# Recent vulnerabilities from CSAF Suse 🦎 ## [rhsa-2026:75575](https://vulnerability.circl.lu/vuln/rhsa-2026%3A75575) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "security update for gimp", "title": "Title of the patch" }, { "category": "description", "text": "This security update provides a functional equivalent of RHSA-2026:75575.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:75575.\n", "title": "Description of the patch" }, { "category": "details", "text": "RHSA-2026:75575", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_75575.json" }, { "category": "self", "summary": "URL for RHSA-2026:75575", "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008072.html" }, { "category": "self", "summary": "E-Mail link for RHSA-2026:75575", "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008072.html" }, { "category": "self", "summary": "SUSE CVE CVE-2026-90947 page", "url": "https://www.suse.com/security/cve/CVE-2026-90947/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-90948 page", "url": "https://www.suse.com/security/cve/CVE-2026-90948/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-92248 page", "url": "https://www.suse.com/security/cve/CVE-2026-92248/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-97185 page", "url": "https://www.suse.com/security/cve/CVE-2026-97185/" } ], "title": "security update for gimp", "tracking": { "current_release_date": "2026-10-06T10:22:59Z", "generator": { "date": "2026-10-05T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "RHSA-2026:75575", "initial_release_date": "2026-10-05T00:00:00Z", "revision_history": [ { "date": "2026-10-05T00:00:00Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:57:16Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-10-06T10:22:59Z", "number": "3", "summary": "unknown changes" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "gimp-libs-2:3.0.4-4.el9_8.14.i686", "product": { "name": "gimp-libs-2:3.0.4-4.el9_8.14.i686", "product_id": "gimp-libs-2:3.0.4-4.el9_8.14.i686", "product_identification_helper": { "purl": "pkg:rpm/suse/gimp-libs@3.0.4-4.el9_8.14?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "gimp-2:3.0.4-4.el9_8.14.x86_64", "product": { "name": "gimp-2:3.0.4-4.el9_8.14.x86_64", "product_id": "gimp-2:3.0.4-4.el9_8.14.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/gimp@3.0.4-4.el9_8.14?arch=x86_64&epoch=2&upstream=gimp-2:3.0.4-4.el9_8.14.src.rpm" } } }, { "category": "product_version", "name": "gimp-libs-2:3.0.4-4.el9_8.14.x86_64", "product": { "name": "gimp-libs-2:3.0.4-4.el9_8.14.x86_64", "product_id": "gimp-libs-2:3.0.4-4.el9_8.14.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/gimp-libs@3.0.4-4.el9_8.14?arch=x86_64&epoch=2" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Liberty Linux 9", "product": { "name": "SUSE Liberty Linux 9", "product_id": "SUSE Liberty Linux 9", "product_identification_helper": { "cpe": "cpe:/o:suse:sll:9" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "gimp-2:3.0.4-4.el9_8.14.x86_64 as component of SUSE Liberty Linux 9", "product_id": "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64" }, "product_reference": "gimp-2:3.0.4-4.el9_8.14.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 9" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.14.i686 as component of SUSE Liberty Linux 9", "product_id": "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.14.i686", "relates_to_product_reference": "SUSE Liberty Linux 9" }, { "category": "default_component_of", "full_product_name": { "name": "gimp-libs-2:3.0.4-4.el9_8.14.x86_64 as component of SUSE Liberty Linux 9", "product_id": "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" }, "product_reference": "gimp-libs-2:3.0.4-4.el9_8.14.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 9" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-90947", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-90947" } ], "notes": [ { "category": "general", "text": "A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-90947", "url": "https://www.suse.com/security/cve/CVE-2026-90947" }, { "category": "external", "summary": "SUSE Bug 1280511 for CVE-2026-90947", "url": "https://bugzilla.suse.com/1280511" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-05T00:00:00Z", "details": "important" } ], "title": "CVE-2026-90947" }, { "cve": "CVE-2026-90948", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-90948" } ], "notes": [ { "category": "general", "text": "A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-90948", "url": "https://www.suse.com/security/cve/CVE-2026-90948" }, { "category": "external", "summary": "SUSE Bug 1280512 for CVE-2026-90948", "url": "https://bugzilla.suse.com/1280512" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-05T00:00:00Z", "details": "important" } ], "title": "CVE-2026-90948" }, { "cve": "CVE-2026-92248", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-92248" } ], "notes": [ { "category": "general", "text": "A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a heap-based buffer overflow when the image data is decoded. This buffer overflow corrupts adjacent heap objects, allowing for a controlled memory write that can result in an application crash or arbitrary code execution.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-92248", "url": "https://www.suse.com/security/cve/CVE-2026-92248" }, { "category": "external", "summary": "SUSE Bug 1280739 for CVE-2026-92248", "url": "https://bugzilla.suse.com/1280739" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-05T00:00:00Z", "details": "important" } ], "title": "CVE-2026-92248" }, { "cve": "CVE-2026-97185", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-97185" } ], "notes": [ { "category": "general", "text": "A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-97185", "url": "https://www.suse.com/security/cve/CVE-2026-97185" }, { "category": "external", "summary": "SUSE Bug 1282596 for CVE-2026-97185", "url": "https://bugzilla.suse.com/1282596" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 9:gimp-2:3.0.4-4.el9_8.14.x86_64", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.i686", "SUSE Liberty Linux 9:gimp-libs-2:3.0.4-4.el9_8.14.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-05T00:00:00Z", "details": "important" } ], "title": "CVE-2026-97185" } ] } ``` ## [rhsa-2026:72624](https://vulnerability.circl.lu/vuln/rhsa-2026%3A72624) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "security update for kernel", "title": "Title of the patch" }, { "category": "description", "text": "This security update provides a functional equivalent of RHSA-2026:72624.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:72624.\n", "title": "Description of the patch" }, { "category": "details", "text": "RHSA-2026:72624", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_72624.json" }, { "category": "self", "summary": "URL for RHSA-2026:72624", "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008075.html" }, { "category": "self", "summary": "E-Mail link for RHSA-2026:72624", "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-October/008075.html" }, { "category": "self", "summary": "SUSE CVE CVE-2026-45942 page", "url": "https://www.suse.com/security/cve/CVE-2026-45942/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-46076 page", "url": "https://www.suse.com/security/cve/CVE-2026-46076/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-46317 page", "url": "https://www.suse.com/security/cve/CVE-2026-46317/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-53341 page", "url": "https://www.suse.com/security/cve/CVE-2026-53341/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-64556 page", "url": "https://www.suse.com/security/cve/CVE-2026-64556/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-68299 page", "url": "https://www.suse.com/security/cve/CVE-2026-68299/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-74753 page", "url": "https://www.suse.com/security/cve/CVE-2026-74753/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-80522 page", "url": "https://www.suse.com/security/cve/CVE-2026-80522/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-89480 page", "url": "https://www.suse.com/security/cve/CVE-2026-89480/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-89775 page", "url": "https://www.suse.com/security/cve/CVE-2026-89775/" } ], "title": "security update for kernel", "tracking": { "current_release_date": "2026-10-06T10:22:57Z", "generator": { "date": "2026-09-28T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "RHSA-2026:72624", "initial_release_date": "2026-09-28T00:00:00Z", "revision_history": [ { "date": "2026-09-28T00:00:00Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:57:13Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-10-06T10:22:57Z", "number": "3", "summary": "unknown changes" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "product": { "name": "kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "product_id": "kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-abi-stablelists@6.12.0-211.61.1.el10_2?arch=noarch" } } }, { "category": "product_version", "name": "kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "product": { "name": "kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "product_id": "kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-doc@6.12.0-211.61.1.el10_2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "kernel-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-cross-headers@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/kernel-debug@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=kernel-debug-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-debug-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/kernel-debug-devel@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=kernel-debug-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-debug-devel-matched@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-debug-modules@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-debug-modules-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-debug-modules-extra@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-debug-uki-virt@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/kernel-devel@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=kernel-source-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-devel-matched@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-headers@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-modules@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-modules-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-modules-extra@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-modules-extra-matched@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/kernel-rt@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=kernel-source-rt-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-debug@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-debug-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-debug-devel@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-debug-modules@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-debug-modules-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-debug-modules-extra@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:o:linux:linux_kernel:6.12.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/kernel-rt-devel@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=kernel-source-rt-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-modules@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-modules-core@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-rt-modules-extra@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-tools@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-tools-libs@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-tools-libs-devel@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-uki-virt@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kernel-uki-virt-addons@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "libperf-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "libperf-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "libperf-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/libperf@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "perf-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "perf-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/perf@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=perf-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/python3-perf@6.12.0-211.61.1.el10_2?arch=x86_64&upstream=perf-0:6.12.0-211.61.1.el10_2.src.rpm" } } }, { "category": "product_version", "name": "rtla-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "rtla-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "rtla-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/rtla@6.12.0-211.61.1.el10_2?arch=x86_64" } } }, { "category": "product_version", "name": "rv-0:6.12.0-211.61.1.el10_2.x86_64", "product": { "name": "rv-0:6.12.0-211.61.1.el10_2.x86_64", "product_id": "rv-0:6.12.0-211.61.1.el10_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/rv@6.12.0-211.61.1.el10_2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Liberty Linux 10", "product": { "name": "SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10", "product_identification_helper": { "cpe": "cpe:/o:suse:sll:10" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch" }, "product_reference": "kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:6.12.0-211.61.1.el10_2.noarch as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch" }, "product_reference": "kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "libperf-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "libperf-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "perf-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "rtla-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" }, { "category": "default_component_of", "full_product_name": { "name": "rv-0:6.12.0-211.61.1.el10_2.x86_64 as component of SUSE Liberty Linux 10", "product_id": "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" }, "product_reference": "rv-0:6.12.0-211.61.1.el10_2.x86_64", "relates_to_product_reference": "SUSE Liberty Linux 10" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-45942", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-45942" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix e4b bitmap inconsistency reports\n\nA bitmap inconsistency issue was observed during stress tests under\nmixed huge-page workloads. Ext4 reported multiple e4b bitmap check\nfailures like:\n\next4_mb_complex_scan_group:2508: group 350, 8179 free clusters as\nper group info. But got 8192 blocks\n\nAnalysis and experimentation confirmed that the issue is caused by a\nrace condition between page migration and bitmap modification. Although\nthis timing window is extremely narrow, it is still hit in practice:\n\nfolio_lock ext4_mb_load_buddy\n__migrate_folio\n check ref count\n folio_mc_copy __filemap_get_folio\n folio_try_get(folio)\n ......\n mb_mark_used\n ext4_mb_unload_buddy\n __folio_migrate_mapping\n folio_ref_freeze\nfolio_unlock\n\nThe root cause of this issue is that the fast path of load_buddy only\nincrements the folio's reference count, which is insufficient to prevent\nconcurrent folio migration. We observed that the folio migration process\nacquires the folio lock. Therefore, we can determine whether to take the\nfast path in load_buddy by checking the lock status. If the folio is\nlocked, we opt for the slow path (which acquires the lock) to close this\nconcurrency window.\n\nAdditionally, this change addresses the following issues:\n\nWhen the DOUBLE_CHECK macro is enabled to inspect bitmap-related\nissues, the following error may be triggered:\n\ncorruption in group 324 at byte 784(6272): f in copy != ff on\ndisk/prealloc\n\nAnalysis reveals that this is a false positive. There is a specific race\nwindow where the bitmap and the group descriptor become momentarily\ninconsistent, leading to this error report:\n\next4_mb_load_buddy ext4_mb_load_buddy\n __filemap_get_folio(create|lock)\n folio_lock\n ext4_mb_init_cache\n folio_mark_uptodate\n __filemap_get_folio(no lock)\n ......\n mb_mark_used\n mb_mark_used_double\n mb_cmp_bitmaps\n mb_set_bits(e4b->bd_bitmap)\n folio_unlock\n\nThe original logic assumed that since mb_cmp_bitmaps is called when the\nbitmap is newly loaded from disk, the folio lock would be sufficient to\nprevent concurrent access. However, this overlooks a specific race\ncondition: if another process attempts to load buddy and finds the folio\nis already in an uptodate state, it will immediately begin using it without\nholding folio lock.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-45942", "url": "https://www.suse.com/security/cve/CVE-2026-45942" }, { "category": "external", "summary": "SUSE Bug 1266914 for CVE-2026-45942", "url": "https://bugzilla.suse.com/1266914" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "moderate" } ], "title": "CVE-2026-45942" }, { "cve": "CVE-2026-46076", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-46076" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1\n\nExplicitly synthesize a #UD for VMMCALL if L2 is active, L1 does NOT want\nto intercept VMMCALL, nested_svm_l2_tlb_flush_enabled() is true, and the\nhypercall is something other than one of the supported Hyper-V hypercalls.\nWhen all of the above conditions are met, KVM will intercept VMMCALL but\nnever forward it to L1, i.e. will let L2 make hypercalls as if it were L1.\n\nThe TLFS says a whole lot of nothing about this scenario, so go with the\narchitectural behavior, which says that VMMCALL #UDs if it's not\nintercepted.\n\nOpportunistically do a 2-for-1 stub trade by stub-ifying the new API\ninstead of the helpers it uses. The last remaining \"single\" stub will\nsoon be dropped as well.\n\n[sean: rewrite changelog and comment, tag for stable, remove defunct stubs]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-46076", "url": "https://www.suse.com/security/cve/CVE-2026-46076" }, { "category": "external", "summary": "SUSE Bug 1267365 for CVE-2026-46076", "url": "https://bugzilla.suse.com/1267365" }, { "category": "external", "summary": "SUSE Bug 1267366 for CVE-2026-46076", "url": "https://bugzilla.suse.com/1267366" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.9, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "important" } ], "title": "CVE-2026-46076" }, { "cve": "CVE-2026-46317", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-46317" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Reassign nested_mmus array behind mmu_lock\n\nkvm->arch.nested_mmus[] is walked under kvm->mmu_lock, including from the\nMMU notifier path (kvm_unmap_gfn_range() -> kvm_nested_s2_unmap()), which\ncan run at any time. kvm_vcpu_init_nested() reallocates the array and frees\nthe old buffer while holding only kvm->arch.config_lock, so such a walker\ncan reference the freed array.\n\nAllocate the new array outside of mmu_lock, as the allocation can sleep.\nUnder the lock, copy the existing entries, fix up the back pointers and\nreassign the array. Free the old buffer after dropping the lock, as\nkvfree() can sleep as well.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-46317", "url": "https://www.suse.com/security/cve/CVE-2026-46317" }, { "category": "external", "summary": "SUSE Bug 1268018 for CVE-2026-46317", "url": "https://bugzilla.suse.com/1268018" }, { "category": "external", "summary": "SUSE Bug 1268040 for CVE-2026-46317", "url": "https://bugzilla.suse.com/1268040" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "important" } ], "title": "CVE-2026-46317" }, { "cve": "CVE-2026-53341", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-53341" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()\n\nmay_decode_fh() accesses mount::mnt_ns without holding any locks; that\nmeans the mount can concurrently be unmounted, and the mnt_namespace can\nconcurrently be freed after an RCU grace period.