SUSE-SU-2026:1868-1
Security update for firebird
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for firebird fixes the following issues - CVE-2025-65104: Information leak vulnerability in firebird3 client when used with newer (>= 4) server (bsc#1262330). - CVE-2026-27890: Pre-Auth DOS (bsc#1262328). - CVE-2026-28212: One packet DoS (bsc#1262329). - CVE-2026-28214: Server hangs when using specific clumplet on batch creation (bsc#1262327). - CVE-2026-28224: CryptCallback DOS (bsc#1262326). - CVE-2026-33337: Buffer overflow on parsing corrupted slice packet (bsc#1262325). - CVE-2026-34232: DoS via `op_response` packet from client (bsc#1262324). - CVE-2026-35215: DoS via malicious slice descriptor in slice packet (bsc#1262322). - CVE-2026-40342: Path traversal when declaring external routine (bsc#1262320).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.7 | firebird, firebird-examples, firebird-server y 5 más | 3.0.14.33856-150200.3.9.1 |
Mostrar las 8 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 15.7 | firebird | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | firebird-examples | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | firebird-server | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | firebird-utils | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libfbclient-devel | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libfbclient2 | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libib_util | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libib_util-devel | 3.0.14.33856-150200.3.9.1 |
Referencias
- https://bugzilla.suse.com/1262320
- https://bugzilla.suse.com/1262322
- https://bugzilla.suse.com/1262324
- https://bugzilla.suse.com/1262325
- https://bugzilla.suse.com/1262326
- https://bugzilla.suse.com/1262327
- https://bugzilla.suse.com/1262328
- https://bugzilla.suse.com/1262329
Las 21 referencias
- https://bugzilla.suse.com/1262330
- https://lists.suse.com/pipermail/sle-updates/2026-May/046499.html
- https://www.suse.com/security/cve/CVE-2025-65104/
- https://www.suse.com/security/cve/CVE-2026-27890/
- https://www.suse.com/security/cve/CVE-2026-28212/
- https://www.suse.com/security/cve/CVE-2026-28214/
- https://www.suse.com/security/cve/CVE-2026-28224/
- https://www.suse.com/security/cve/CVE-2026-33337/
- https://www.suse.com/security/cve/CVE-2026-34232/
- https://www.suse.com/security/cve/CVE-2026-35215/
- https://www.suse.com/security/cve/CVE-2026-40342/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20261868-1/