Описание
Security update for alloy
This update for alloy fixes the following issue:
Update to version 1.17.1.
Security issue fixed:
- CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed (bsc#1267811).
Other updates and bugfixes:
- Version 1.17.1:
- Back off usage reporting on persistent failure instead of retrying every minute.
Список пакетов
openSUSE Leap 16.0
alloy-1.17.1-160000.1.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1267811
- SUSE CVE CVE-2026-10722 page
Описание
A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.
Затронутые продукты
openSUSE Leap 16.0:alloy-1.17.1-160000.1.1
Ссылки
- CVE-2026-10722
- SUSE Bug 1267745