container suse/kea:2.6:libkea-asiolink72-2.6.5-150700.3.6.1
Container suse/kea:2.6:libkea-cc69-2.6.5-150700.3.6.1
Ссылки