SUSE CVE-2026-89607

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...

Katello: /etc/katello/secure/passphrase is world readable

script/katello-generate-passphrase in Katello 1.1 uses world-readable permissions for /etc/katello/secure/passphrase, which allows local users to obtain the passphrase by reading the file...