SUSE-SU-2026:4930-1

SUSE-SU-2026:4930-1 · Security update for rust-keylime

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers (bsc#1287921) - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification (bsc#1287921) - CVE-2026-115907: zip: denial of service via unbounded memory allocation in legacy decoders (bsc#1287921) - CVE-2026-115908: zip: path traversal via lexical symlink validation during extraction (bsc#1287921) - CVE-2026-115909: zip: denial of service via uncontrolled memory allocation on symlink targets (bsc#1287921) Changes for rust-keylime: - Update to version 0.2.10+12: * log Agent UUID at push agent startup * Limit actix-web workers * Fix clippy needless_late_init warnings * Unwrap OCTET STRING wrapped EK certificates * build(deps): bump rand from 0.9.4 to 0.10.1 * build(deps): bump glob from 0.3.3 to 0.3.4 * build(deps): bump reqwest from 0.13.3 to 0.13.4 * Check shutdown marker inside ml_extend loop * Fix clippy useless_borrows_in_formatting warnings * build(deps): bump tokio from 1.52.2 to 1.53.1 * Fix payload key upgrade regression by falling back to mTLS key * Accept any RSA key size for payload encryption * Bump version to 0.2.10 * keylime: use runtime OpenSSL algorithm detection instead of compile-time symbols

Correctif disponible

Publication

2026-10-29T08:53:34Z

Mise à jour

2026-10-31T18:00:03.940330945Z

Pile logicielle: system

Vérifiez votre serveur →