openSUSE-SU-2026:21925-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21925-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21925-1
Upstream
Related
Published
2026-09-21T14:35:49Z
Modified
2026-09-25T18:23:13Z
Summary
Security update for keybase-client
Details

This update for keybase-client fixes the following issues:

Changes in keybase-client:

  • CVE-2026-89090: Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
References

Affected packages

openSUSE:Leap 16.0 / keybase-client

Package

Name
keybase-client
Purl
pkg:rpm/opensuse/keybase-client&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.6.3-bp160.4.1

Ecosystem specific 

{
    "binaries":  [
        {
            "kbfs":  "6.6.3-bp160.4.1",
            "kbfs-git":  "6.6.3-bp160.4.1",
            "kbfs-tool":  "6.6.3-bp160.4.1",
            "keybase-client":  "6.6.3-bp160.4.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21925-1.json"