\n\nThis race can happens as follows, assuming that the mount point was\ncreated by open_tree(..., OPEN_TREE_CLONE):\n\nthread 1 thread 2 RCU\n __do_sys_open_by_handle_at\n do_handle_open\n handle_to_path\n may_decode_fh\n is_mounted\n [mount::mnt_ns access]\n [mount::mnt_ns access]\n__do_sys_close\n fput_close_sync\n __fput\n dissolve_on_fput\n umount_tree\n class_namespace_excl_destructor\n namespace_unlock\n free_mnt_ns\n mnt_ns_tree_remove\n call_rcu(mnt_ns_release_rcu)\n mnt_ns_release_rcu\n mnt_ns_release\n kfree\n [mnt_namespace::user_ns access] **UAF**\n\nFix it by taking rcu_read_lock() around the mount::mnt_ns access, like\nin __prepend_path().\nAdditionally, document the semantics of mount::mnt_ns, and use WRITE_ONCE()\nfor writers that can race with lockless readers.\n\nThis bug is unreachable unless one of the following is set:\n\n - CONFIG_PREEMPTION\n - CONFIG_RCU_STRICT_GRACE_PERIOD\n\nbecause it requires an RCU grace period to happen during a syscall without\nan explicit preemption.\n\nThis doesn't seem to have interesting security impact; worst-case, it could\nleak the result of an integer comparison to userspace (from the level\ncheck in cap_capable()), cause an endless loop, or crash the kernel by\ndereferencing an invalid address.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-53341", "url": "https://www.suse.com/security/cve/CVE-2026-53341" }, { "category": "external", "summary": "SUSE Bug 1270139 for CVE-2026-53341", "url": "https://bugzilla.suse.com/1270139" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "moderate" } ], "title": "CVE-2026-53341" }, { "cve": "CVE-2026-64556", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-64556" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Detach event groups during remove_on_exec\n\nperf_event_remove_on_exec() removes events by calling\nperf_event_exit_event(). For top-level events, this removes the event from\nthe context with DETACH_EXIT only.\n\nThis can leave inconsistent group state when a removed event is a group\nleader and the group contains siblings without remove_on_exec. If the group\nwas active, the surviving siblings can remain active and attached to the\nremoved leader's sibling list, but are no longer represented by a valid\ngroup leader on the PMU context active lists.\n\nA later close of the removed leader uses DETACH_GROUP and can promote the\nstill-active siblings from this stale group state. The next schedule-in can\nthen add an already-linked active_list entry again, corrupting the PMU\ncontext active list.\n\nWith DEBUG_LIST enabled, this is caught as a list_add double-add in\nmerge_sched_in().\n\nFix this by detaching group relationships when remove_on_exec removes an\nevent. This preserves the existing task-exit and revoke behavior, while\nensuring surviving siblings are ungrouped before the removed event leaves\nthe context.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-64556", "url": "https://www.suse.com/security/cve/CVE-2026-64556" }, { "category": "external", "summary": "SUSE Bug 1273251 for CVE-2026-64556", "url": "https://bugzilla.suse.com/1273251" }, { "category": "external", "summary": "SUSE Bug 1274648 for CVE-2026-64556", "url": "https://bugzilla.suse.com/1274648" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "important" } ], "title": "CVE-2026-64556" }, { "cve": "CVE-2026-68299", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-68299" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets\n\nvmxnet3_get_hdr_len() assumes gdesc->rcd.v4/v6/tcp always describe the\nouter header, but for a Geneve-encapsulated packet the device can set\nthem based on the inner header instead, signalled by the\nVMXNET3_RCD_HDR_INNER_SHIFT bit in the completion descriptor. Since the\nfunction never skips the outer encapsulation, this mismatch triggers:\n\n- BUG_ON(hdr.ipv4->protocol != IPPROTO_TCP), because the outer\n protocol is UDP (Geneve), not TCP.\n- BUG_ON(hdr.eth->h_proto != ...), when the tunnel's outer and inner\n IP versions differ (e.g. outer IPv6/inner IPv4 or vice versa).\n\nCheck VMXNET3_RCD_HDR_INNER_SHIFT up front and bail out, since the\nfunction cannot locate the inner header it would need to parse. Also\nconvert the remaining BUG_ON()s in this function to return 0\ndefensively.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-68299", "url": "https://www.suse.com/security/cve/CVE-2026-68299" }, { "category": "external", "summary": "SUSE Bug 1275088 for CVE-2026-68299", "url": "https://bugzilla.suse.com/1275088" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "moderate" } ], "title": "CVE-2026-68299" }, { "cve": "CVE-2026-74753", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-74753" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Reject exited events as group leaders\n\nperf_event_remove_on_exec() sets remove-on-exec events to the EXIT state\nand detaches their group relationships. The event's file descriptor can\nremain open, however, and perf_event_open() currently accepts that event\nas a group leader because its early validation rejects only REVOKED and\nDEAD events.\n\nA new sibling can consequently be linked to the detached leader. When\nthe leader is closed, perf_group_detach() observes that its\nPERF_ATTACH_GROUP bit is already clear and skips the new sibling. The\nsibling then retains a group_leader pointer to the freed event.\n\nReject group leaders in the EXIT state. Perform the check while holding\nthe shared context mutex so that an exec in the target task cannot detach\nthe leader between validation and group attachment.\n\n[peterz: make the earlier test fully consistent]", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-74753", "url": "https://www.suse.com/security/cve/CVE-2026-74753" }, { "category": "external", "summary": "SUSE Bug 1278317 for CVE-2026-74753", "url": "https://bugzilla.suse.com/1278317" }, { "category": "external", "summary": "SUSE Bug 1282534 for CVE-2026-74753", "url": "https://bugzilla.suse.com/1282534" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "important" } ], "title": "CVE-2026-74753" }, { "cve": "CVE-2026-80522", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-80522" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()\n\nPerform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way\nit is done in tegra_ccm_crypt_init(). The current formulae may lead to a\ncrash if a caller does not call tegra_gcm_setauthsize() and so ctx->authsize\nremains zero. Then a decrypt operation with incorrect rctx->cryptlen will\nlead to a write beyound rctx->dst_sg buffer.\n\nAs a follow-up cleanup delete struct tegra_aead_ctx->authsize field since\nit appears to be completely unused. Also simplify tegra_ccm_setauthsize()\nand tegra_gcm_setauthsize() functions respectively.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-80522", "url": "https://www.suse.com/security/cve/CVE-2026-80522" }, { "category": "external", "summary": "SUSE Bug 1277465 for CVE-2026-80522", "url": "https://bugzilla.suse.com/1277465" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "moderate" } ], "title": "CVE-2026-80522" }, { "cve": "CVE-2026-89480", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-89480" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: reject a read that transferred too few bytes\n\nnvme_tcp_recv_data() completes a request once the current C2HData PDU\nhas been consumed. Nothing compares the total bytes received against\nthe length the command asked for: struct nvme_tcp_request has no\nreceive-side counter, queue->data_remaining is per queue, and\nblk_mq_end_request() completes for blk_rq_bytes(rq) unconditionally\nwith no residual concept anywhere above.\n\nA controller can therefore answer a 4096-byte read with 512 bytes and\nhave it reported as a complete read; user space then gets 4096 bytes of\nwhich 3584 are whatever was already in the page. I reproduced that with\na test target.\n\nCount the bytes received and refuse to complete a successful read whose\ncount does not match, at the two NVME_TCP_F_DATA_SUCCESS paths and in\nnvme_tcp_process_nvme_cqe(). The success test shifts req->status right\nby one, because the driver keeps the wire value there and shifts it on\ncompletion, so the check must see what the completion path will see.\nOnly REQ_OP_READ is checked, because there the length comes from the\nsectors the request covers; a passthrough command is built by its\nsubmitter, which picks both command and buffer, so the kernel has\nnothing to compare against.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-89480", "url": "https://www.suse.com/security/cve/CVE-2026-89480" }, { "category": "external", "summary": "SUSE Bug 1280449 for CVE-2026-89480", "url": "https://bugzilla.suse.com/1280449" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "low" } ], "title": "CVE-2026-89480" }, { "cve": "CVE-2026-89775", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-89775" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation\n\nComputing the effects of a TLB invalidation involves looking at\nthe size of the mapping cached by the TLB. For S1 mappings such as\nVNCR, this is deducted from the combination of the base granule size\nand the mapping level.\n\nHowever, this implies that the S1 MMU is *on*. When the MMU is off,\nwe indicate this with the level being set to a \"creative\" value of\n-127 (S1_MMU_DISABLED).\n\nThis ends-up being misinterpreted by pgshift_level_to_ttl() as it\ndoesn't handle negative levels at all (the level is immediately cast\nto a u8 and only the bottom two bits considered), leading to an\ninvalidation size of 0. Not helpful.\n\nTidy-up pgshift_level_to_ttl() to handle these negative levels, and\nttl_to_size() to always return SZ_1G when no valid TTL is present.\nThis allows the removal of open-coded checks for similar situations.\n\nNote that the check for a negative value not explicitely checking for\nS1_MMU_DISABLED is deliberate, so that actual negative levels introduced\nwith LVA2 and D128 can take the same path if we ever support them.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-89775", "url": "https://www.suse.com/security/cve/CVE-2026-89775" }, { "category": "external", "summary": "SUSE Bug 1280133 for CVE-2026-89775", "url": "https://bugzilla.suse.com/1280133" }, { "category": "external", "summary": "SUSE Bug 1283110 for CVE-2026-89775", "url": "https://bugzilla.suse.com/1283110" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 10:kernel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-abi-stablelists-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-cross-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-debug-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-devel-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-doc-0:6.12.0-211.61.1.el10_2.noarch", "SUSE Liberty Linux 10:kernel-headers-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-modules-extra-matched-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-debug-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-core-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-rt-modules-extra-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-tools-libs-devel-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:kernel-uki-virt-addons-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:libperf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:python3-perf-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rtla-0:6.12.0-211.61.1.el10_2.x86_64", "SUSE Liberty Linux 10:rv-0:6.12.0-211.61.1.el10_2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-28T00:00:00Z", "details": "critical" } ], "title": "CVE-2026-89775" } ] } ``` ## [suse-su-2026:4440-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A4440-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)", "title": "Title of the patch" }, { "category": "description", "text": "\nThis update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2026-4440,SUSE-SLE-Live-Patching-12-SP5-2026-4440", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4440-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:4440-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264440-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:4440-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264440-1/" }, { "category": "self", "summary": "SUSE Bug 1267370", "url": "https://bugzilla.suse.com/1267370" }, { "category": "self", "summary": "SUSE Bug 1272391", "url": "https://bugzilla.suse.com/1272391" }, { "category": "self", "summary": "SUSE Bug 1273012", "url": "https://bugzilla.suse.com/1273012" }, { "category": "self", "summary": "SUSE Bug 1273833", "url": "https://bugzilla.suse.com/1273833" }, { "category": "self", "summary": "SUSE Bug 1275162", "url": "https://bugzilla.suse.com/1275162" }, { "category": "self", "summary": "SUSE Bug 1275228", "url": "https://bugzilla.suse.com/1275228" }, { "category": "self", "summary": "SUSE Bug 1276493", "url": "https://bugzilla.suse.com/1276493" }, { "category": "self", "summary": "SUSE CVE CVE-2026-46116 page", "url": "https://www.suse.com/security/cve/CVE-2026-46116/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-63888 page", "url": "https://www.suse.com/security/cve/CVE-2026-63888/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-63920 page", "url": "https://www.suse.com/security/cve/CVE-2026-63920/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-64011 page", "url": "https://www.suse.com/security/cve/CVE-2026-64011/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-64114 page", "url": "https://www.suse.com/security/cve/CVE-2026-64114/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-68121 page", "url": "https://www.suse.com/security/cve/CVE-2026-68121/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-68202 page", "url": "https://www.suse.com/security/cve/CVE-2026-68202/" } ], "title": "Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)", "tracking": { "current_release_date": "2026-10-05T16:59:56Z", "generator": { "date": "2026-10-04T13:03:56Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:4440-1", "initial_release_date": "2026-10-04T13:03:56Z", "revision_history": [ { "date": "2026-10-04T13:03:56Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:56Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "product": { "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "product_id": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/kgraft-patch-4_12_14-122_290-default@14-2.1?arch=ppc64le&upstream=kgraft-patch-SLE12-SP5_Update_76-0:14-2.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "product": { "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "product_id": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/kgraft-patch-4_12_14-122_290-default@14-2.1?arch=s390x&upstream=kgraft-patch-SLE12-SP5_Update_76-0:14-2.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64", "product": { "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64", "product_id": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kgraft-patch-4_12_14-122_290-default@14-2.1?arch=x86_64&upstream=kgraft-patch-SLE12-SP5_Update_76-0:14-2.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Live Patching 12 SP5", "product": { "name": "SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-live-patching:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le" }, "product_reference": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x" }, "product_reference": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" }, "product_reference": "kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-46116", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-46116" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: defensively unhash xfrm_state lists in __xfrm_state_delete\n\nKASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s\nhlist_del_rcu calls under syzkaller load on linux-6.12.y stable\n(reproduced on 6.12.47, also reachable via the same code path on\ntorvalds/master and on the ipsec tree). Nine unique signatures cluster\nin the xfrm_state lifecycle, the load-bearing one being:\n\n BUG: KASAN: slab-use-after-free in __hlist_del include/linux/list.h:990 [inline]\n BUG: KASAN: slab-use-after-free in hlist_del_rcu include/linux/rculist.h:516 [inline]\n BUG: KASAN: slab-use-after-free in __xfrm_state_delete net/xfrm/xfrm_state.c\n Write of size 8 at addr ffff8881198bcb70 by task kworker/u8:9/435\n\n Workqueue: netns cleanup_net\n Call Trace:\n __hlist_del / hlist_del_rcu\n __xfrm_state_delete\n xfrm_state_delete\n xfrm_state_flush\n xfrm_state_fini\n ops_exit_list\n cleanup_net\n\nThe other observed signatures hit the same slab object from\n__xfrm_state_lookup, xfrm_alloc_spi, __xfrm_state_insert and an OOB\nwrite variant of __xfrm_state_delete, all on the byseq/byspi\nhash chains.\n\n__xfrm_state_delete() guards its byseq and byspi unhashes with\nvalue-based predicates:\n\n\tif (x->km.seq)\n\t\thlist_del_rcu(&x->byseq);\n\tif (x->id.spi)\n\t\thlist_del_rcu(&x->byspi);\n\nwhile everywhere else in the file (e.g. state_cache, state_cache_input)\nthe safer hlist_unhashed() check is used. xfrm_alloc_spi() sets\nx->id.spi = newspi inside xfrm_state_lock and then immediately inserts\ninto byspi, but a path that observes x->id.spi != 0 outside of\nxfrm_state_lock can still skip-or-hit the byspi unhash inconsistently\nwith whether x is actually on the list. The same holds for x->km.seq\nversus byseq, and the bydst/bysrc unhashes have no predicate at all,\nso a second __xfrm_state_delete() on the same object writes through\nLIST_POISON pprev.\n\nThe defensive change here:\n\n - Use hlist_del_init_rcu() instead of hlist_del_rcu() on bydst,\n bysrc, byseq and byspi so a second deletion is a no-op rather\n than a write through LIST_POISON pprev. The byseq/byspi nodes\n are already initialised in xfrm_state_alloc().\n - Test hlist_unhashed() rather than the value predicate for\n byseq/byspi, so the unhash decision tracks list state rather than\n mutable scalar fields.\n\nEmpirical verification: applied this patch on top of v6.12.47, rebuilt,\nand re-ran the same syzkaller harness for 1h16m on a previously-crashy\nconfiguration that produced ~100 hits each of slab-use-after-free\nRead in xfrm_alloc_spi / Read in __xfrm_state_lookup / Write in\n__xfrm_state_delete. After the patch, 7.1M execs across 32 VMs at\n~1550 exec/sec produced zero xfrm_state UAF/OOB hits. /proc/slabinfo\nconfirms the xfrm_state slab is actively allocated and freed during\nthe run (~143 KiB resident), so the fuzzer is still exercising those\ncode paths -- they just no longer crash.\n\nReproduction:\n\n - Linux 6.12.47 x86_64 + KASAN_GENERIC + KASAN_INLINE + KCOV\n - syzkaller @ 746545b8b1e4c3a128db8652b340d3df90ce61db\n - 32 QEMU/KVM VMs x 2 vCPU on AWS c5.metal bare metal\n - 9 unique signatures collected in ~9h, all within xfrm_state\n lifecycle", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-46116", "url": "https://www.suse.com/security/cve/CVE-2026-46116" }, { "category": "external", "summary": "SUSE Bug 1267369 for CVE-2026-46116", "url": "https://bugzilla.suse.com/1267369" }, { "category": "external", "summary": "SUSE Bug 1267370 for CVE-2026-46116", "url": "https://bugzilla.suse.com/1267370" }, { "category": "external", "summary": "SUSE Bug 1274780 for CVE-2026-46116", "url": "https://bugzilla.suse.com/1274780" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-46116" }, { "cve": "CVE-2026-63888", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-63888" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()\n\nTwo latent bugs in the Text-phase handler, both present since the\noriginal LIO integration in commit e48354ce078c (\"iscsi-target: Add\niSCSI fabric support for target v4.1\"):\n\n1) DataDigest CRC buffer overread (4 bytes past text_in).\n\n text_in is kzalloc()'d at ALIGN(payload_length, 4). rx_size is then\n incremented by ISCSI_CRC_LEN to make room for the received DataDigest\n in the iovec, but the same (now-bumped) rx_size is passed as the\n buffer length to iscsit_crc_buf():\n\n if (conn->conn_ops->DataDigest) {\n ...\n rx_size += ISCSI_CRC_LEN;\n }\n ...