openSUSE-SU-2026:22138-1

openSUSE-SU-2026:22138-1 · Security update for hashcat

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

This update for hashcat fixes the following issues: Changes in hashcat: Update to snapshot v7.1.2-942-gef3508ed8: * Addressed CVE-2026-68768 [boo#1276256], CVE-2026-68767 [boo#1276255], CVE-2026-68766 [boo#1276254] * Feed plugins and attack-mode 8 * Probability-ordered PCFG and targeted hints in attack-mode 4 * Device-accelerated table attacks in attack-mode 5 * Wordlists inside masks with attack-mode 12 * Account-aware association in attack-mode 9 * Seekable wordlists and one cache location * A brain server built for large sessions * Rules in every attack-mode * A Python bridge that uses every CPU thread Update to release 7.1.2: * New algorithms: AS/400 DES, AS/400 SHA1, Cisco-ISE SHA256, LUKS2-Argon2i KDF, KeePass KDBX v4, SAP CODVN H SHA512, sm3crypt, BLAKE2b-256, MD6, sha224 - Use BUILD_MODE=cross to not optimize for build machine CPU (boo#1248352) Update to release 7.0.0: * Full release notes at /usr/share/doc/packages/hashcat/docs/releases_notes_v7.0.0.md * Assimilation Bridge: Integrate external resources like CPUs, FPGAs, embedded interpreters, and more into the cracking pipeline. * Python Bridge Plugin: Rapidly implement hash-matching logic in Python. No recompilation needed, supports multithreading and rule engine by default. * Virtual Backend Devices: Internally partitions physical GPUs into multiple logical devices for better bridge integration and async workloads. * Hash-Mode Autodetection: Omit the -m flag and let Hashcat detect the hash-mode, or use --identify to list possibilities. * 58 new application-specific hash types, including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2 * 17 new generic hash constructions used in real-world web apps and protocols * 11 new primitives added to the crypto library, improving reuse and plugin development * 20 new tools to extract hashes from popular sources, including APFS, Virtualbox, BitLocker, and various wallet formats * Complete refactor of the autotuning engine for better device utilization * Major rewrite of memory management to eliminate previous 4GB allocation caps and enable full memory usage across devices

Correctif disponible

Publication

2026-10-19T16:30:34Z

Mise à jour

2026-10-20T19:15:03.938845272Z

Pile logicielle: system

Vérifiez votre serveur →