Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2931-1

Опубликовано: 13 июл. 2026
Источник: suse-cvrf

Описание

Security update for libslirp

This update for libslirp fixes the following issues:

  • CVE-2026-9539: TCP URG out of bounds heap read information leak (bsc#1268903).

Список пакетов

Container suse/sle-micro/5.5:latest
libslirp0-4.7.0+44-150500.4.3.1
SUSE Linux Enterprise Micro 5.5
libslirp0-4.7.0+44-150500.4.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libslirp-devel-4.7.0+44-150500.4.3.1
libslirp0-4.7.0+44-150500.4.3.1

Ссылки

Описание

An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).

Затронутые продукты
Container suse/sle-micro/5.5:latest:libslirp0-4.7.0+44-150500.4.3.1
SUSE Linux Enterprise Micro 5.5:libslirp0-4.7.0+44-150500.4.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libslirp-devel-4.7.0+44-150500.4.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:libslirp0-4.7.0+44-150500.4.3.1
Ссылки