\n if (conn->conn_ops->DataDigest) {\n data_crc = iscsit_crc_buf(text_in, rx_size, 0, NULL);\n\n iscsit_crc_buf() walks rx_size bytes of text_in with crc32c(), so\n when DataDigest is negotiated it reads 4 bytes past the end of the\n text_in allocation. KASAN reproduces this directly on the unpatched\n mainline tree as slab-out-of-bounds in crc32c() called from the Text\n PDU path. The OOB bytes feed crc32c() and are then compared against\n the initiator-supplied checksum, so the value does not flow back to\n the attacker, but the kernel does read past the buffer on every Text\n PDU with DataDigest=CRC32C.\n\n Fix by passing the actual padded payload length\n (ALIGN(payload_length, 4)) that was used for the kzalloc().\n\n2) Stale cmd->text_in_ptr re-free (double-free) on ERL>0 bad DataDigest\n drop.\n\n On DataDigest mismatch with ErrorRecoveryLevel > 0 the handler\n silently drops the PDU and lets the initiator plug the CmdSN gap:\n\n kfree(text_in);\n return 0;\n\n cmd->text_in_ptr still points at the freed buffer. The next Text\n Request on the same ITT re-enters iscsit_setup_text_cmd(), which\n unconditionally does\n\n kfree(cmd->text_in_ptr);\n cmd->text_in_ptr = NULL;\n\n freeing the same pointer a second time. Session teardown via\n iscsit_release_cmd() has the same shape and hits the same double-free\n if the connection is dropped before a second Text Request arrives.\n\n On an unmodified mainline tree the bug-1 CRC overread fires first on\n the initial valid Text Request and perturbs the subsequent state, so\n #4 was isolated by building a kernel with only the bug-1 hunk of this\n patch applied plus temporary printk() observability around the three\n relevant kfree() sites. The observability prints are not part of\n this patch. On that build, a three-PDU Text Request sequence after\n login produces two back-to-back splats:\n\n BUG: KASAN: double-free in iscsit_setup_text_cmd+0x??\n BUG: KASAN: double-free in iscsit_release_cmd+0x??\n\n showing the same pointer freed in the ERL>0 drop path and again in\n iscsit_setup_text_cmd() (next Text Request on the same ITT) and once\n more in iscsit_release_cmd() (session teardown). On distro kernels\n with CONFIG_SLAB_FREELIST_HARDENED=y (default) the double-free\n becomes a remote kernel BUG(); on non-hardened kernels it corrupts\n the slab freelist.\n\n Fix by clearing cmd->text_in_ptr after the kfree() in the ERL>0 drop\n path. With both hunks applied #4 is directly observable on the stock\n tree without observability printks; fixing bug-1 alone would mask #4\n less, not more, so the hunks are submitted together.\n\nBoth fixes are one-liners. The Text PDU state machine is unchanged and\nthe wire protocol is unaffected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-63888", "url": "https://www.suse.com/security/cve/CVE-2026-63888" }, { "category": "external", "summary": "SUSE Bug 1272390 for CVE-2026-63888", "url": "https://bugzilla.suse.com/1272390" }, { "category": "external", "summary": "SUSE Bug 1272391 for CVE-2026-63888", "url": "https://bugzilla.suse.com/1272391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-63888" }, { "cve": "CVE-2026-63920", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-63920" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: validate extension header length before copying to cmsg\n\nip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR}\ncmsgs (and their IPV6_2292* legacy counterparts) by trusting the\non-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length.\nThe length was validated only at parse time (ipv6_parse_hopopts(),\netc.). An nftables payload-write expression can rewrite hdrlen after\nparsing and before the skb reaches recvmsg; the write itself is\nin-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040\nbytes from an 8-byte header. nftables is reachable from an\nunprivileged user namespace, so this is an unprivileged\nslab-out-of-bounds read:\n\n BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540\n put_cmsg+0x3ac/0x540\n udpv6_recvmsg+0xca0/0x1250\n sock_recvmsg+0xdf/0x190\n ____sys_recvmsg+0x1b1/0x620\n\nAdd ipv6_get_exthdr_len() which validates that at least two bytes\nare accessible before reading the hdrlen field, then checks the\ncomputed length against skb_tail_pointer(skb), returning 0 on\nfailure. Extension headers are kept in the linear skb area by\npskb_may_pull() during input, so skb_tail_pointer() is the correct\nbound.\n\nUse ipv6_get_exthdr_len() at all non-AH call sites: the five\nstandalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR)\nand the three standard cases in the extension-header walk loop\n(DSTOPTS, ROUTING, default). AH retains an inline bounds check\nbecause its length formula differs ((ptr[1]+2)<<2).\n\nThe walk loop also gets a pre-read bounds check at the top to\nvalidate ptr before any case accesses ptr[0] or ptr[1].\n\nWhen the walk loop detects a corrupted header, return from the\nfunction instead of continuing to process later socket options.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-63920", "url": "https://www.suse.com/security/cve/CVE-2026-63920" }, { "category": "external", "summary": "SUSE Bug 1272877 for CVE-2026-63920", "url": "https://bugzilla.suse.com/1272877" }, { "category": "external", "summary": "SUSE Bug 1273012 for CVE-2026-63920", "url": "https://bugzilla.suse.com/1273012" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-63920" }, { "cve": "CVE-2026-64011", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-64011" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: Fix use-after-free in llcp_sock_release()\n\nllcp_sock_release() unconditionally unlinks the socket from the local\nsockets list. However, if the socket is still in connecting state, it\nis on the connecting list.\n\nFix this by checking the socket state and unlinking from the correct list.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-64011", "url": "https://www.suse.com/security/cve/CVE-2026-64011" }, { "category": "external", "summary": "SUSE Bug 1273891 for CVE-2026-64011", "url": "https://bugzilla.suse.com/1273891" }, { "category": "external", "summary": "SUSE Bug 1276493 for CVE-2026-64011", "url": "https://bugzilla.suse.com/1276493" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-64011" }, { "cve": "CVE-2026-64114", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-64114" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: raw: reject IP_HDRINCL packets with ihl < 5\n\nraw_send_hdrinc() validates that the caller-supplied IPv4 header\nfits within the message length:\n\n iphlen = iph->ihl * 4;\n err = -EINVAL;\n if (iphlen > length)\n goto error_free;\n\n if (iphlen >= sizeof(*iph)) {\n /* fix up saddr, tot_len, id, csum, transport_header */\n }\n\nIt does not, however, reject ihl < 5. For such a packet the\n\"if (iphlen >= sizeof(*iph))\" branch is skipped, leaving the\ncrafted iphdr untouched, but the packet is still handed to\n__ip_local_out() and onward. Downstream consumers that read\niph->ihl assume a sane value: net/ipv4/ah4.c:ah_output() in\nparticular subtracts sizeof(struct iphdr) from top_iph->ihl * 4\nand passes the (signed-int-negative, then cast to size_t)\nresult to memcpy(), producing an OOB access of length close to\nSIZE_MAX and a host kernel panic.\n\nAn IPv4 header with ihl < 5 is malformed by definition (RFC 791:\n\"Internet Header Length is the length of the internet header in\n32 bit words ... Note that the minimum value for a correct header\nis 5.\"). The kernel should not be willing to inject such a\npacket into its own output path.\n\nReject \"iphlen < sizeof(*iph)\" alongside the existing\n\"iphlen > length\" check. This matches the principle that locally\nconstructed packets that re-enter the IP stack must pass the same\nbasic sanity tests that a foreign packet would be subjected to.\n\nOnce this lands, the \"if (iphlen >= sizeof(*iph))\" wrapper around\nthe fixup branch becomes redundant; left in place to keep the\npatch minimal and backport-friendly. A follow-up can unwrap it.\n\nNote that commit 86f4c90a1c5c (\"ipv4, ipv6: ensure raw socket\nmessage is big enough to hold an IP header\") ensures the message\nbuffer is large enough to hold an iphdr, but does not constrain\nthe self-reported iph->ihl.\n\nReachability: the malformed packet source is any caller with\nCAP_NET_RAW, including an unprivileged process in a user+net\nnamespace on a kernel with CONFIG_USER_NS=y. The reproduced AH\ncrash also requires a matching xfrm AH policy on the outgoing\nroute; a container granted CAP_NET_ADMIN can install that state\nand policy in its netns. Loopback bypasses xfrm_output, so the\ntrigger uses a real netdev.\n\nReproduced on UML + KASAN: kernel-mode fault at addr 0x0 with\nmemcpy_orig at the crash site. Same shape reproduces inside a\nrootless Docker container with --cap-add NET_ADMIN on a stock\ndistro kernel.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-64114", "url": "https://www.suse.com/security/cve/CVE-2026-64114" }, { "category": "external", "summary": "SUSE Bug 1273742 for CVE-2026-64114", "url": "https://bugzilla.suse.com/1273742" }, { "category": "external", "summary": "SUSE Bug 1273833 for CVE-2026-64114", "url": "https://bugzilla.suse.com/1273833" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-64114" }, { "cve": "CVE-2026-68121", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-68121" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npppoe: reload header pointer after dev_hard_header()\n\npppoe_sendmsg() saves a pointer to the PPPoE header before calling\ndev_hard_header(). Device header callbacks are allowed to reallocate the\nskb head, invalidating pointers into it.\n\nThis can happen when a send is blocked in copy_from_user() while the first\nnon-Ethernet port is added to an empty team device. The team's delegated\nGRE header callback then expands the skb head. PPPoE subsequently writes\nsix bytes through the stale pointer into the freed head.\n\nReload the PPPoE header through the skb's network-header offset after\ndevice header creation. pskb_expand_head() updates that offset when it\nrelocates the head.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-68121", "url": "https://www.suse.com/security/cve/CVE-2026-68121" }, { "category": "external", "summary": "SUSE Bug 1274888 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1274888" }, { "category": "external", "summary": "SUSE Bug 1275228 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1275228" }, { "category": "external", "summary": "SUSE Bug 1282946 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1282946" }, { "category": "external", "summary": "SUSE Bug 1282953 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1282953" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-68121" }, { "cve": "CVE-2026-68202", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-68202" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: close a re-opened queue timer in the destructor\n\nqueue_delete() closes the queue timer, then frees it. snd_seq_timer_close()\nclears q->timer->timeri. snd_use_lock_sync() then drains borrowers, and\nsnd_seq_timer_delete() frees q->timer.\n\nA borrower can re-open the timer inside that window. A SET_QUEUE_CLIENT\nthat took a queueptr() use_lock reference before the queue was unlinked\nruns snd_seq_timer_open() after the close. Open refuses re-open only while\ntimeri is set, and the close just cleared it, so it re-opens timeri.\n\nsnd_seq_timer_delete() does not close that instance. Its snd_seq_timer_stop()\nis a no-op, because running was cleared first. So it frees q->timer with the\ninstance still live. The queue is freed next.\n\nThe instance stays on the global timer with callback_data pointing at the\nfreed queue. A non-owner START on the unlocked queue arms it. The next tick\nderefs the freed queue in snd_seq_timer_interrupt().\n\nReachable by an unprivileged user with access to /dev/snd/seq. No CAP and\nno queue ownership required.\n\nClose any lingering instance in the destructor. There, ->timeri can no\nlonger change: the queue is unlinked and all use_lock borrowers have\ndrained, so no snd_seq_queue_use() can re-open it. Close it before clearing\nq->timer. snd_timer_close() waits for any in-flight snd_seq_timer_interrupt()\nto finish, and that callback still reads q->timer (via snd_seq_check_queue()),\nso q->timer must stay valid until it drains.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-68202", "url": "https://www.suse.com/security/cve/CVE-2026-68202" }, { "category": "external", "summary": "SUSE Bug 1275161 for CVE-2026-68202", "url": "https://bugzilla.suse.com/1275161" }, { "category": "external", "summary": "SUSE Bug 1275162 for CVE-2026-68202", "url": "https://bugzilla.suse.com/1275162" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_290-default-0:14-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-04T13:03:56Z", "details": "important" } ], "title": "CVE-2026-68202" } ] } ``` ## [suse-su-2026:4436-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A4436-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)", "title": "Title of the patch" }, { "category": "description", "text": "\nThis update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues:\n\nThe following security issues were fixed:\n\n- CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370).\n- CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391).\n- CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012).\n- CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493).\n- CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833).\n- CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228).\n- CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2026-4436,SUSE-SLE-Live-Patching-12-SP5-2026-4436", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4436-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:4436-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264436-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:4436-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264436-1/" }, { "category": "self", "summary": "SUSE Bug 1267370", "url": "https://bugzilla.suse.com/1267370" }, { "category": "self", "summary": "SUSE Bug 1272391", "url": "https://bugzilla.suse.com/1272391" }, { "category": "self", "summary": "SUSE Bug 1273012", "url": "https://bugzilla.suse.com/1273012" }, { "category": "self", "summary": "SUSE Bug 1273833", "url": "https://bugzilla.suse.com/1273833" }, { "category": "self", "summary": "SUSE Bug 1275162", "url": "https://bugzilla.suse.com/1275162" }, { "category": "self", "summary": "SUSE Bug 1275228", "url": "https://bugzilla.suse.com/1275228" }, { "category": "self", "summary": "SUSE Bug 1276493", "url": "https://bugzilla.suse.com/1276493" }, { "category": "self", "summary": "SUSE CVE CVE-2026-46116 page", "url": "https://www.suse.com/security/cve/CVE-2026-46116/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-63888 page", "url": "https://www.suse.com/security/cve/CVE-2026-63888/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-63920 page", "url": "https://www.suse.com/security/cve/CVE-2026-63920/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-64011 page", "url": "https://www.suse.com/security/cve/CVE-2026-64011/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-64114 page", "url": "https://www.suse.com/security/cve/CVE-2026-64114/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-68121 page", "url": "https://www.suse.com/security/cve/CVE-2026-68121/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-68202 page", "url": "https://www.suse.com/security/cve/CVE-2026-68202/" } ], "title": "Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)", "tracking": { "current_release_date": "2026-10-05T16:59:55Z", "generator": { "date": "2026-10-02T18:33:48Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:4436-1", "initial_release_date": "2026-10-02T18:33:48Z", "revision_history": [ { "date": "2026-10-02T18:33:48Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:55Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "product": { "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "product_id": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/kgraft-patch-4_12_14-122_272-default@18-2.1?arch=ppc64le&upstream=kgraft-patch-SLE12-SP5_Update_72-0:18-2.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "product": { "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "product_id": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/kgraft-patch-4_12_14-122_272-default@18-2.1?arch=s390x&upstream=kgraft-patch-SLE12-SP5_Update_72-0:18-2.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64", "product": { "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64", "product_id": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/kgraft-patch-4_12_14-122_272-default@18-2.1?arch=x86_64&upstream=kgraft-patch-SLE12-SP5_Update_72-0:18-2.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Live Patching 12 SP5", "product": { "name": "SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-live-patching:12:sp5" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le" }, "product_reference": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x" }, "product_reference": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5" }, { "category": "default_component_of", "full_product_name": { "name": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5", "product_id": "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" }, "product_reference": "kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12 SP5" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-46116", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-46116" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: defensively unhash xfrm_state lists in __xfrm_state_delete\n\nKASAN reproduces a slab-use-after-free in __xfrm_state_delete()'s\nhlist_del_rcu calls under syzkaller load on linux-6.12.y stable\n(reproduced on 6.12.47, also reachable via the same code path on\ntorvalds/master and on the ipsec tree). Nine unique signatures cluster\nin the xfrm_state lifecycle, the load-bearing one being:\n\n BUG: KASAN: slab-use-after-free in __hlist_del include/linux/list.h:990 [inline]\n BUG: KASAN: slab-use-after-free in hlist_del_rcu include/linux/rculist.h:516 [inline]\n BUG: KASAN: slab-use-after-free in __xfrm_state_delete net/xfrm/xfrm_state.c\n Write of size 8 at addr ffff8881198bcb70 by task kworker/u8:9/435\n\n Workqueue: netns cleanup_net\n Call Trace:\n __hlist_del / hlist_del_rcu\n __xfrm_state_delete\n xfrm_state_delete\n xfrm_state_flush\n xfrm_state_fini\n ops_exit_list\n cleanup_net\n\nThe other observed signatures hit the same slab object from\n__xfrm_state_lookup, xfrm_alloc_spi, __xfrm_state_insert and an OOB\nwrite variant of __xfrm_state_delete, all on the byseq/byspi\nhash chains.\n\n__xfrm_state_delete() guards its byseq and byspi unhashes with\nvalue-based predicates:\n\n\tif (x->km.seq)\n\t\thlist_del_rcu(&x->byseq);\n\tif (x->id.spi)\n\t\thlist_del_rcu(&x->byspi);\n\nwhile everywhere else in the file (e.g. state_cache, state_cache_input)\nthe safer hlist_unhashed() check is used. xfrm_alloc_spi() sets\nx->id.spi = newspi inside xfrm_state_lock and then immediately inserts\ninto byspi, but a path that observes x->id.spi != 0 outside of\nxfrm_state_lock can still skip-or-hit the byspi unhash inconsistently\nwith whether x is actually on the list. The same holds for x->km.seq\nversus byseq, and the bydst/bysrc unhashes have no predicate at all,\nso a second __xfrm_state_delete() on the same object writes through\nLIST_POISON pprev.\n\nThe defensive change here:\n\n - Use hlist_del_init_rcu() instead of hlist_del_rcu() on bydst,\n bysrc, byseq and byspi so a second deletion is a no-op rather\n than a write through LIST_POISON pprev. The byseq/byspi nodes\n are already initialised in xfrm_state_alloc().\n - Test hlist_unhashed() rather than the value predicate for\n byseq/byspi, so the unhash decision tracks list state rather than\n mutable scalar fields.\n\nEmpirical verification: applied this patch on top of v6.12.47, rebuilt,\nand re-ran the same syzkaller harness for 1h16m on a previously-crashy\nconfiguration that produced ~100 hits each of slab-use-after-free\nRead in xfrm_alloc_spi / Read in __xfrm_state_lookup / Write in\n__xfrm_state_delete. After the patch, 7.1M execs across 32 VMs at\n~1550 exec/sec produced zero xfrm_state UAF/OOB hits. /proc/slabinfo\nconfirms the xfrm_state slab is actively allocated and freed during\nthe run (~143 KiB resident), so the fuzzer is still exercising those\ncode paths -- they just no longer crash.