openSUSE-SU-2026:22130-1

openSUSE-SU-2026:22130-1 · Security update for grok-build

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for grok-build fixes the following issues: Changes in grok-build: - CVE-2026-109349: gix-pack pack version 3 header assertion failure (boo#1285155) - CVE-2026-109350: gix-pack ofs-delta base-distance handling flaw (boo#1285155) - CVE-2026-109351: gix-pack header object-count denial of service (boo#1285155) - Refresh vendored Rust dependencies (gix 0.83.0 -> 0.88.0, gix-pack 0.70.0 -> 0.75.0, gix-status 0.30.0 -> 0.35.0); re-audited licences (913 external crates in the shipped graph, 1247 vendored); licence set unchanged - adapt xai-fast-worktree to the gix 0.88 API (anyhow Context bound, from_bstr signature)

Fix available

Published

2026-10-19T16:28:23Z

Updated

2026-10-20T19:15:04.891926729Z

Stack: system

Check your server →