Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1548-1

Опубликовано: 22 апр. 2026
Источник: suse-cvrf

Описание

Security update for kea

This update for kea fixes the following issues:

Update to release 2.6.5.

Security issues fixed:

  • CVE-2026-3608: stack overflow error via specially crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons(bsc#1260380).

Other updates and bugfixes:

  • A null dereference is now no longer possible when configuring the Control Agent with a socket that lacks the mandatory socket-name entry.
  • UNIX sockets are now created as group-writable.
  • Corrected an issue in logging configuration when parsing 'syslog:'.
  • Fixed crash when handling misconfigured global reservations.
  • Support for recent versions of Sphinx has been added.

Список пакетов

SUSE Linux Enterprise Server 15 SP6-LTSS
kea-2.6.5-150600.13.9.1
kea-devel-2.6.5-150600.13.9.1
kea-doc-2.6.5-150600.13.9.1
kea-hooks-2.6.5-150600.13.9.1
libkea-asiodns49-2.6.5-150600.13.9.1
libkea-asiolink72-2.6.5-150600.13.9.1
libkea-cc69-2.6.5-150600.13.9.1
libkea-cfgclient67-2.6.5-150600.13.9.1
libkea-cryptolink50-2.6.5-150600.13.9.1
libkea-d2srv47-2.6.5-150600.13.9.1
libkea-database62-2.6.5-150600.13.9.1
libkea-dhcp++92-2.6.5-150600.13.9.1
libkea-dhcp_ddns57-2.6.5-150600.13.9.1
libkea-dhcpsrv112-2.6.5-150600.13.9.1
libkea-dns++57-2.6.5-150600.13.9.1
libkea-eval69-2.6.5-150600.13.9.1
libkea-exceptions33-2.6.5-150600.13.9.1
libkea-hooks102-2.6.5-150600.13.9.1
libkea-http72-2.6.5-150600.13.9.1
libkea-log61-2.6.5-150600.13.9.1
libkea-mysql71-2.6.5-150600.13.9.1
libkea-pgsql71-2.6.5-150600.13.9.1
libkea-process76-2.6.5-150600.13.9.1
libkea-stats41-2.6.5-150600.13.9.1
libkea-tcp19-2.6.5-150600.13.9.1
libkea-util-io0-2.6.5-150600.13.9.1
libkea-util87-2.6.5-150600.13.9.1
python3-kea-2.6.5-150600.13.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
kea-2.6.5-150600.13.9.1
kea-devel-2.6.5-150600.13.9.1
kea-doc-2.6.5-150600.13.9.1
kea-hooks-2.6.5-150600.13.9.1
libkea-asiodns49-2.6.5-150600.13.9.1
libkea-asiolink72-2.6.5-150600.13.9.1
libkea-cc69-2.6.5-150600.13.9.1
libkea-cfgclient67-2.6.5-150600.13.9.1
libkea-cryptolink50-2.6.5-150600.13.9.1
libkea-d2srv47-2.6.5-150600.13.9.1
libkea-database62-2.6.5-150600.13.9.1
libkea-dhcp++92-2.6.5-150600.13.9.1
libkea-dhcp_ddns57-2.6.5-150600.13.9.1
libkea-dhcpsrv112-2.6.5-150600.13.9.1
libkea-dns++57-2.6.5-150600.13.9.1
libkea-eval69-2.6.5-150600.13.9.1
libkea-exceptions33-2.6.5-150600.13.9.1
libkea-hooks102-2.6.5-150600.13.9.1
libkea-http72-2.6.5-150600.13.9.1
libkea-log61-2.6.5-150600.13.9.1
libkea-mysql71-2.6.5-150600.13.9.1
libkea-pgsql71-2.6.5-150600.13.9.1
libkea-process76-2.6.5-150600.13.9.1
libkea-stats41-2.6.5-150600.13.9.1
libkea-tcp19-2.6.5-150600.13.9.1
libkea-util-io0-2.6.5-150600.13.9.1
libkea-util87-2.6.5-150600.13.9.1
python3-kea-2.6.5-150600.13.9.1

Ссылки

Описание

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2.

Затронутые продукты
SUSE Linux Enterprise Server 15 SP6-LTSS:kea-2.6.5-150600.13.9.1
SUSE Linux Enterprise Server 15 SP6-LTSS:kea-devel-2.6.5-150600.13.9.1
SUSE Linux Enterprise Server 15 SP6-LTSS:kea-doc-2.6.5-150600.13.9.1
SUSE Linux Enterprise Server 15 SP6-LTSS:kea-hooks-2.6.5-150600.13.9.1
Ссылки