\n\nReproduction:\n\n - Linux 6.12.47 x86_64 + KASAN_GENERIC + KASAN_INLINE + KCOV\n - syzkaller @ 746545b8b1e4c3a128db8652b340d3df90ce61db\n - 32 QEMU/KVM VMs x 2 vCPU on AWS c5.metal bare metal\n - 9 unique signatures collected in ~9h, all within xfrm_state\n lifecycle", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-46116", "url": "https://www.suse.com/security/cve/CVE-2026-46116" }, { "category": "external", "summary": "SUSE Bug 1267369 for CVE-2026-46116", "url": "https://bugzilla.suse.com/1267369" }, { "category": "external", "summary": "SUSE Bug 1267370 for CVE-2026-46116", "url": "https://bugzilla.suse.com/1267370" }, { "category": "external", "summary": "SUSE Bug 1274780 for CVE-2026-46116", "url": "https://bugzilla.suse.com/1274780" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-46116" }, { "cve": "CVE-2026-63888", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-63888" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()\n\nTwo latent bugs in the Text-phase handler, both present since the\noriginal LIO integration in commit e48354ce078c (\"iscsi-target: Add\niSCSI fabric support for target v4.1\"):\n\n1) DataDigest CRC buffer overread (4 bytes past text_in).\n\n text_in is kzalloc()'d at ALIGN(payload_length, 4). rx_size is then\n incremented by ISCSI_CRC_LEN to make room for the received DataDigest\n in the iovec, but the same (now-bumped) rx_size is passed as the\n buffer length to iscsit_crc_buf():\n\n if (conn->conn_ops->DataDigest) {\n ...\n rx_size += ISCSI_CRC_LEN;\n }\n ...\n if (conn->conn_ops->DataDigest) {\n data_crc = iscsit_crc_buf(text_in, rx_size, 0, NULL);\n\n iscsit_crc_buf() walks rx_size bytes of text_in with crc32c(), so\n when DataDigest is negotiated it reads 4 bytes past the end of the\n text_in allocation. KASAN reproduces this directly on the unpatched\n mainline tree as slab-out-of-bounds in crc32c() called from the Text\n PDU path. The OOB bytes feed crc32c() and are then compared against\n the initiator-supplied checksum, so the value does not flow back to\n the attacker, but the kernel does read past the buffer on every Text\n PDU with DataDigest=CRC32C.\n\n Fix by passing the actual padded payload length\n (ALIGN(payload_length, 4)) that was used for the kzalloc().\n\n2) Stale cmd->text_in_ptr re-free (double-free) on ERL>0 bad DataDigest\n drop.\n\n On DataDigest mismatch with ErrorRecoveryLevel > 0 the handler\n silently drops the PDU and lets the initiator plug the CmdSN gap:\n\n kfree(text_in);\n return 0;\n\n cmd->text_in_ptr still points at the freed buffer. The next Text\n Request on the same ITT re-enters iscsit_setup_text_cmd(), which\n unconditionally does\n\n kfree(cmd->text_in_ptr);\n cmd->text_in_ptr = NULL;\n\n freeing the same pointer a second time. Session teardown via\n iscsit_release_cmd() has the same shape and hits the same double-free\n if the connection is dropped before a second Text Request arrives.\n\n On an unmodified mainline tree the bug-1 CRC overread fires first on\n the initial valid Text Request and perturbs the subsequent state, so\n #4 was isolated by building a kernel with only the bug-1 hunk of this\n patch applied plus temporary printk() observability around the three\n relevant kfree() sites. The observability prints are not part of\n this patch. On that build, a three-PDU Text Request sequence after\n login produces two back-to-back splats:\n\n BUG: KASAN: double-free in iscsit_setup_text_cmd+0x??\n BUG: KASAN: double-free in iscsit_release_cmd+0x??\n\n showing the same pointer freed in the ERL>0 drop path and again in\n iscsit_setup_text_cmd() (next Text Request on the same ITT) and once\n more in iscsit_release_cmd() (session teardown). On distro kernels\n with CONFIG_SLAB_FREELIST_HARDENED=y (default) the double-free\n becomes a remote kernel BUG(); on non-hardened kernels it corrupts\n the slab freelist.\n\n Fix by clearing cmd->text_in_ptr after the kfree() in the ERL>0 drop\n path. With both hunks applied #4 is directly observable on the stock\n tree without observability printks; fixing bug-1 alone would mask #4\n less, not more, so the hunks are submitted together.\n\nBoth fixes are one-liners. The Text PDU state machine is unchanged and\nthe wire protocol is unaffected.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-63888", "url": "https://www.suse.com/security/cve/CVE-2026-63888" }, { "category": "external", "summary": "SUSE Bug 1272390 for CVE-2026-63888", "url": "https://bugzilla.suse.com/1272390" }, { "category": "external", "summary": "SUSE Bug 1272391 for CVE-2026-63888", "url": "https://bugzilla.suse.com/1272391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-63888" }, { "cve": "CVE-2026-63920", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-63920" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: validate extension header length before copying to cmsg\n\nip6_datagram_recv_specific_ctl() builds IPV6_{HOPOPTS,DSTOPTS,RTHDR}\ncmsgs (and their IPV6_2292* legacy counterparts) by trusting the\non-wire hdrlen byte (ptr[1]) when computing the put_cmsg() length.\nThe length was validated only at parse time (ipv6_parse_hopopts(),\netc.). An nftables payload-write expression can rewrite hdrlen after\nparsing and before the skb reaches recvmsg; the write itself is\nin-bounds but put_cmsg() then reads up to ((hdrlen+1) << 3) = 2040\nbytes from an 8-byte header. nftables is reachable from an\nunprivileged user namespace, so this is an unprivileged\nslab-out-of-bounds read:\n\n BUG: KASAN: slab-out-of-bounds in put_cmsg+0x3ac/0x540\n put_cmsg+0x3ac/0x540\n udpv6_recvmsg+0xca0/0x1250\n sock_recvmsg+0xdf/0x190\n ____sys_recvmsg+0x1b1/0x620\n\nAdd ipv6_get_exthdr_len() which validates that at least two bytes\nare accessible before reading the hdrlen field, then checks the\ncomputed length against skb_tail_pointer(skb), returning 0 on\nfailure. Extension headers are kept in the linear skb area by\npskb_may_pull() during input, so skb_tail_pointer() is the correct\nbound.\n\nUse ipv6_get_exthdr_len() at all non-AH call sites: the five\nstandalone cmsg blocks (HbH, 2292HbH, 2292DSTOPTS x2, 2292RTHDR)\nand the three standard cases in the extension-header walk loop\n(DSTOPTS, ROUTING, default). AH retains an inline bounds check\nbecause its length formula differs ((ptr[1]+2)<<2).\n\nThe walk loop also gets a pre-read bounds check at the top to\nvalidate ptr before any case accesses ptr[0] or ptr[1].\n\nWhen the walk loop detects a corrupted header, return from the\nfunction instead of continuing to process later socket options.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-63920", "url": "https://www.suse.com/security/cve/CVE-2026-63920" }, { "category": "external", "summary": "SUSE Bug 1272877 for CVE-2026-63920", "url": "https://bugzilla.suse.com/1272877" }, { "category": "external", "summary": "SUSE Bug 1273012 for CVE-2026-63920", "url": "https://bugzilla.suse.com/1273012" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-63920" }, { "cve": "CVE-2026-64011", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-64011" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: llcp: Fix use-after-free in llcp_sock_release()\n\nllcp_sock_release() unconditionally unlinks the socket from the local\nsockets list. However, if the socket is still in connecting state, it\nis on the connecting list.\n\nFix this by checking the socket state and unlinking from the correct list.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-64011", "url": "https://www.suse.com/security/cve/CVE-2026-64011" }, { "category": "external", "summary": "SUSE Bug 1273891 for CVE-2026-64011", "url": "https://bugzilla.suse.com/1273891" }, { "category": "external", "summary": "SUSE Bug 1276493 for CVE-2026-64011", "url": "https://bugzilla.suse.com/1276493" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-64011" }, { "cve": "CVE-2026-64114", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-64114" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: raw: reject IP_HDRINCL packets with ihl < 5\n\nraw_send_hdrinc() validates that the caller-supplied IPv4 header\nfits within the message length:\n\n iphlen = iph->ihl * 4;\n err = -EINVAL;\n if (iphlen > length)\n goto error_free;\n\n if (iphlen >= sizeof(*iph)) {\n /* fix up saddr, tot_len, id, csum, transport_header */\n }\n\nIt does not, however, reject ihl < 5. For such a packet the\n\"if (iphlen >= sizeof(*iph))\" branch is skipped, leaving the\ncrafted iphdr untouched, but the packet is still handed to\n__ip_local_out() and onward. Downstream consumers that read\niph->ihl assume a sane value: net/ipv4/ah4.c:ah_output() in\nparticular subtracts sizeof(struct iphdr) from top_iph->ihl * 4\nand passes the (signed-int-negative, then cast to size_t)\nresult to memcpy(), producing an OOB access of length close to\nSIZE_MAX and a host kernel panic.\n\nAn IPv4 header with ihl < 5 is malformed by definition (RFC 791:\n\"Internet Header Length is the length of the internet header in\n32 bit words ... Note that the minimum value for a correct header\nis 5.\"). The kernel should not be willing to inject such a\npacket into its own output path.\n\nReject \"iphlen < sizeof(*iph)\" alongside the existing\n\"iphlen > length\" check. This matches the principle that locally\nconstructed packets that re-enter the IP stack must pass the same\nbasic sanity tests that a foreign packet would be subjected to.\n\nOnce this lands, the \"if (iphlen >= sizeof(*iph))\" wrapper around\nthe fixup branch becomes redundant; left in place to keep the\npatch minimal and backport-friendly. A follow-up can unwrap it.\n\nNote that commit 86f4c90a1c5c (\"ipv4, ipv6: ensure raw socket\nmessage is big enough to hold an IP header\") ensures the message\nbuffer is large enough to hold an iphdr, but does not constrain\nthe self-reported iph->ihl.\n\nReachability: the malformed packet source is any caller with\nCAP_NET_RAW, including an unprivileged process in a user+net\nnamespace on a kernel with CONFIG_USER_NS=y. The reproduced AH\ncrash also requires a matching xfrm AH policy on the outgoing\nroute; a container granted CAP_NET_ADMIN can install that state\nand policy in its netns. Loopback bypasses xfrm_output, so the\ntrigger uses a real netdev.\n\nReproduced on UML + KASAN: kernel-mode fault at addr 0x0 with\nmemcpy_orig at the crash site. Same shape reproduces inside a\nrootless Docker container with --cap-add NET_ADMIN on a stock\ndistro kernel.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-64114", "url": "https://www.suse.com/security/cve/CVE-2026-64114" }, { "category": "external", "summary": "SUSE Bug 1273742 for CVE-2026-64114", "url": "https://bugzilla.suse.com/1273742" }, { "category": "external", "summary": "SUSE Bug 1273833 for CVE-2026-64114", "url": "https://bugzilla.suse.com/1273833" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-64114" }, { "cve": "CVE-2026-68121", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-68121" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npppoe: reload header pointer after dev_hard_header()\n\npppoe_sendmsg() saves a pointer to the PPPoE header before calling\ndev_hard_header(). Device header callbacks are allowed to reallocate the\nskb head, invalidating pointers into it.\n\nThis can happen when a send is blocked in copy_from_user() while the first\nnon-Ethernet port is added to an empty team device. The team's delegated\nGRE header callback then expands the skb head. PPPoE subsequently writes\nsix bytes through the stale pointer into the freed head.\n\nReload the PPPoE header through the skb's network-header offset after\ndevice header creation. pskb_expand_head() updates that offset when it\nrelocates the head.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-68121", "url": "https://www.suse.com/security/cve/CVE-2026-68121" }, { "category": "external", "summary": "SUSE Bug 1274888 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1274888" }, { "category": "external", "summary": "SUSE Bug 1275228 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1275228" }, { "category": "external", "summary": "SUSE Bug 1282946 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1282946" }, { "category": "external", "summary": "SUSE Bug 1282953 for CVE-2026-68121", "url": "https://bugzilla.suse.com/1282953" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-68121" }, { "cve": "CVE-2026-68202", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-68202" } ], "notes": [ { "category": "general", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: close a re-opened queue timer in the destructor\n\nqueue_delete() closes the queue timer, then frees it. snd_seq_timer_close()\nclears q->timer->timeri. snd_use_lock_sync() then drains borrowers, and\nsnd_seq_timer_delete() frees q->timer.\n\nA borrower can re-open the timer inside that window. A SET_QUEUE_CLIENT\nthat took a queueptr() use_lock reference before the queue was unlinked\nruns snd_seq_timer_open() after the close. Open refuses re-open only while\ntimeri is set, and the close just cleared it, so it re-opens timeri.\n\nsnd_seq_timer_delete() does not close that instance. Its snd_seq_timer_stop()\nis a no-op, because running was cleared first. So it frees q->timer with the\ninstance still live. The queue is freed next.\n\nThe instance stays on the global timer with callback_data pointing at the\nfreed queue. A non-owner START on the unlocked queue arms it. The next tick\nderefs the freed queue in snd_seq_timer_interrupt().\n\nReachable by an unprivileged user with access to /dev/snd/seq. No CAP and\nno queue ownership required.\n\nClose any lingering instance in the destructor. There, ->timeri can no\nlonger change: the queue is unlinked and all use_lock borrowers have\ndrained, so no snd_seq_queue_use() can re-open it. Close it before clearing\nq->timer. snd_timer_close() waits for any in-flight snd_seq_timer_interrupt()\nto finish, and that callback still reads q->timer (via snd_seq_check_queue()),\nso q->timer must stay valid until it drains.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-68202", "url": "https://www.suse.com/security/cve/CVE-2026-68202" }, { "category": "external", "summary": "SUSE Bug 1275161 for CVE-2026-68202", "url": "https://bugzilla.suse.com/1275161" }, { "category": "external", "summary": "SUSE Bug 1275162 for CVE-2026-68202", "url": "https://bugzilla.suse.com/1275162" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.ppc64le", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.s390x", "SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_272-default-0:18-2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-02T18:33:48Z", "details": "important" } ], "title": "CVE-2026-68202" } ] } ``` ## [suse-su-2026:3961-2](https://vulnerability.circl.lu/vuln/suse-su-2026%3A3961-2) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for suseconnect-ng", "title": "Title of the patch" }, { "category": "description", "text": "This update for suseconnect-ng fixes the following issue:\n\n- Update version to 1.23.0:\n \n - Use product identifier for product migrations. (bsc#1268596)\n - Switch to using go1.26-openssl as the default Go version to \n install to support building the package (jsc#SCC-843, bsc#1268900).\n - Fix flag parsing so that unknown flags or options are flagged as an \n error and the usage message is displayed. (bsc#1159776)\n - InstallReleasePackage interactive/noninteractive handling should \n be consistent with DistUpgrade (bsc#1267478).\n - Add new optional rpm_packages collector, disabled by default, to \n collect list of installed SUSE vendored RPM packages. (jsc#TEL-298)\n - Allow deregsiter when subscribed regcode has expired (bsc#1270392, \n jsc#865)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-2026-3961,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3961,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3961", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3961-2.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:3961-2", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263961-2/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:3961-2", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263961-2/" }, { "category": "self", "summary": "SUSE Bug 1159776", "url": "https://bugzilla.suse.com/1159776" }, { "category": "self", "summary": "SUSE Bug 1267478", "url": "https://bugzilla.suse.com/1267478" }, { "category": "self", "summary": "SUSE Bug 1268596", "url": "https://bugzilla.suse.com/1268596" }, { "category": "self", "summary": "SUSE Bug 1268900", "url": "https://bugzilla.suse.com/1268900" }, { "category": "self", "summary": "SUSE Bug 1270392", "url": "https://bugzilla.suse.com/1270392" } ], "title": "Security update for suseconnect-ng", "tracking": { "current_release_date": "2026-10-05T16:59:49Z", "generator": { "date": "2026-10-04T20:34:47Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:3961-2", "initial_release_date": "2026-10-04T20:34:47Z", "revision_history": [ { "date": "2026-10-04T20:34:47Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:49Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64", "product": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64", "product_id": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/libsuseconnect@1.23.0-150600.3.24.1?arch=aarch64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.aarch64", "product": { "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.aarch64", "product_id": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/mcp-server-suseconnect@1.23.0-150600.3.24.1?arch=aarch64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64", "product": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64", "product_id": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ng@1.23.0-150600.3.24.1?arch=aarch64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64", "product": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64", "product_id": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ruby-bindings@1.23.0-150600.3.24.1?arch=aarch64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le", "product": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le", "product_id": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/libsuseconnect@1.23.0-150600.3.24.1?arch=ppc64le&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.ppc64le", "product": { "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.ppc64le", "product_id": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/mcp-server-suseconnect@1.23.0-150600.3.24.1?arch=ppc64le&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le", "product": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le", "product_id": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ng@1.23.0-150600.3.24.1?arch=ppc64le&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le", "product": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le", "product_id": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ruby-bindings@1.23.0-150600.3.24.1?arch=ppc64le&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x", "product": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x", "product_id": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/libsuseconnect@1.23.0-150600.3.24.1?arch=s390x&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.s390x", "product": { "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.s390x", "product_id": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/mcp-server-suseconnect@1.23.0-150600.3.24.1?arch=s390x&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x", "product": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x", "product_id": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ng@1.23.0-150600.3.24.1?arch=s390x&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x", "product": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x", "product_id": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ruby-bindings@1.23.0-150600.3.24.1?arch=s390x&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64", "product": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64", "product_id": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/libsuseconnect@1.23.0-150600.3.24.1?arch=x86_64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.x86_64", "product": { "name": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.x86_64", "product_id": "mcp-server-suseconnect-0:1.23.0-150600.3.24.