SUSE-SU-2026:1868-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20261868-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1868-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:1868-1
- Upstream
- Related
- Published
- 2026-05-15T07:50:00Z
- Modified
- 2026-05-16T08:19:16Z
- Summary
- Security update for firebird
- Details
-
This update for firebird fixes the following issues
- CVE-2025-65104: Information leak vulnerability in firebird3 client when used with newer (>= 4) server (bsc#1262330).
- CVE-2026-27890: Pre-Auth DOS (bsc#1262328).
- CVE-2026-28212: One packet DoS (bsc#1262329).
- CVE-2026-28214: Server hangs when using specific clumplet on batch creation (bsc#1262327).
- CVE-2026-28224: CryptCallback DOS (bsc#1262326).
- CVE-2026-33337: Buffer overflow on parsing corrupted slice packet (bsc#1262325).
- CVE-2026-34232: DoS via
op_responsepacket from client (bsc#1262324). - CVE-2026-35215: DoS via malicious slice descriptor in slice packet (bsc#1262322).
- CVE-2026-40342: Path traversal when declaring external routine (bsc#1262320).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20261868-1/
- https://bugzilla.suse.com/1262320
- https://bugzilla.suse.com/1262322
- https://bugzilla.suse.com/1262324
- https://bugzilla.suse.com/1262325
- https://bugzilla.suse.com/1262326
- https://bugzilla.suse.com/1262327
- https://bugzilla.suse.com/1262328
- https://bugzilla.suse.com/1262329
- https://bugzilla.suse.com/1262330
- https://www.suse.com/security/cve/CVE-2025-65104
- https://www.suse.com/security/cve/CVE-2026-27890
- https://www.suse.com/security/cve/CVE-2026-28212
- https://www.suse.com/security/cve/CVE-2026-28214
- https://www.suse.com/security/cve/CVE-2026-28224
- https://www.suse.com/security/cve/CVE-2026-33337
- https://www.suse.com/security/cve/CVE-2026-34232
- https://www.suse.com/security/cve/CVE-2026-35215
- https://www.suse.com/security/cve/CVE-2026-40342