SUSE-SU-2026:1868-1
Security update for firebird
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for firebird fixes the following issues - CVE-2025-65104: Information leak vulnerability in firebird3 client when used with newer (>= 4) server (bsc#1262330). - CVE-2026-27890: Pre-Auth DOS (bsc#1262328). - CVE-2026-28212: One packet DoS (bsc#1262329). - CVE-2026-28214: Server hangs when using specific clumplet on batch creation (bsc#1262327). - CVE-2026-28224: CryptCallback DOS (bsc#1262326). - CVE-2026-33337: Buffer overflow on parsing corrupted slice packet (bsc#1262325). - CVE-2026-34232: DoS via `op_response` packet from client (bsc#1262324). - CVE-2026-35215: DoS via malicious slice descriptor in slice packet (bsc#1262322). - CVE-2026-40342: Path traversal when declaring external routine (bsc#1262320).
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15.7 | firebird, firebird-examples, firebird-server et 5 autres | 3.0.14.33856-150200.3.9.1 |
Afficher les 8 entrées d'une source
| Source | Paquet | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise 15.7 | firebird | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | firebird-examples | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | firebird-server | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | firebird-utils | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libfbclient-devel | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libfbclient2 | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libib_util | 3.0.14.33856-150200.3.9.1 |
| SUSE Linux Enterprise 15.7 | libib_util-devel | 3.0.14.33856-150200.3.9.1 |
Références
- https://bugzilla.suse.com/1262320
- https://bugzilla.suse.com/1262322
- https://bugzilla.suse.com/1262324
- https://bugzilla.suse.com/1262325
- https://bugzilla.suse.com/1262326
- https://bugzilla.suse.com/1262327
- https://bugzilla.suse.com/1262328
- https://bugzilla.suse.com/1262329
Les 21 références
- https://bugzilla.suse.com/1262330
- https://lists.suse.com/pipermail/sle-updates/2026-May/046499.html
- https://www.suse.com/security/cve/CVE-2025-65104/
- https://www.suse.com/security/cve/CVE-2026-27890/
- https://www.suse.com/security/cve/CVE-2026-28212/
- https://www.suse.com/security/cve/CVE-2026-28214/
- https://www.suse.com/security/cve/CVE-2026-28224/
- https://www.suse.com/security/cve/CVE-2026-33337/
- https://www.suse.com/security/cve/CVE-2026-34232/
- https://www.suse.com/security/cve/CVE-2026-35215/
- https://www.suse.com/security/cve/CVE-2026-40342/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2026/suse-su-20261868-1/