Описание
Security update for keybase-client
This update for keybase-client fixes the following issues:
Changes in keybase-client:
- CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
Список пакетов
openSUSE Leap 16.0
kbfs-6.6.3-bp160.4.1
kbfs-git-6.6.3-bp160.4.1
kbfs-tool-6.6.3-bp160.4.1
keybase-client-6.6.3-bp160.4.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1280628
- SUSE CVE CVE-2026-89090 page
Описание
An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range. To remediate this issue, users should upgrade to release-2026-03-23 or later, and patch any forked or derivative code.
Затронутые продукты
openSUSE Leap 16.0:kbfs-6.6.3-bp160.4.1
openSUSE Leap 16.0:kbfs-git-6.6.3-bp160.4.1
openSUSE Leap 16.0:kbfs-tool-6.6.3-bp160.4.1
openSUSE Leap 16.0:keybase-client-6.6.3-bp160.4.1
Ссылки
- CVE-2026-89090
- SUSE Bug 1280622