CVE-2026-52134-libiec61850

CVE-2026-52134: libiec61850 v1.6의 GOOSE 재생 및 메시지 신선도 처리 상태 CVE-2026-52134이가 배정되었습니다. 해당 CVE 레코드의 공개는 보류 중입니다. 영향받는 제품 공급업체: MZ Automation GmbH 제품: libiec61850 테스트한 버전: 1.6 다른 버전의 상태: 확인되지 않음 영향받는 파일: src/goose/goosereceiver.c 영향받는 함수: parseGoosePayload 요약 libiec61850 v1.6의 GOOSE 구독자 수신 경로는 구독자에게...

untitledgoosetool

Untitled Goose Tool 거위가 풀려났다. 목차 소개 시작하기 사전 요구 사항 요구 사항 설치 사용법 Config GUI Auth Csv Honk Messagetrace 권장 기본 워크플로 UAL 호출 시간 제한에 대한 권장 워크플로 고려 사항 알려진 문제 감사의 말 기여 라이선스 법적 고지 소개 Untitled Goose Tool은 Microsoft Entra ID, Azure 및 M365 환경에 대한 전체 조사를 실행하기 위해 새로운 인증 및 데이터 수집 방법을 추가하는 강력하고 유연한 위협 탐지 및 사고 대응...

goose-1.51.0-1.1 on GA media (moderate)

goose-1.51.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11874-1 Rating: moderate Cross-References: CVE-2026-85623 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the goose-1.51.0-1.1...

[SECURITY] Fedora 43 Update: goose-1.45.0-1.fc43

Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...

[SECURITY] Fedora 44 Update: goose-1.45.0-1.fc44

Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...

[SECURITY] Fedora 45 Update: goose-1.45.0-1.fc45

Goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously...

Fedora 45 : goose (2026-cb99e9b2ac)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-cb99e9b2ac advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 43 : goose (2026-5c0d326b15)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5c0d326b15 advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 44 : goose (2026-24f75e4c7a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-24f75e4c7a advisory. Update to 1.45.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

OPENSUSE-SU-2026:11874-1 goose-1.51.0-1.1 on GA media

These are all security issues fixed in the goose-1.51.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: goose bug fix and enhancement update

An update for goose is now available for Red Hat Enterprise Linux 9. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Security Fixes: goose: aws-smithy-json: Denial of Service via uncontrolled...

Important: Red Hat Security Advisory: goose bug fix and enhancement update

An update for goose is now available for Red Hat Enterprise Linux 10. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Security Fixes: goose: aws-smithy-json: Denial of Service via uncontrolled...

RHEL 9 : goose update (Important) (RHSA-2026:67595)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67595 advisory. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258...

RHEL 10 : goose update (Important) (RHSA-2026:67593)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:67593 advisory. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258...

CVE-2026-85623

A flaw was found in goose. This vulnerability allows attackers to execute arbitrary commands by distributing malicious recipes that leverage insecure recipe standard input/output stdio extensions and retry checks. This bypasses the existing security scan, enabling the execution of shell commands...

SUSE CVE-2026-85623

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

CVE-2026-85623

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

CVE-2026-85623 goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

CVE-2026-85623 goose 1.37.0 Arbitrary Command Execution via Recipe Extensions

goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.checks without security inspection. Attackers can distribute malicious recipes that execute shell commands as the user running goose, bypassing the recipe security scan which does not inspect extensions or retry...

CVE-2026-85623

goose v1.37.0 (by aaif-goose) contains an arbitrary command execution flaw in its recipe subsystem. The vulnerable components are stdio extensions and retry.checks within recipes, which are executed without passing through the recipe security scan—creating a bypass for attackers who distribute ma...