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/mcp-server-suseconnect@1.23.0-150600.3.24.1?arch=x86_64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64", "product": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64", "product_id": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ng@1.23.0-150600.3.24.1?arch=x86_64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } }, { "category": "product_version", "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64", "product": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64", "product_id": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/suseconnect-ruby-bindings@1.23.0-150600.3.24.1?arch=x86_64&upstream=suseconnect-ng-0:1.23.0-150600.3.24.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP6-LTSS", "product": { "name": "SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS", "product_identification_helper": { "cpe": "cpe:/o:suse:sles-ltss:15:sp6" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 15 SP6", "product": { "name": "SUSE Linux Enterprise Server 15 SP6", "product_id": "SUSE Linux Enterprise Server 15 SP6", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:15:sp6" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:15:sp6" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libsuseconnect-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libsuseconnect-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libsuseconnect-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ng-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libsuseconnect-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "libsuseconnect-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "suseconnect-ng-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" }, { "category": "default_component_of", "full_product_name": { "name": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS", "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64" }, "product_reference": "suseconnect-ruby-bindings-0:1.23.0-150600.3.24.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6" } ] } } ``` ## [suse-su-2026:23991-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23991-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for wget", "title": "Title of the patch" }, { "category": "description", "text": "This update for wget fixes the following issue:\n\n- CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1802", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23991-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23991-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623991-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23991-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623991-1/" }, { "category": "self", "summary": "SUSE Bug 1276962", "url": "https://bugzilla.suse.com/1276962" }, { "category": "self", "summary": "SUSE CVE CVE-2026-16599 page", "url": "https://www.suse.com/security/cve/CVE-2026-16599/" } ], "title": "Security update for wget", "tracking": { "current_release_date": "2026-10-05T16:59:32Z", "generator": { "date": "2026-10-01T12:39:28Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23991-1", "initial_release_date": "2026-10-01T12:39:28Z", "revision_history": [ { "date": "2026-10-01T12:39:28Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:32Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.aarch64", "product": { "name": "wget-0:1.25.0-160000.4.1.aarch64", "product_id": "wget-0:1.25.0-160000.4.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=aarch64&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "wget-lang-0:1.25.0-160000.4.1.noarch", "product": { "name": "wget-lang-0:1.25.0-160000.4.1.noarch", "product_id": "wget-lang-0:1.25.0-160000.4.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget-lang@1.25.0-160000.4.1?arch=noarch&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.ppc64le", "product": { "name": "wget-0:1.25.0-160000.4.1.ppc64le", "product_id": "wget-0:1.25.0-160000.4.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=ppc64le&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.s390x", "product": { "name": "wget-0:1.25.0-160000.4.1.s390x", "product_id": "wget-0:1.25.0-160000.4.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=s390x&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.x86_64", "product": { "name": "wget-0:1.25.0-160000.4.1.x86_64", "product_id": "wget-0:1.25.0-160000.4.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=x86_64&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.aarch64" }, "product_reference": "wget-0:1.25.0-160000.4.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.ppc64le" }, "product_reference": "wget-0:1.25.0-160000.4.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.s390x" }, "product_reference": "wget-0:1.25.0-160000.4.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.x86_64" }, "product_reference": "wget-0:1.25.0-160000.4.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-lang-0:1.25.0-160000.4.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:wget-lang-0:1.25.0-160000.4.1.noarch" }, "product_reference": "wget-lang-0:1.25.0-160000.4.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.aarch64" }, "product_reference": "wget-0:1.25.0-160000.4.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.ppc64le" }, "product_reference": "wget-0:1.25.0-160000.4.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.s390x" }, "product_reference": "wget-0:1.25.0-160000.4.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.x86_64" }, "product_reference": "wget-0:1.25.0-160000.4.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "wget-lang-0:1.25.0-160000.4.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:wget-lang-0:1.25.0-160000.4.1.noarch" }, "product_reference": "wget-lang-0:1.25.0-160000.4.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-16599", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-16599" } ], "notes": [ { "category": "general", "text": "GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network attacker positioned to intercept FTP traffic can send a crafted OPIE challenge with a sequence number near INT_MAX, causing wget to perform up to approximately 2.1 billion MD5 computations and suspend for some time. The --timeout option does not mitigate this because it applies only to network I/O, not CPU computation.\n\n\nThis issue was fixed in commit e9697d98e7249b0f68a6be040a4f3dcc5bc101fa", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.x86_64", "SUSE Linux Enterprise Server 16.0:wget-lang-0:1.25.0-160000.4.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-lang-0:1.25.0-160000.4.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-16599", "url": "https://www.suse.com/security/cve/CVE-2026-16599" }, { "category": "external", "summary": "SUSE Bug 1276962 for CVE-2026-16599", "url": "https://bugzilla.suse.com/1276962" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.x86_64", "SUSE Linux Enterprise Server 16.0:wget-lang-0:1.25.0-160000.4.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-lang-0:1.25.0-160000.4.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:wget-0:1.25.0-160000.4.1.x86_64", "SUSE Linux Enterprise Server 16.0:wget-lang-0:1.25.0-160000.4.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-0:1.25.0-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:wget-lang-0:1.25.0-160000.4.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-10-01T12:39:28Z", "details": "moderate" } ], "title": "CVE-2026-16599" } ] } ``` ## [suse-su-2026:23990-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23990-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for distribution", "title": "Title of the patch" }, { "category": "description", "text": "This update for distribution fixes the following issues:\n\n- CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass\n allows log telemetry interception and alteration (bsc#1281468).\n- CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission\n (bsc#1281469).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1801", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23990-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23990-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623990-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23990-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623990-1/" }, { "category": "self", "summary": "SUSE Bug 1281468", "url": "https://bugzilla.suse.com/1281468" }, { "category": "self", "summary": "SUSE Bug 1281469", "url": "https://bugzilla.suse.com/1281469" }, { "category": "self", "summary": "SUSE CVE CVE-2026-81871 page", "url": "https://www.suse.com/security/cve/CVE-2026-81871/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-81872 page", "url": "https://www.suse.com/security/cve/CVE-2026-81872/" } ], "title": "Security update for distribution", "tracking": { "current_release_date": "2026-10-05T16:59:31Z", "generator": { "date": "2026-10-01T12:12:02Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23990-1", "initial_release_date": "2026-10-01T12:12:02Z", "revision_history": [ { "date": "2026-10-01T12:12:02Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:31Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "distribution-registry-0:3.1.1-160000.4.1.aarch64", "product": { "name": "distribution-registry-0:3.1.1-160000.4.1.aarch64", "product_id": "distribution-registry-0:3.1.1-160000.4.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:distribution:distribution:3.1.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/distribution-registry@3.1.1-160000.4.1?arch=aarch64&upstream=distribution-0:3.1.1-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "distribution-registry-0:3.1.1-160000.4.1.ppc64le", "product": { "name": "distribution-registry-0:3.1.1-160000.4.1.ppc64le", "product_id": "distribution-registry-0:3.1.1-160000.4.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:distribution:distribution:3.1.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/distribution-registry@3.1.1-160000.4.1?arch=ppc64le&upstream=distribution-0:3.1.1-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "distribution-registry-0:3.1.1-160000.4.1.s390x", "product": { "name": "distribution-registry-0:3.1.1-160000.4.1.s390x", "product_id": "distribution-registry-0:3.1.1-160000.4.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:distribution:distribution:3.1.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/distribution-registry@3.1.1-160000.4.1?arch=s390x&upstream=distribution-0:3.1.1-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "distribution-registry-0:3.1.1-160000.4.1.x86_64", "product": { "name": "distribution-registry-0:3.1.1-160000.4.1.x86_64", "product_id": "distribution-registry-0:3.1.1-160000.4.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:distribution:distribution:3.1.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/distribution-registry@3.1.1-160000.4.1?arch=x86_64&upstream=distribution-0:3.1.1-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "distribution-registry-0:3.1.1-160000.4.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" }, "product_reference": "distribution-registry-0:3.1.1-160000.4.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-81871", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-81871" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_EXPORTER_OTLP_CERTIFICATE, and related client certificate environment variables through loadEnvTLS into cfg.tlsCfg, but newGRPCDialOptions does not apply cfg.tlsCfg when creating gRPC transport credentials. The environment-only TLS path instead uses credentials.NewTLS with system roots and no configured client certificate, bypassing intended private CA pinning and mutual TLS unless the application also supplies WithTLSCredentials. A network attacker able to intercept or spoof the collector connection with a system-trusted certificate can read or alter log telemetry. This issue is fixed in version 0.21.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-81871", "url": "https://www.suse.com/security/cve/CVE-2026-81871" }, { "category": "external", "summary": "SUSE Bug 1281466 for CVE-2026-81871", "url": "https://bugzilla.suse.com/1281466" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-01T12:12:02Z", "details": "moderate" } ], "title": "CVE-2026-81871" }, { "cve": "CVE-2026-81872", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-81872" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor wraps the exporter with newBufferExporter(exporter, 1), and the poll loop calls queue.TryDequeue and bufferExporter.EnqueueExport before immediately signaling pollTrigger whenever the queue remains at or above batchSize. Because a failed nonblocking EnqueueExport leaves the queue length unchanged, the processor repeatedly retries without waiting for its ticker, exhausting CPU and degrading or denying service in the embedding process. This issue is fixed in version 0.21.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-81872", "url": "https://www.suse.com/security/cve/CVE-2026-81872" }, { "category": "external", "summary": "SUSE Bug 1281467 for CVE-2026-81872", "url": "https://bugzilla.suse.com/1281467" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:distribution-registry-0:3.1.1-160000.4.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-01T12:12:02Z", "details": "moderate" } ], "title": "CVE-2026-81872" } ] } ``` ## [suse-su-2026:23989-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23989-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for jline3", "title": "Title of the patch" }, { "category": "description", "text": "This update for jline3 fixes the following issue:\n\nUpdate to upstream version 3.30.17:\n\n * Security Fixes\n + Native Stack Buffer Overflow in Public INPUT_RECORD.memmove\n JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6)\n + Authenticated SSH Shell Channel Resource Leak via Null or\n Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj)\n + Authenticated SSH DoS via Unbounded Window-Change Terminal\n Geometry (GHSA-m935-wqpj-pvp3)\n + TCP Socket File Descriptor Leak When Maximum Connections\n Reached (GHSA-c87g-867h-cqr6)\n * Bug Fixes\n + strip control characters from file names in posix builtins\n + bound !# history expansion to prevent exponential blowup\n + verify server host keys in the ssh client builtin\n + address remaining security vulnerabilities reported by\n AFINE/CERT.PL\n + backport security fixes from master\n + backport security fixes to 3.x (path traversal + DSR plain\n text)\n + strip control characters from ssh banner and prompts\n * Dependency updates\n + bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to\n 3.10.2\n + bump slf4j.version from 2.0.18 to 2.0.19\n + bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6\n to 3.6.0\n + bump org.apache.maven.plugins:maven-compiler-plugin from\n 3.15.0 to 3.16.0\n + bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.2\n + bump actions/setup-java from 5 to 6.0.0\n + bump org.graalvm.sdk:graal-sdk from 25.1.3 to 25.3.4.1\n + bump com.mycila:license-maven-plugin from 5.0.0 to 5.1.2\n + bump org.easymock:easymock from 5.6.0 to 5.7.0\n + bump com.google.jimfs:jimfs from 1.3.1 to 1.3.2\n + bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to\n 3.3.4\n + bump org.apache.maven:apache-maven from 4.0.0-rc-3 to\n 4.0.0-rc-6\n + bump eu.maveniverse.maven.njord:extension3 from 0.9.9 to\n 0.9.10\n + bump com.palantir.javaformat:palantir-java-format from 2.96.0\n to 2.97.0\n + bump release-drafter/release-drafter from 7.6.0 to 7.7.0\n + bump groovy.version from 4.0.32 to 4.0.33\n + bump release-drafter/release-drafter from 7 to 7.6.0\n + bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to\n 3.5.1\n- Update to upstream version 3.30.16\n * bugfix release with security hardening, SSH agent forwarding\n fix, and terminal compatibility improvements.\n * Breaking Changes\n + SSH agent forwarding is no longer enabled by default;\n pass -A to explicitly request it\n + reject overlong hex components in OSC color responses\n + strip OSC and other escape sequences in ansiAppend\n + search multiple lib paths for versioned libutil.so\n + use Path.resolve instead of URI.resolve in cat and sort to\n prevent SSRF\n + check closed flag in PtyInputStream to prevent hang on empty\n input\n + confine ConfigurationPath lookups to the config directory\n + disable Read File command in nano restricted mode\n + drain buffered data before EOF in NonBlockingPumpInputStream\n + look up openpty in libc.so.6 for glibc 2.34+\n + guard styleMatches and highlighter rules against ReDoS\n + backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c)\n + propagate EOF in PtyInputStream to avoid infinite loop\n + bump org.apache.ivy:ivy from 2.5.3 to 2.6.0\n + bump actions/setup-node from 6 to 7\n + bump com.palantir.javaformat:palantir-java-format from 2.94.0\n to 2.96.0\n + bump sshd.version from 2.18.0 to 2.19.0\n + bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to\n 5.1.0\n + bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3\n + bump com.diffplug.spotless:spotless-maven-plugin\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1800", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23989-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23989-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623989-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23989-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623989-1/" } ], "title": "Security update for jline3", "tracking": { "current_release_date": "2026-10-05T16:59:30Z", "generator": { "date": "2026-10-01T12:14:06Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23989-1", "initial_release_date": "2026-10-01T12:14:06Z", "revision_history": [ { "date": "2026-10-01T12:14:06Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:30Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "jline3-0:3.30.17-160000.1.1.aarch64", "product": { "name": "jline3-0:3.30.17-160000.1.1.aarch64", "product_id": "jline3-0:3.30.17-160000.1.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3@3.30.17-160000.1.1?arch=aarch64&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-jansi-0:3.30.17-160000.1.1.aarch64", "product": { "name": "jline3-jansi-0:3.30.17-160000.1.1.aarch64", "product_id": "jline3-jansi-0:3.30.17-160000.1.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-jansi@3.30.17-160000.1.1?arch=aarch64&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-native-0:3.30.17-160000.1.1.aarch64", "product": { "name": "jline3-native-0:3.30.17-160000.1.1.aarch64", "product_id": "jline3-native-0:3.30.17-160000.1.