SUSE-SU-2026:1941-1

Опубликовано: 18 мая 2026

Источник: suse-cvrf

Описание

Security update for sed

This update for sed fixes the following issue:

CVE-2026-5958: a TOCTOU race can allow to read attacker-controlled content and write it to an unintended file (bsc#1262144).

Список пакетов

Container bci/bci-init:latest

sed-4.9-150600.3.3.1

Container bci/bci-sle15-kernel-module-devel:latest

sed-4.9-150600.3.3.1

Container bci/openjdk-devel:17

sed-4.9-150600.3.3.1

Container bci/openjdk-devel:21

sed-4.9-150600.3.3.1

Container bci/openjdk-devel:latest

sed-4.9-150600.3.3.1

Container bci/openjdk:17

sed-4.9-150600.3.3.1

Container bci/openjdk:21

sed-4.9-150600.3.3.1

Container bci/openjdk:latest

sed-4.9-150600.3.3.1

Container suse/kea:2.6

sed-4.9-150600.3.3.1

Container suse/kiosk/firefox-esr:latest

sed-4.9-150600.3.3.1

Container suse/kiosk/pulseaudio:latest

sed-4.9-150600.3.3.1

Container suse/kiosk/xorg-client:latest

sed-4.9-150600.3.3.1

Container suse/kiosk/xorg:latest

sed-4.9-150600.3.3.1

Container suse/manager/5.0/x86_64/server:latest

sed-4.9-150600.3.3.1

Container suse/mariadb:latest

sed-4.9-150600.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:latest

sed-4.9-150600.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest

sed-4.9-150600.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:latest

sed-4.9-150600.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api:latest

sed-4.9-150600.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server-saline:latest

sed-4.9-150600.3.3.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

sed-4.9-150600.3.3.1

Container suse/postgres:16

sed-4.9-150600.3.3.1

Container suse/postgres:16.14

sed-4.9-150600.3.3.1

Container suse/postgres:17

sed-4.9-150600.3.3.1

Container suse/postgres:17.10

sed-4.9-150600.3.3.1

Container suse/postgres:latest

sed-4.9-150600.3.3.1

Container suse/sle15:latest

sed-4.9-150600.3.3.1

Container third-party/amd/amdgpu-driver:sles-15.7-30.20.1

sed-4.9-150600.3.3.1

Container third-party/amd/amdgpu-driver:sles-15.7-30.30.3

sed-4.9-150600.3.3.1

Container third-party/amd/amdgpu-driver:sles-15.7-31.10

sed-4.9-150600.3.3.1

Container third-party/amd/amdgpu-driver:sles-15.7-31.20

sed-4.9-150600.3.3.1

Container third-party/amd/amdgpu-driver:sles-15.7-31.30

sed-4.9-150600.3.3.1

Container third-party/nvidia/driver:550-sles15.7

sed-4.9-150600.3.3.1

Container third-party/nvidia/driver:570-sles15.7

sed-4.9-150600.3.3.1

Container third-party/nvidia/driver:575-sles15.7

sed-4.9-150600.3.3.1

Container third-party/nvidia/driver:580-sles15.7

sed-4.9-150600.3.3.1

Container third-party/nvidia/driver:590-sles15.7

sed-4.9-150600.3.3.1

Container third-party/nvidia/driver:595-sles15.7

sed-4.9-150600.3.3.1

Image SLES15-SP6

sed-4.9-150600.3.3.1

Image SLES15-SP6-Azure-3P

sed-4.9-150600.3.3.1

Image SLES15-SP6-Azure-Basic

sed-4.9-150600.3.3.1

Image SLES15-SP6-Azure-Standard

sed-4.9-150600.3.3.1

Image SLES15-SP6-BYOS

sed-4.9-150600.3.3.1

Image SLES15-SP6-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS-GDC

sed-4.9-150600.3.3.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

sed-4.9-150600.3.3.1

Image SLES15-SP6-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-EC2-ECS-HVM

sed-4.9-150600.3.3.1

Image SLES15-SP6-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-HPC-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-Hardened-BYOS

sed-4.9-150600.3.3.1

Image SLES15-SP6-Hardened-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-Hardened-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-Hardened-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Azure-3P

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-BYOS

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAPCAL

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAPCAL-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAPCAL-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP6-SAPCAL-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-Azure-3P

sed-4.9-150600.3.3.1

Image SLES15-SP7-Azure-Basic

sed-4.9-150600.3.3.1

Image SLES15-SP7-Azure-Standard

sed-4.9-150600.3.3.1

Image SLES15-SP7-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

sed-4.9-150600.3.3.1

Image SLES15-SP7-CHOST-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-CHOST-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-CHOST-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-CHOST-BYOS-GDC

sed-4.9-150600.3.3.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

sed-4.9-150600.3.3.1

Image SLES15-SP7-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-EC2-ECS-HVM

sed-4.9-150600.3.3.1

Image SLES15-SP7-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-GCE-3P

sed-4.9-150600.3.3.1

Image SLES15-SP7-HPC-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-HPC-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-HPC-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-HPC-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-Hardened-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-Hardened-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-Hardened-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Azure-3P

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-GCE-3P

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Hardened-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAP-Hardened-GCE

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAPCAL-Azure

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAPCAL-EC2

sed-4.9-150600.3.3.1

Image SLES15-SP7-SAPCAL-GCE

sed-4.9-150600.3.3.1

Image proxy-squid-image

sed-4.9-150600.3.3.1

Image server-attestation-image

sed-4.9-150600.3.3.1

Image server-hub-xmlrpc-api-image

sed-4.9-150600.3.3.1

Image server-image-sles15sp7

sed-4.9-150600.3.3.1

Image server-saline-image

sed-4.9-150600.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

sed-4.9-150600.3.3.1

sed-lang-4.9-150600.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261941-1/
Link for SUSE-SU-2026:1941-1
https://lists.suse.com/pipermail/sle-updates/2026-May/046542.html
E-Mail link for SUSE-SU-2026:1941-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1262144
SUSE Bug 1262144
https://www.suse.com/security/cve/CVE-2026-5958/
SUSE CVE CVE-2026-5958 page

Описание

When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1. resolves symlink to its target and stores the resolved path for determining when output is written, 2. opens the original symlink path (not the resolved one) to read the file. Between these two calls there is a race window. If an attacker atomically replaces the symlink with a different target during that window, sed will: read content from the new (attacker-chosen) symlink target and write the processed result to the path recorded in step 1. This can lead to arbitrary file overwrite with attacker-controlled content in the context of the sed process. This issue was fixed in version 4.10.

Затронутые продукты

Container bci/bci-init:latest:sed-4.9-150600.3.3.1

Container bci/bci-sle15-kernel-module-devel:latest:sed-4.9-150600.3.3.1

Container bci/openjdk-devel:17:sed-4.9-150600.3.3.1

Container bci/openjdk-devel:21:sed-4.9-150600.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-5958.html
CVE-2026-5958
https://bugzilla.suse.com/1262144
SUSE Bug 1262144