Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2026:21423-1

Опубликовано: 22 июл. 2026
Источник: suse-cvrf

Описание

Security update for jline3

This update for jline3 fixes the following issues:

  • CVE-2026-56740: unauthenticated remote memory exhaustion via unbounded Telnet NEW-ENVIRON variables (bsc#1269021).
  • CVE-2026-56741: unauthenticated remote DoS via Unbounded Telnet NAWS Terminal Geometry (bsc#1270083).

Changes for jline3:

  • Update to upstream version 3.30.15
  • fix: guard regex matching against catastrophic backtracking (ReDoS) (#2018, backport of #2012):
    • Adds SafeRegex utility with TimeoutCharSequence to enforce wall-clock deadlines during regex matching
    • Fixes 8 locations across terminal, reader, and builtins where user-controlled input could trigger catastrophic backtracking
    • Addresses GHSA-r2xf-8xr9-62gw, GHSA-2v9w-34q6-wpqx, GHSA-ph9c-7hw9-vhhw, GHSA-5q95-hrpc-m3w3
  • fix: backport security hardening (#1986, #1995):
    • Create persisted history file with owner-only permissions
    • Use exclusive create for extracted native library temp files
  • fix: warn on insecure permissions when history file created concurrently

Список пакетов

openSUSE Leap 16.0
jline3-3.30.15-160000.1.1
jline3-builtins-3.30.15-160000.1.1
jline3-console-3.30.15-160000.1.1
jline3-console-ui-3.30.15-160000.1.1
jline3-curses-3.30.15-160000.1.1
jline3-jansi-3.30.15-160000.1.1
jline3-jansi-core-3.30.15-160000.1.1
jline3-javadoc-3.30.15-160000.1.1
jline3-native-3.30.15-160000.1.1
jline3-reader-3.30.15-160000.1.1
jline3-remote-telnet-3.30.15-160000.1.1
jline3-style-3.30.15-160000.1.1
jline3-terminal-3.30.15-160000.1.1
jline3-terminal-jansi-3.30.15-160000.1.1
jline3-terminal-jna-3.30.15-160000.1.1
jline3-terminal-jni-3.30.15-160000.1.1

Ссылки

Описание

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables() in TelnetIO.java:1127-1180 stores each variable pair in a HashMap held by ConnectionData, allowing an unauthenticated attacker to flood unique variable pairs before the terminating IAC SE byte and exhaust JVM heap memory with an OutOfMemoryError. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.

Затронутые продукты
openSUSE Leap 16.0:jline3-3.30.15-160000.1.1
openSUSE Leap 16.0:jline3-builtins-3.30.15-160000.1.1
openSUSE Leap 16.0:jline3-console-3.30.15-160000.1.1
openSUSE Leap 16.0:jline3-console-ui-3.30.15-160000.1.1
Ссылки

Описание

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS() in TelnetIO.java:856-879 reads client-supplied width and height as 16-bit unsigned integers and passes values such as 65535x65535 to setTerminalGeometry(), allowing an unauthenticated remote attacker to repeatedly alternate values and trigger continuous expensive rendering work that causes CPU exhaustion and denial of service. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.

Затронутые продукты
openSUSE Leap 16.0:jline3-3.30.15-160000.1.1
openSUSE Leap 16.0:jline3-builtins-3.30.15-160000.1.1
openSUSE Leap 16.0:jline3-console-3.30.15-160000.1.1
openSUSE Leap 16.0:jline3-console-ui-3.30.15-160000.1.1
Ссылки