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-native@3.30.17-160000.1.1?arch=aarch64&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "jline3-builtins-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-builtins-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-builtins-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-builtins@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-console-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-console-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-console-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-console@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-console-ui-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-console-ui-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-console-ui-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-console-ui@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-curses-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-curses-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-curses-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-curses@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-jansi-core@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-javadoc-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-javadoc-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-javadoc-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-javadoc@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-reader-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-reader-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-reader-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-reader@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-remote-telnet@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-style-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-style-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-style-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-style@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-terminal-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-terminal-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-terminal-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-terminal@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-terminal-jansi@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-terminal-jna@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch", "product": { "name": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch", "product_id": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-terminal-jni@3.30.17-160000.1.1?arch=noarch&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "jline3-0:3.30.17-160000.1.1.ppc64le", "product": { "name": "jline3-0:3.30.17-160000.1.1.ppc64le", "product_id": "jline3-0:3.30.17-160000.1.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3@3.30.17-160000.1.1?arch=ppc64le&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le", "product": { "name": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le", "product_id": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-jansi@3.30.17-160000.1.1?arch=ppc64le&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-native-0:3.30.17-160000.1.1.ppc64le", "product": { "name": "jline3-native-0:3.30.17-160000.1.1.ppc64le", "product_id": "jline3-native-0:3.30.17-160000.1.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-native@3.30.17-160000.1.1?arch=ppc64le&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "jline3-0:3.30.17-160000.1.1.s390x", "product": { "name": "jline3-0:3.30.17-160000.1.1.s390x", "product_id": "jline3-0:3.30.17-160000.1.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3@3.30.17-160000.1.1?arch=s390x&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-jansi-0:3.30.17-160000.1.1.s390x", "product": { "name": "jline3-jansi-0:3.30.17-160000.1.1.s390x", "product_id": "jline3-jansi-0:3.30.17-160000.1.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-jansi@3.30.17-160000.1.1?arch=s390x&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-native-0:3.30.17-160000.1.1.s390x", "product": { "name": "jline3-native-0:3.30.17-160000.1.1.s390x", "product_id": "jline3-native-0:3.30.17-160000.1.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-native@3.30.17-160000.1.1?arch=s390x&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "jline3-0:3.30.17-160000.1.1.x86_64", "product": { "name": "jline3-0:3.30.17-160000.1.1.x86_64", "product_id": "jline3-0:3.30.17-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3@3.30.17-160000.1.1?arch=x86_64&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-jansi-0:3.30.17-160000.1.1.x86_64", "product": { "name": "jline3-jansi-0:3.30.17-160000.1.1.x86_64", "product_id": "jline3-jansi-0:3.30.17-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-jansi@3.30.17-160000.1.1?arch=x86_64&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "jline3-native-0:3.30.17-160000.1.1.x86_64", "product": { "name": "jline3-native-0:3.30.17-160000.1.1.x86_64", "product_id": "jline3-native-0:3.30.17-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/jline3-native@3.30.17-160000.1.1?arch=x86_64&upstream=jline3-0:3.30.17-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-0:3.30.17-160000.1.1.aarch64" }, "product_reference": "jline3-0:3.30.17-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-0:3.30.17-160000.1.1.ppc64le" }, "product_reference": "jline3-0:3.30.17-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-0:3.30.17-160000.1.1.s390x" }, "product_reference": "jline3-0:3.30.17-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-0:3.30.17-160000.1.1.x86_64" }, "product_reference": "jline3-0:3.30.17-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-builtins-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-builtins-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-builtins-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-console-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-console-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-console-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-console-ui-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-console-ui-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-console-ui-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-curses-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-curses-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-curses-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-0:3.30.17-160000.1.1.aarch64" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-0:3.30.17-160000.1.1.ppc64le" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-0:3.30.17-160000.1.1.s390x" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-0:3.30.17-160000.1.1.x86_64" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-jansi-core-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-javadoc-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-javadoc-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-javadoc-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-native-0:3.30.17-160000.1.1.aarch64" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-native-0:3.30.17-160000.1.1.ppc64le" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-native-0:3.30.17-160000.1.1.s390x" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-native-0:3.30.17-160000.1.1.x86_64" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-reader-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-reader-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-reader-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-remote-telnet-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-style-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-style-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-style-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-jna-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:jline3-terminal-jni-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-0:3.30.17-160000.1.1.aarch64" }, "product_reference": "jline3-0:3.30.17-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-0:3.30.17-160000.1.1.ppc64le" }, "product_reference": "jline3-0:3.30.17-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-0:3.30.17-160000.1.1.s390x" }, "product_reference": "jline3-0:3.30.17-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-0:3.30.17-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-0:3.30.17-160000.1.1.x86_64" }, "product_reference": "jline3-0:3.30.17-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-builtins-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-builtins-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-builtins-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-console-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-console-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-console-ui-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-console-ui-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-console-ui-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-curses-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-curses-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-curses-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-0:3.30.17-160000.1.1.aarch64" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-0:3.30.17-160000.1.1.ppc64le" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-0:3.30.17-160000.1.1.s390x" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-0:3.30.17-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-0:3.30.17-160000.1.1.x86_64" }, "product_reference": "jline3-jansi-0:3.30.17-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-jansi-core-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-jansi-core-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-javadoc-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-javadoc-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-javadoc-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-0:3.30.17-160000.1.1.aarch64" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-0:3.30.17-160000.1.1.ppc64le" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-0:3.30.17-160000.1.1.s390x" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-native-0:3.30.17-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-native-0:3.30.17-160000.1.1.x86_64" }, "product_reference": "jline3-native-0:3.30.17-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-reader-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-reader-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-reader-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-remote-telnet-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-remote-telnet-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-style-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-style-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-style-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-jansi-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jna-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-jna-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:jline3-terminal-jni-0:3.30.17-160000.1.1.noarch" }, "product_reference": "jline3-terminal-jni-0:3.30.17-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] } } ``` ## [suse-su-2026:23986-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23986-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for valkey", "title": "Title of the patch" }, { "category": "description", "text": "This update for valkey fixes the following issue:\n\n- CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet\n parser can lead to an out-of-bounds read (bsc#1281417).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1796", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23986-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23986-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623986-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23986-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623986-1/" }, { "category": "self", "summary": "SUSE Bug 1281417", "url": "https://bugzilla.suse.com/1281417" }, { "category": "self", "summary": "SUSE CVE CVE-2026-92925 page", "url": "https://www.suse.com/security/cve/CVE-2026-92925/" } ], "title": "Security update for valkey", "tracking": { "current_release_date": "2026-10-05T16:59:29Z", "generator": { "date": "2026-09-30T20:18:02Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23986-1", "initial_release_date": "2026-09-30T20:18:02Z", "revision_history": [ { "date": "2026-09-30T20:18:02Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:29Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "valkey-0:8.0.10-160000.2.1.aarch64", "product": { "name": "valkey-0:8.0.10-160000.2.1.aarch64", "product_id": "valkey-0:8.0.10-160000.2.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey@8.0.10-160000.2.1?arch=aarch64&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } }, { "category": "product_version", "name": "valkey-devel-0:8.0.10-160000.2.1.aarch64", "product": { "name": "valkey-devel-0:8.0.10-160000.2.1.aarch64", "product_id": "valkey-devel-0:8.0.10-160000.2.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey-devel@8.0.10-160000.2.1?arch=aarch64&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "product": { "name": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "product_id": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey-compat-redis@8.0.10-160000.2.1?arch=noarch&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "valkey-0:8.0.10-160000.2.1.ppc64le", "product": { "name": "valkey-0:8.0.10-160000.2.1.ppc64le", "product_id": "valkey-0:8.0.10-160000.2.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey@8.0.10-160000.2.1?arch=ppc64le&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } }, { "category": "product_version", "name": "valkey-devel-0:8.0.10-160000.2.1.ppc64le", "product": { "name": "valkey-devel-0:8.0.10-160000.2.1.ppc64le", "product_id": "valkey-devel-0:8.0.10-160000.2.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey-devel@8.0.10-160000.2.1?arch=ppc64le&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "valkey-0:8.0.10-160000.2.1.s390x", "product": { "name": "valkey-0:8.0.10-160000.2.1.s390x", "product_id": "valkey-0:8.0.10-160000.2.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey@8.0.10-160000.2.1?arch=s390x&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } }, { "category": "product_version", "name": "valkey-devel-0:8.0.10-160000.2.1.s390x", "product": { "name": "valkey-devel-0:8.0.10-160000.2.1.s390x", "product_id": "valkey-devel-0:8.0.10-160000.2.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey-devel@8.0.10-160000.2.1?arch=s390x&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "valkey-0:8.0.10-160000.2.1.x86_64", "product": { "name": "valkey-0:8.0.10-160000.2.1.x86_64", "product_id": "valkey-0:8.0.10-160000.2.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey@8.0.10-160000.2.1?arch=x86_64&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } }, { "category": "product_version", "name": "valkey-devel-0:8.0.10-160000.2.1.x86_64", "product": { "name": "valkey-devel-0:8.0.10-160000.2.1.x86_64", "product_id": "valkey-devel-0:8.0.10-160000.2.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:redis:redis:8.0.10:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/valkey-devel@8.0.10-160000.2.1?arch=x86_64&upstream=valkey-0:8.0.10-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.aarch64" }, "product_reference": "valkey-0:8.0.10-160000.2.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.ppc64le" }, "product_reference": "valkey-0:8.0.10-160000.2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.s390x" }, "product_reference": "valkey-0:8.0.10-160000.2.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.x86_64" }, "product_reference": "valkey-0:8.0.10-160000.2.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch" }, "product_reference": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.aarch64" }, "product_reference": "valkey-0:8.0.10-160000.2.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.ppc64le" }, "product_reference": "valkey-0:8.0.10-160000.2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.s390x" }, "product_reference": "valkey-0:8.0.10-160000.2.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-0:8.0.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.x86_64" }, "product_reference": "valkey-0:8.0.10-160000.2.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch" }, "product_reference": "valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "valkey-devel-0:8.0.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64" }, "product_reference": "valkey-devel-0:8.0.10-160000.2.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-92925", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-92925" } ], "notes": [ { "category": "general", "text": "A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-92925", "url": "https://www.suse.com/security/cve/CVE-2026-92925" }, { "category": "external", "summary": "SUSE Bug 1281417 for CVE-2026-92925", "url": "https://bugzilla.suse.com/1281417" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server 16.0:valkey-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-0:8.0.10-160000.2.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-0:8.0.10-160000.2.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-0:8.0.10-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T20:18:02Z", "details": "important" } ], "title": "CVE-2026-92925" } ] } ``` ## [suse-su-2026:23985-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23985-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11", "title": "Title of the patch" }, { "category": "description", "text": "This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore\n (bsc#1282631).\n- CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider`\n (bsc#1282630).\n- CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629).\n- CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user\n to fail when Tomcat is located behind a reverse proxy (bsc#1282628).\n- CVE-2026-77762: Apache Tomcat: Stale HPACK emitter injects trailers (bsc#1282599).\n- CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack\n (bsc#1282627).\n- CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an\n AJP processing thread leading to denial of service (bsc#1282626).\n- CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail\n (bsc#1282625).\n- CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for\n denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624).\n- CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash\n (bsc#1282623).\n- CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and\n ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622).\n- CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some\n configurations (bsc#1282621).\n- CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled\n (bsc#1282620).\n- CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787).\n- CVE-2026-87022: Apache Tomcat: WebSocket message smuggling with (bsc#1282581).\n\nNon security issue fixed:\n\n- package libtcnative-1-0-devel houses link to libtcnative-1.so instead of package libtcnative-1-0 (bsc#622430).\n\nChanges for libtcnative-1-0:\n\n- Update to 1.3.9\n + Code: Remove call to ERR_remove_thread_state() from Windows\n specific code to allow building with OpenSSL 4.0.x.\n ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got\n removed in OpenSSL 4\n + Fix: Fix a potential crash when negotiating ALPN\n + If ALPN negotiation fails and failure is configured to use\n the last server protocol in the list, use it rather than the\n last protocol offered by the client\n + Fix: Add support for the extended range of options available\n from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned\n int (represented by a Java long) rather than a 32-bit unsigned\n int (represented by a Java int)\n + Code: Remove unused code\n + Ensure that per connection changes to certificate verification\n settings, e.g. to support client certificate authentication,\n do not modify the certificate verification settings for other\n connections\n + Fix: Fix a potential crash when configuring raw certificates\n + Fix: Avoid a potential crash with very long ALPN protocol\n names\n + Fix: Make the call to a CertificateVerifier more robust\n + Fix: Avoid a potential crash when processing OCSP URLs\n + Fix: Make the processing of OCSP responses more robust\n + Fix: Stricter OCSP handling when soft-fail is disabled\n + Fix: Harden against the mis-use of Buffer.address(ByteBuffer)\n + Fix: Harden against the mis-use of Pool.destroy(long)\n + Code: The minimum supported OpenSSL version is now 3.0.x.\n OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no\n bug reports were receive for that failure and since both\n Debian and Ubuntu versions that used OpenSSL 1.1.1 have\n reached end of support, OpenSSL 1.1.1 is no longer supported\n + Update: OpenSSL 3.0.x is approaching end of support so the\n recommended version of OpenSSL (and the version that windows\n binaries will be built with) now follows the 3.5.x LTS branch\n + Fix: Switch to automatic configuration of DH parameters.