SUSE-SU-2026:20868-1

Security update for capstone

Advisory ansehen veröffentlicht 2026-03-25

Security update for capstone

beschreibt (2)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-68114US	critical9.8	0.20% (9th)	—	2025-12-17
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index…
CVE-2025-67873US	high7.8	0.24% (14th)	—	2025-12-17
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_it…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SUSE Bug 1255309self
SUSE Bug 1255310self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20868-1self
SUSE CVE CVE-2025-67873 pageself
SUSE CVE CVE-2025-68114 pageself
SUSE ratingsexternal
URL for SUSE-SU-2026:20868-1self

Behebungen (6)

Behobenlibcapstone4-0:4.0.2-6.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibcapstone4-0:4.0.2-6.1.aarch64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibcapstone4-0:4.0.2-6.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibcapstone4-0:4.0.2-6.1.s390x as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibcapstone4-0:4.0.2-6.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenlibcapstone4-0:4.0.2-6.1.x86_64 as component of SUSE Linux Micro 6.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan