From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=BAYES_00,DKIM_SIGNED, T_DKIM_INVALID autolearn=no autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=altlinux.org; s=dkim; h=Subject:In-Reply-To:Content-Type:MIME-Version: References:Message-ID:To:From:Date:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=+366lk4gi4wIwqZgMEFURiFoKXgrO5BfRoNtDJ2PMvs=; b=Ns/QWCTbIHH+dQxaAepuEnNDxd NlDjlkPkHAGckScd+h9QzwJsAK3vajjI59D8QncrsXHzoQdcgdfQ2IsrbIgupZBGj3oXtIkAxbU07 j8BtSCTJP6XZA418uqnaom3xzrR0suwW0ztEmNkSK76nxyNRrwseHeQ9HDeMIbJpwZoGd1/Avczbu I6boD50ddxEYtPhu1twbNSO6GkDtQLqlOdhsw0FTzxRBvM+enTTaU6W0kf0m8CEAMK9mY8ipfi2q5 PsvxYo5JqQaWR1I4qHuXidACaxZuxuQmKeppcTsPsCON7R8/p6dFbQ5hnx9MiSb2nrc7vAeDQ8wtD oLR45xOA==; Date: Tue, 7 Jul 2026 12:19:34 +0300 From: Arseny Maslennikov To: ALT Linux Team development discussions Message-ID: References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="BR6Lm2/ENV0rTFYx" Content-Disposition: inline In-Reply-To: OpenPGP: url=http://grep.cs.msu.ru/~ar/pgp-key.asc X-SA-Exim-Connect-IP: 37.204.126.93 X-SA-Exim-Mail-From: arseny@altlinux.org X-SA-Exim-Version: 4.2.1 X-SA-Exim-Scanned: No (on mail.cs.msu.ru); Unknown failure Subject: Re: [devel] Changelog c CVE X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jul 2026 09:19:51 -0000 Archived-At: List-Archive: List-Post: --BR6Lm2/ENV0rTFYx Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 07, 2026 at 11:40:27AM +0300, Anton Midyukov wrote: > =D0=94=D0=BE=D0=B1=D1=80=D0=BE=D0=B3=D0=BE =D0=B2=D1=80=D0=B5=D0=BC=D0=B5= =D0=BD=D0=B8 =D1=81=D1=83=D1=82=D0=BE=D0=BA >=20 > =D0=92=D0=BE=D0=B7=D0=BD=D0=B8=D0=BA =D0=B2=D0=BE=D0=BF=D1=80=D0=BE=D1=81= =2E =D0=92 Changelog =D1=81 CVE =D1=81=D1=82=D1=80=D0=BE=D0=BA=D0=B8 =D1=80= =D0=B0=D0=B7=D0=B1=D0=B8=D0=B2=D0=B0=D0=B5=D0=BC =D0=BF=D1=80=D0=B8 =D0=BF= =D1=80=D0=B5=D0=B2=D1=8B=D1=88=D0=B5=D0=BD=D0=B8=D0=B8 80 =D1=81=D0=B8=D0= =BC=D0=B2=D0=BE=D0=BB=D0=BE=D0=B2 =D0=B8=D0=BB=D0=B8 =D0=BD=D0=B5=D1=82? =D0=AF =D0=B1=D1=8B =D1=80=D0=B0=D1=81=D1=88=D0=B8=D1=80=D0=B8=D0=BB =D0=B4= =D0=BE 96 =D0=B2=D1=81=D1=91-=D1=82=D0=B0=D0=BA=D0=B8; =D0=BF=D1=83=D1=81= =D1=82=D1=8C, =D0=BC=D0=BE=D0=BB, =D0=B1=D1=83=D0=B4=D0=B5=D1=82 =D0=BE=D0= =B3=D1=80=D0=B0=D0=BD=D0=B8=D1=87=D0=B5=D0=BD=D0=B8=D0=B5, =D0=BD=D0=BE =D0= =BD=D0=B5 =D1=82=D0=B0=D0=BA=D0=BE=D0=B5 =D1=82=D0=B5=D1=81=D0=BD=D0=BE=D0=B5; =D0=B2=D0=BB=D0=B5=D0=B7=D0=B0=D0=B5= =D1=82 =D0=B2 =D1=82=D0=B5=D1=80=D0=BC=D0=B8=D0=BD=D0=B0=D0=BB=D1=8C=D0=BD= =D0=BE=D0=B5 =D0=BE=D0=BA=D0=BD=D0=BE 960 =D1=82=D0=BE=D1=87=D0=B5=D0=BA = =D1=88=D0=B8=D1=80=D0=B8=D0=BD=D0=BE=D0=B9. =D0=9D=D0=BE =D0=BE =D0=B2=D0= =BA=D1=83=D1=81=D0=B0=D1=85 =D0=B8 =D0=B2=D0=B0=D0=B9=D0=B1=D0=B0=D1=85 =D1=81=D0=BF=D0=BE=D1=80=D0=B8=D1=82=D1=8C =D1=81=D0=BC=D1=8B=D1=81=D0=BB= =D0=B0 =D0=BC=D0=B0=D0=BB=D0=BE. > =D0=95=D1=81=D1=82=D1=8C =D0=BA=D0=B0=D0=BA=D0=B8=D0=B5-=D1=82=D0=BE =D0= =BF=D1=80=D0=BE=D0=B1=D0=BB=D0=B5=D0=BC=D1=8B, =D0=B5=D1=81=D0=BB=D0=B8 =D0= =B4=D0=B5=D0=BB=D0=B0=D1=82=D1=8C =D0=BF=D0=B5=D1=80=D0=B5=D0=BD=D0=BE=D1= =81=D1=8B? =D0=93=D0=BB=D0=B0=D0=B2=D0=BD=D0=BE=D0=B5, =D1=87=D1=82=D0=BE=D0=B1=D1=8B = =D0=BF=D0=B5=D1=80=D0=B5=D0=BD=D0=BE=D1=81=D0=B8=D0=BC=D1=8B=D0=B9 =D1=82= =D0=B5=D0=BA=D1=81=D1=82 =D1=81=D0=BE=D1=85=D1=80=D0=B0=D0=BD=D1=8F=D0=BB = =D1=81=D0=B2=D0=BE=D0=B8 =D0=BE=D1=82=D1=81=D1=82=D1=83=D0=BF=D1=8B. =D0=9D= =D0=B0=D0=BF=D1=80=D0=B8=D0=BC=D0=B5=D1=80 (=D1=87=D1=83=D1=82=D1=8C =D0=BD= =D0=B8=D0=B6=D0=B5): > =D0=9F=D1=80=D0=B8=D0=BC=D0=B5=D1=80 =D0=BE=D1=84=D0=BE=D1=80=D0=BC=D0=BB= =D0=B5=D0=BD=D0=B8=D1=8F, =D0=BA=D0=BE=D1=82=D0=BE=D1=80=D0=BE=D0=B5 =D0=BC= =D0=BD=D0=B5 =D0=BD=D0=B5 =D0=BF=D0=BE=D0=BD=D1=80=D0=B0=D0=B2=D0=B8=D0=BB= =D0=BE=D1=81=D1=8C: - Fixes: + CVE-2026-55770: prevent LDAP injection via bind DN to group resolution (auth/ldap, secrets/ldap) + CVE-2026-55776: fix server crash from unlock of unlocked mutex for RSA = keys created with derived=3Dtrue (secrets/transit) + CVE-2026-55774: fix unauthorized cross-namespace lease revocation via leaked lease identifiers (core/leases) + CVE-2026-55775: fix namespace path canonicalization of "root" enabling unauthorized operations on the parent namespace (core/namespac= es) --BR6Lm2/ENV0rTFYx Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE56JD3UKTLEu/ddrm9dQjyAYL01AFAmpMxKYACgkQ9dQjyAYL 01CYLRAAx/Fzqve2xl6pV81pvBkeeQVCwWIZlqUmlajMT5jSRD+wxG5UW5GwgFNl zvObHJlfQk3oMmfuOtnuvnm6xR4V6ct7B9gPmgxwTY4Tb2UGGo+tk3zYO5RnZjmb KABCJT9TYAAxgXX46LlCXaTLXsK55z5KeZ7l63OqZ1fHZLVlHCOJ44PmQ7yaARe0 DOw1i2z9lj0mhkLjFAacxxgKoixF/Dj1EHA471TkvAks2HCy5NQmoKC1uzE0wFvq cha7YDXxh6WnQwdClQTfOaVTRfqhi6d3pLWT7oyYsEYdXwHwUB1hGdEh7tmIrVjf 22WjS1EqRBtd9uHnMLYPa8SzowHnIYMl2IrEDApjrj1sIXpnO2RPfEZUeViv9ui/ 0r7SBNCsmhu8pHWPLPmMklszUeyLhihfp9ASH/rcXCTWds8N/nMYCt1Cg+nc4AtY ARgYAl/iLQL8SIsZUKA7FTl+zZ4tia3KzfUCTA9dOVFHXIV7bv/5bvqYRvIlrV6e YAC9Tm4tVF8YesAxuUyxJ5niCl58x+e5WiTv38N4lvQnn5KSGI0p2Djy6e41H6Fs 3HRWyxDJAjLR5vwsYgsAr67AsT9kh1K7MGmOV4gE4tajJJIx293jSdyOdQfRN3hi cC3Rn8hqyzwFk9V1NVY0uD+ihNWHK3KLh2Xh5O8cWgrD+KEQO0U= =i+Os -----END PGP SIGNATURE----- --BR6Lm2/ENV0rTFYx--