\n Manual configuration attempts will be ignored\n + Code: Make setTmpECDHByCurveName() a NO-OP\n + Fix: Refactor extraction of ECDH curve name from the\n Certificate to avoid deprecated OpenSSL methods\n + Fix: Refactor the native implementation of SSL.getTime() to\n avoid the Y2038 problem in SSL_SESSION_get_time() when running\n on a verion of OpenSSL that includes the new\n SSL_SESSION_get_time_ex() method\n\nChanges for libtcnative-2-0:\n\n- Upgrade to version 2.0.16\n + Code: Remove call to ERR_remove_thread_state() from Windows\n specific code to allow building with OpenSSL 4.0.x\n ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got\n removed in OpenSSL 4\n + Update: Remove support for Windows build on IA64 architecture\n (Itanium)\n + Update: Make x64 the default architecture for Windows build\n + Update: Make Windows 10 / 11 the default target version for\n Windows builds\n + Fix: Fix a potential crash when negotiating ALPN\n + Fix: If ALPN negotiation fails and failure is configured to\n use the last server protocol in the list, use it rather than\n the last protocol offered by the client\n + Fix: Add support for the extended range of options available\n from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned\n int (represented by a Java long) rather than a 32-bit unsigned\n int (represented by a Java int)\n + Code: Remove unused code\n + Fix: Ensure that per connection changes to certificate\n verification settings, e.g. to support client certificate\n authentication, do not modify the certificate verification\n settings for other connections\n + Fix: Fix a potential crash when configuring raw certificates\n + Fix: Avoid a potential crash with very long ALPN protocol\n names\n + Fix: Make the call to a CertificateVerifier more robust\n + Fix: Avoid a potential crash when processing OCSP URLs\n + Fix: Make the processing of OCSP responses more robust\n + Fix: Stricter OCSP handling when soft-fail is disabled\n + Fix: Harden against the mis-use of Buffer.address(ByteBuffer)\n + Fix: Harden against the mis-use of Pool.destroy(long)\n\nChanges for tomcat10:\n\n- Update to Tomcat 10.1.60\n + Fix: When a PersistentManager needs to reduce the number of active\n sessions, swap out the least recently used eligible sessions first. Pull\n request #1045 provided by sainadh777. (markt)\n + Fix: Align web.xml logging output with the new Context attribute\n urlPatternsProvidedInDecodedForm. (markt)\n + Fix: Improve robustness of DIGEST authentication to system clock jumps.\n (markt)\n + Add: Support multiple protocol header values (treat as a single merged\n header value) in the RemoteIpFilter and RemoteIpValve. (markt)\n + Fix: potential concurrency issues when loading/saving sessions from/to a\n session store. Custom Store implementations that do not extend StoreBase\n must implement the new getSessionStoreLock() method of the Store\n interface to ensure concurrency protection. The default method\n implementation provided only provides the pre-fix functionality. (markt)\n + Fix: Ensure that PersistentManager implementations that extend\n PersistentManagerBase do not swap out sessions that are associated with\n a request that is currently being processed. This includes not swapping\n out a session unless the session was created when activity tracking was\n enabled. (markt)\n + Fix: Ensure namespace attributes are XML escaped in WebDAV responses.\n + Fix: Resolve null or missing rewrite substitutions as an empty string,\n to align with the mod_rewrite behavior. (remm)\n + Add: a best efforts protection in the CrawlerSessionManagerValve against\n crawlers being associated with an authenticated session. (markt)\n + Fix: Clarify the meaning of various RewriteValve server variables and\n explicitly use the canonical context path for the CONTEXT_PATH server\n variable. (markt)\n + Fix: storeconfig not saving the path when a context is saved in\n server.xml. (remm)\n + Fix: WAR URLConnection should propagate use of caching. (remm)\n + Fix: Ensure resources are evicted from the static resource cache in the\n correct order. (markt)\n + Fix: When Jakarta Authentication is configured for a web application,\n cache the ServerAuthConfig in the Authenticator valve. This ensures web\n application specific settings are cached on a per web application basis.\n + Fix: 70203: Fix RegistrationListener notifications in Jakarta\n Authentication implementation. (markt)\n + Fix: Handle CGI scripts that write excessively to stdout after setting\n an HTTP error status code. (schultz)\n + Fix: Require the request to the login action during FORM authentication\n to be made using HTTP POST. (markt)\n + Fix: 70208: Make URL encoding more robust. Based on pull request #1065\n by Chenjp. (markt)\n * Coyote\n + Fix: xreflection generated code stack overflow issue. (remm)\n + Fix: Align xreflection better with IntrospectionUtils. (remm)\n + Fix: In HTTP/2 after half closed (remote), any unexpected frame should\n be a stream error. (remm)\n + Fix: incorrect initial window size calculation when upgrading to HTTP/2.\n (remm)\n + Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm)\n + Fix: Only try and load the native library from the CATALINA_HOME system\n property when the property is set. (markt)\n + Fix: max connections enforcement after an enpoint resume. (remm)\n + Fix: Implement stricter ALPN matching for Connectors using FFM. (markt)\n + Add: length validation for ALPN protocol names. (markt)\n + Fix: Make FFM certificate verification more robust. (markt)\n + Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing\n failure as if no usable OCSP URLs were present. (markt)\n + Fix: Make the processing of OCSP responses more robust. (markt)\n + Fix: Stricter OCSP handling when soft-fail is disabled. (markt)\n + Fix: Cleaner handling of AJP response headers which overflow the maximum\n message size. (remm)\n + Fix: Small per performance optimisation. Don't waste cycles swallowing\n an AJP response body when the connection is going to be closed. (markt)\n + Fix: OpenSSL support for CRLs when using OpenSSL trust with the server\n key held in a Java key store. (markt)\n + Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding\n header. (markt)\n + Fix: Ensure per request HTTP/2 bad request marker is cleared when the\n request is recycled. (markt)\n + Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt)\n + Fix: Revert earlier refactoring of HTTP/2 header field validation that\n moved it earlier since the refactoring made correct handling of invalid\n headers more difficult. (markt)\n + Fix: EL evaluation of some lambda expressions. (remm)\n * WebSocket\n + Fix: an exception when an automatic Pong response races with the closing\n of the WebSocket session. (moritzfl)\n + Fix: Harden the WebSocket client and use a SecureRandom when generating\n the Sec-WebSocket-Key header. (markt)\n + Fix: Improve robustness of client handshakes. (remm)\n + Fix: Ensure that WebSocket write timeouts apply to the complete message\n and are not lost if two writes have the same timeout. (markt)\n + Fix: Reduce CPU usage while sending WebSocket close message. (markt)\n + Fix: overly broad check that prevented request URIs containing literal {\n and } characters from being mapped to WebSocket end points. (markt)\n + Fix: handling of WebSocket messages with compressed payloads using per-\n message-deflate that have one or more non-final blocks where the BFINAL\n bit is set. (markt)\n + Fix: handling of per-message-deflate context takeover when receiving\n compressed WebSocket messages. (markt)\n * Web applications\n + Fix: Manager: Fix a potential concurrency issue when ordering sessions\n prior to displaying a list of session. (markt)\n + Docs: Wrap the RewriteRule regular expression syntax reference on narrow\n displays. Pull request #1044 by sainadh777. (markt)\n * Other\n + Update: Easymock to 5.7.0. (markt)\n + Update: bnd to 7.4.0. (markt)\n + Update: Tomcat Native to 2.0.16. (markt)\n + Add: Improvements to French translations. (remm)\n + Add: Improvements to Japanese translations provided by tak7iji and\n Ktamura.biz.80. (markt)\n + Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a\n positive integer. Zero or negative values previously caused an infinite\n loop or a NegativeArraySizeException during session state transfer. Pull\n request #1042 provided by lihongyi87. (markt)\n + Fix: Improve robustness of cloud membership providers if an error occurs\n fetching members. (remm)\n * jdbc-pool\n + Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to\n getConnection(String,String) rather than getConnection(). (markt)\n + Add: Log a warning if an attempt is made to obtain a connection with\n credentials when alternateUsernameAllowed is set to false. (markt)\n + Fix: Ensure StatementCache interceptor resets properties of cached\n statements between uses. (mark)\n\nChanges for tomcat11:\n\n- Update to Tomcat 11.0.26\n + Fix: Improve the handling of AsyncContext.dispatch() when the Context\n attribute dispatchersUseEncodedPaths is set to false since the\n application has no control over the path used for the\n AsyncContext.dispatch(). Prior to this fix, paths containing literal '?'\n characters were truncated. (markt)\n + Fix: Ensure that capture groups from a RewriteCond always reflect the\n result of the current request. (markt)\n + Fix: When a PersistentManager needs to reduce the number of active\n sessions, swap out the least recently used eligible sessions first. Pull\n request #1045 provided by sainadh777. (markt)\n + Fix: Align web.xml logging output with the new Context attribute\n urlPatternsProvidedInDecodedForm. (markt)\n + Fix: Improve robustness of DIGEST authentication to system clock jumps.\n (markt)\n + Add: Support multiple protocol header values (treat as a single merged\n header value) in the RemoteIpFilter and RemoteIpValve. (markt)\n + Fix: potential concurrency issues when loading/saving sessions from/to a\n session store. Custom Store implementations that do not extend StoreBase\n must implement the new getSessionStoreLock() method of the Store\n interface to ensure concurrency protection. The default method\n implementation provided only provides the pre-fix functionality. (markt)\n + Fix: Ensure that PersistentManager implementations that extend\n PersistentManagerBase do not swap out sessions that are associated with\n a request that is currently being processed. This includes not swapping\n out a session unless the session was created when activity tracking was\n enabled. (markt)\n + Fix: Ensure namespace attributes are XML escaped in WebDAV responses.\n + Fix: Resolve null or missing rewrite substitutions as an empty string,\n to align with the mod_rewrite behavior. (remm)\n + Add: a best efforts protection in the CrawlerSessionManagerValve against\n crawlers being associated with an authenticated session. (markt)\n + Fix: Clarify the meaning of various RewriteValve server variables and\n explicitly use the canonical context path for the CONTEXT_PATH server\n variable. (markt)\n + Fix: storeconfig not saving the path when a context is saved in\n server.xml. (remm)\n + Fix: WAR URLConnection should propagate use of caching. (remm)\n + Fix: Ensure resources are evicted from the static resource cache in the\n correct order. (markt)\n + Fix: When Jakarta Authentication is configured for a web application,\n cache the ServerAuthConfig in the Authenticator valve. This ensures web\n application specific settings are cached on a per web application basis.\n + Fix: 70203: Fix RegistrationListener notifications in Jakarta\n Authentication implementation. (markt)\n + Fix: Handle CGI scripts that write excessively to stdout after setting\n an HTTP error status code. (schultz)\n + Fix: Require the request to the login action during FORM authentication\n to be made using HTTP POST. (markt)\n + Fix: 70208: Make URL encoding more robust. Based on pull request #1065\n by Chenjp. (markt)\n * Coyote\n + Fix: parsing of client certificates that specify more than one OCSP\n responder for configurations that use OpenSSL-FFM. (markt)\n + Fix: xreflection generated code stack overflow issue. (remm)\n + Fix: Align xreflection better with IntrospectionUtils. (remm)\n + Fix: In HTTP/2 after half closed (remote), any unexpected frame should\n be a stream error. (remm)\n + Fix: incorrect initial window size calculation when upgrading to HTTP/2.\n (remm)\n + Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm)\n + Fix: Only try and load the native library from the CATALINA_HOME system\n property when the property is set. (markt)\n + Fix: max connections enforcement after an enpoint resume. (remm)\n + Fix: Implement stricter ALPN matching for Connectors using FFM. (markt)\n + Add: length validation for ALPN protocol names. (markt)\n + Fix: Make FFM certificate verification more robust. (markt)\n + Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing\n failure as if no usable OCSP URLs were present. (markt)\n + Fix: Make the processing of OCSP responses more robust. (markt)\n + Fix: Stricter OCSP handling when soft-fail is disabled. (markt)\n + Fix: Cleaner handling of AJP response headers which overflow the maximum\n message size. (remm)\n + Fix: Small per performance optimisation. Don't waste cycles swallowing\n an AJP response body when the connection is going to be closed. (markt)\n + Fix: OpenSSL support for CRLs when using OpenSSL trust with the server\n key held in a Java key store. (markt)\n + Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding\n header. (markt)\n + Fix: Ensure per request HTTP/2 bad request marker is cleared when the\n request is recycled. (markt)\n + Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt)\n + Fix: Revert earlier refactoring of HTTP/2 header field validation that\n moved it earlier since the refactoring made correct handling of invalid\n headers more difficult. (markt)\n + Fix: EL evaluation of some lambda expressions. (remm)\n * WebSocket\n + Fix: an exception when an automatic Pong response races with the closing\n of the WebSocket session. (moritzfl)\n + Fix: Harden the WebSocket client and use a SecureRandom when generating\n the Sec-WebSocket-Key header. (markt)\n + Fix: Improve robustness of client handshakes. (remm)\n + Fix: Ensure that WebSocket write timeouts apply to the complete message\n and are not lost if two writes have the same timeout. (markt)\n + Fix: Reduce CPU usage while sending WebSocket close message. (markt)\n + Fix: overly broad check that prevented request URIs containing literal {\n and } characters from being mapped to WebSocket end points. (markt)\n + Fix: handling of WebSocket messages with compressed payloads using per-\n message-deflate that have one or more non-final blocks where the BFINAL\n bit is set. (markt)\n + Fix: handling of per-message-deflate context takeover when receiving\n compressed WebSocket messages. (markt)\n * Web applications\n + Fix: Manager: Fix a potential concurrency issue when ordering sessions\n prior to displaying a list of session. (markt)\n + Docs: Wrap the RewriteRule regular expression syntax reference on narrow\n displays. Pull request #1044 by sainadh777. (markt)\n * Other\n + Update: Easymock to 5.7.0. (markt)\n + Update: bnd to 7.4.0. (markt)\n + Update: Tomcat Native to 2.0.16. (markt)\n + Add: Improvements to French translations. (remm)\n + Add: Improvements to Japanese translations provided by tak7iji and\n Ktamura.biz.80. (markt)\n + Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a\n positive integer. Zero or negative values previously caused an infinite\n loop or a NegativeArraySizeException during session state transfer. Pull\n request #1042 provided by lihongyi87. (markt)\n + Fix: Improve robustness of cloud membership providers if an error occurs\n fetching members. (remm)\n * jdbc-pool\n + Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to\n getConnection(String,String) rather than getConnection(). (markt)\n + Add: Log a warning if an attempt is made to obtain a connection with\n credentials when alternateUsernameAllowed is set to false. (markt)\n + Fix: Ensure StatementCache interceptor resets properties of cached\n statements between uses. (mark)\n\nChanges for tomcat:\n\n- Update to Tomcat 9.0.122\n + Fix: Improve the handling of AsyncContext.dispatch() when the Context\n attribute dispatchersUseEncodedPaths is set to false since the\n application has no control over the path used for the\n AsyncContext.dispatch(). Prior to this fix, paths containing literal '?'\n characters were truncated. (markt)\n + Fix: Ensure that capture groups from a RewriteCond always reflect the\n result of the current request. (markt)\n + Fix: When a PersistentManager needs to reduce the number of active\n sessions, swap out the least recently used eligible sessions first. Pull\n request #1045 provided by sainadh777. (markt)\n + Fix: Align web.xml logging output with the new Context attribute\n urlPatternsProvidedInDecodedForm. (markt)\n + Fix: Improve robustness of DIGEST authentication to system clock jumps.\n (markt)\n + Add: Support multiple protocol header values (treat as a single merged\n header value) in the RemoteIpFilter and RemoteIpValve. (markt)\n + Fix: potential concurrency issues when loading/saving sessions from/to a\n session store. Custom Store implementations that do not extend StoreBase\n must implement the new getSessionStoreLock() method of the Store\n interface to ensure concurrency protection. The default method\n implementation provided only provides the pre-fix functionality. (markt)\n + Fix: Ensure that PersistentManager implementations that extend\n PersistentManagerBase do not swap out sessions that are associated with\n a request that is currently being processed. As a result, it is now a\n requirement that the system property\n org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to\n true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either\n minIdleSwap or maxIdleSwap are configured. (markt)\n * Coyote\n + Fix: xreflection generated code stack overflow issue. (remm)\n + Fix: Align xreflection better with IntrospectionUtils. (remm)\n + Fix: In HTTP/2 after half closed (remote), any unexpected frame should\n be a stream error. (remm)\n + Fix: incorrect initial window size calculation when upgrading to HTTP/2.\n (remm)\n + Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm)\n + Fix: Only try and load the native library from the CATALINA_HOME system\n property when the property is set. (markt)\n + Fix: max connections enforcement after an enpoint resume. (remm)\n + Fix: Implement stricter ALPN matching for Connectors using FFM. (markt)\n + Add: length validation for ALPN protocol names. (markt)\n + Fix: Make FFM certificate verification more robust. (markt)\n + Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing\n failure as if no usable OCSP URLs were present. (markt)\n + Fix: Make the processing of OCSP responses more robust. (markt)\n + Fix: Stricter OCSP handling when soft-fail is disabled. (markt)\n + Fix: Cleaner handling of AJP response headers which overflow the maximum\n message size. (remm)\n + Fix: Small per performance optimisation. Don't waste cycles swallowing\n an AJP response body when the connection is going to be closed. (markt)\n + Fix: OpenSSL support for CRLs when using OpenSSL trust with the server\n key held in a Java key store. (markt)\n + Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding\n header. (markt)\n + Fix: Ensure per request HTTP/2 bad request marker is cleared when the\n request is recycled. (markt)\n + Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt)\n + Fix: Revert earlier refactoring of HTTP/2 header field validation that\n moved it earlier since the refactoring made correct handling of invalid\n headers more difficult. (markt)\n + Fix: EL evaluation of some lambda expressions. (remm)\n * WebSocket\n + Fix: an exception when an automatic Pong response races with the closing\n of the WebSocket session. (moritzfl)\n + Fix: Harden the WebSocket client and use a SecureRandom when generating\n the Sec-WebSocket-Key header. (markt)\n + Fix: Improve robustness of client handshakes. (remm)\n + Fix: Ensure that WebSocket write timeouts apply to the complete message\n and are not lost if two writes have the same timeout. (markt)\n + Fix: Reduce CPU usage while sending WebSocket close message. (markt)\n + Fix: overly broad check that prevented request URIs containing literal {\n and } characters from being mapped to WebSocket end points. (markt)\n + Fix: handling of WebSocket messages with compressed payloads using per-\n message-deflate that have one or more non-final blocks where the BFINAL\n bit is set. (markt)\n + Fix: handling of per-message-deflate context takeover when receiving\n compressed WebSocket messages. (markt)\n * Web applications\n + Fix: Manager: Fix a potential concurrency issue when ordering sessions\n prior to displaying a list of session. (markt)\n + Docs: Wrap the RewriteRule regular expression syntax reference on narrow\n displays. Pull request #1044 by sainadh777. (markt)\n * Other\n + Update: Easymock to 5.7.0. (markt)\n + Update: bnd to 7.4.0. (markt)\n + Update: Tomcat Native to 1.3.9. (markt)\n + Add: Improvements to French translations. (remm)\n + Add: Improvements to Japanese translations provided by tak7iji and\n Ktamura.biz.80. (markt)\n + Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a\n positive integer. Zero or negative values previously caused an infinite\n loop or a NegativeArraySizeException during session state transfer. Pull\n request #1042 provided by lihongyi87. (markt)\n + Fix: Improve robustness of cloud membership providers if an error occurs\n fetching members. (remm)\n * jdbc-pool\n + Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to\n getConnection(String,String) rather than getConnection(). (markt)\n + Add: Log a warning if an attempt is made to obtain a connection with\n credentials when alternateUsernameAllowed is set to false. (markt)\n + Fix: Ensure StatementCache interceptor resets properties of cached\n statements between uses. (mark)\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1795", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23985-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23985-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623985-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23985-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623985-1/" }, { "category": "self", "summary": "SUSE Bug 1282581", "url": "https://bugzilla.suse.com/1282581" }, { "category": "self", "summary": "SUSE Bug 1282599", "url": "https://bugzilla.suse.com/1282599" }, { "category": "self", "summary": "SUSE Bug 1282620", "url": "https://bugzilla.suse.com/1282620" }, { "category": "self", "summary": "SUSE Bug 1282621", "url": "https://bugzilla.suse.com/1282621" }, { "category": "self", "summary": "SUSE Bug 1282622", "url": "https://bugzilla.suse.com/1282622" }, { "category": "self", "summary": "SUSE Bug 1282623", "url": "https://bugzilla.suse.com/1282623" }, { "category": "self", "summary": "SUSE Bug 1282624", "url": "https://bugzilla.suse.com/1282624" }, { "category": "self", "summary": "SUSE Bug 1282625", "url": "https://bugzilla.suse.com/1282625" }, { "category": "self", "summary": "SUSE Bug 1282626", "url": "https://bugzilla.suse.com/1282626" }, { "category": "self", "summary": "SUSE Bug 1282627", "url": "https://bugzilla.suse.com/1282627" }, { "category": "self", "summary": "SUSE Bug 1282628", "url": "https://bugzilla.suse.com/1282628" }, { "category": "self", "summary": "SUSE Bug 1282629", "url": "https://bugzilla.suse.com/1282629" }, { "category": "self", "summary": "SUSE Bug 1282630", "url": "https://bugzilla.suse.com/1282630" }, { "category": "self", "summary": "SUSE Bug 1282631", "url": "https://bugzilla.suse.com/1282631" }, { "category": "self", "summary": "SUSE Bug 1282787", "url": "https://bugzilla.suse.com/1282787" }, { "category": "self", "summary": "SUSE Bug 622430", "url": "https://bugzilla.suse.com/622430" }, { "category": "self", "summary": "SUSE CVE CVE-2026-73581 page", "url": "https://www.suse.com/security/cve/CVE-2026-73581/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-75973 page", "url": "https://www.suse.com/security/cve/CVE-2026-75973/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-76183 page", "url": "https://www.suse.com/security/cve/CVE-2026-76183/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-77756 page", "url": "https://www.suse.com/security/cve/CVE-2026-77756/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-77762 page", "url": "https://www.suse.com/security/cve/CVE-2026-77762/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-77791 page", "url": "https://www.suse.com/security/cve/CVE-2026-77791/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-78383 page", "url": "https://www.suse.com/security/cve/CVE-2026-78383/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-78437 page", "url": "https://www.suse.com/security/cve/CVE-2026-78437/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-79677 page", "url": "https://www.suse.com/security/cve/CVE-2026-79677/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-86243 page", "url": "https://www.suse.com/security/cve/CVE-2026-86243/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-86246 page", "url": "https://www.suse.com/security/cve/CVE-2026-86246/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-86247 page", "url": "https://www.suse.com/security/cve/CVE-2026-86247/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-86248 page", "url": "https://www.suse.com/security/cve/CVE-2026-86248/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-86350 page", "url": "https://www.suse.com/security/cve/CVE-2026-86350/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-87022 page", "url": "https://www.suse.com/security/cve/CVE-2026-87022/" } ], "title": "Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11", "tracking": { "current_release_date": "2026-10-05T16:59:29Z", "generator": { "date": "2026-09-30T17:49:13Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23985-1", "initial_release_date": "2026-09-30T17:49:13Z", "revision_history": [ { "date": "2026-09-30T17:49:13Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:29Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "product": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "product_id": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-1-0@1.3.9-160000.1.1?arch=aarch64&upstream=libtcnative-1-0-0:1.3.9-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "product": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "product_id": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-2-0@2.0.16-160000.1.1?arch=aarch64&upstream=libtcnative-2-0-0:2.0.16-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "tomcat-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-admin-webapps@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-docs-webapp@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-el-3_0-api@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-embed-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-embed-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-embed-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-embed@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-javadoc@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-jsp-2_3-api@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-jsvc@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-lib-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-lib-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-lib-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-lib@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-servlet-4_0-api@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat-webapps-0:9.0.122-160000.1.1.noarch", "product": { "name": "tomcat-webapps-0:9.0.122-160000.1.1.noarch", "product_id": "tomcat-webapps-0:9.0.122-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:9.0.122:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat-webapps@9.0.122-160000.1.1?arch=noarch&upstream=tomcat-0:9.0.122-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-admin-webapps@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-doc-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-doc-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-doc-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-doc@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-docs-webapp@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-el-5_0-api@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-embed-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-embed-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-embed-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-embed@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-jsp-3_1-api@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-jsvc@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-lib-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-lib-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-lib-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-lib@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-servlet-6_0-api@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "product": { "name": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "product_id": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:10.1.60:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat10-webapps@10.1.60-160000.1.1?arch=noarch&upstream=tomcat10-0:10.1.60-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-admin-webapps@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-doc-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-doc-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-doc-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-doc@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-docs-webapp@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-el-6_0-api@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-embed-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-embed-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-embed-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-embed@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-jsp-4_0-api@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-jsvc@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-lib-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-lib-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-lib-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-lib@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-servlet-6_1-api@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "product": { "name": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "product_id": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:apache:tomcat:11.0.26:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/tomcat11-webapps@11.0.26-160000.1.1?arch=noarch&upstream=tomcat11-0:11.0.26-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "product": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "product_id": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-1-0@1.3.9-160000.1.1?arch=ppc64le&upstream=libtcnative-1-0-0:1.3.9-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "product": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "product_id": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-2-0@2.0.16-160000.1.1?arch=ppc64le&upstream=libtcnative-2-0-0:2.0.16-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "product": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "product_id": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-1-0@1.3.9-160000.1.1?arch=s390x&upstream=libtcnative-1-0-0:1.3.9-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "product": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "product_id": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-2-0@2.0.16-160000.1.1?arch=s390x&upstream=libtcnative-2-0-0:2.0.16-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "product": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "product_id": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-1-0@1.3.9-160000.1.1?arch=x86_64&upstream=libtcnative-1-0-0:1.3.9-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "product": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "product_id": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/libtcnative-2-0@2.0.16-160000.1.1?arch=x86_64&upstream=libtcnative-2-0-0:2.0.16-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-embed-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-embed-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-lib-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-webapps-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-doc-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-doc-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-embed-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-embed-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-lib-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-lib-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-doc-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-doc-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-embed-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-embed-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-lib-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-lib-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64" }, "product_reference": "libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64" }, "product_reference": "libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-embed-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-embed-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-lib-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-lib-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-webapps-0:9.0.122-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch" }, "product_reference": "tomcat-webapps-0:9.0.122-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-doc-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-doc-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-embed-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-embed-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-lib-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-lib-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch" }, "product_reference": "tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-doc-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-doc-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-embed-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-embed-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-lib-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-lib-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" }, "product_reference": "tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-73581", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-73581" } ], "notes": [ { "category": "general", "text": "Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0-M1 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.59, 9.0.122, which fixes the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-73581", "url": "https://www.suse.com/security/cve/CVE-2026-73581" }, { "category": "external", "summary": "SUSE Bug 1282631 for CVE-2026-73581", "url": "https://bugzilla.suse.com/1282631" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-73581" }, { "cve": "CVE-2026-75973", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-75973" } ], "notes": [ { "category": "general", "text": "Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to authenticate a request would be used for all web applications.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M4 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60, 9.0.122, which fixes the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-75973", "url": "https://www.suse.com/security/cve/CVE-2026-75973" }, { "category": "external", "summary": "SUSE Bug 1282630 for CVE-2026-75973", "url": "https://bugzilla.suse.com/1282630" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-75973" }, { "cve": "CVE-2026-76183", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-76183" } ], "notes": [ { "category": "general", "text": "Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121.\n\n\n\nThe following versions were EOS at the time the CVE was created but are \nknown to be affected: from 8.5.0 through 8.5.100, from 7.0.43 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-76183", "url": "https://www.suse.com/security/cve/CVE-2026-76183" }, { "category": "external", "summary": "SUSE Bug 1282629 for CVE-2026-76183", "url": "https://bugzilla.suse.com/1282629" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "critical" } ], "title": "CVE-2026-76183" }, { "cve": "CVE-2026-77756", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-77756" } ], "notes": [ { "category": "general", "text": "Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.47 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.67 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-77756", "url": "https://www.suse.com/security/cve/CVE-2026-77756" }, { "category": "external", "summary": "SUSE Bug 1282628 for CVE-2026-77756", "url": "https://bugzilla.suse.com/1282628" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "low" } ], "title": "CVE-2026-77756" }, { "cve": "CVE-2026-77762", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-77762" } ], "notes": [ { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.39 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.59 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60, 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-77762", "url": "https://www.suse.com/security/cve/CVE-2026-77762" }, { "category": "external", "summary": "SUSE Bug 1282599 for CVE-2026-77762", "url": "https://bugzilla.suse.com/1282599" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "low" } ], "title": "CVE-2026-77762" }, { "cve": "CVE-2026-77791", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-77791" } ], "notes": [ { "category": "general", "text": "Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are \nknown to be affected: from 8.5.88 through 8.5.100. Other unsupported versions may also be affected.\n\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-77791", "url": "https://www.suse.com/security/cve/CVE-2026-77791" }, { "category": "external", "summary": "SUSE Bug 1282627 for CVE-2026-77791", "url": "https://bugzilla.suse.com/1282627" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-77791" }, { "cve": "CVE-2026-78383", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-78383" } ], "notes": [ { "category": "general", "text": "Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-78383", "url": "https://www.suse.com/security/cve/CVE-2026-78383" }, { "category": "external", "summary": "SUSE Bug 1282626 for CVE-2026-78383", "url": "https://bugzilla.suse.com/1282626" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-78383" }, { "cve": "CVE-2026-78437", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-78437" } ], "notes": [ { "category": "general", "text": "Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0.116 through 9.0.121.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-78437", "url": "https://www.suse.com/security/cve/CVE-2026-78437" }, { "category": "external", "summary": "SUSE Bug 1282625 for CVE-2026-78437", "url": "https://bugzilla.suse.com/1282625" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "low" } ], "title": "CVE-2026-78437" }, { "cve": "CVE-2026-79677", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-79677" } ], "notes": [ { "category": "general", "text": "Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121.\n\n\n\nThe following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.43 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-79677", "url": "https://www.suse.com/security/cve/CVE-2026-79677" }, { "category": "external", "summary": "SUSE Bug 1282624 for CVE-2026-79677", "url": "https://bugzilla.suse.com/1282624" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-79677" }, { "cve": "CVE-2026-86243", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-86243" } ], "notes": [ { "category": "general", "text": "Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-86243", "url": "https://www.suse.com/security/cve/CVE-2026-86243" }, { "category": "external", "summary": "SUSE Bug 1282623 for CVE-2026-86243", "url": "https://bugzilla.suse.com/1282623" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-86243" }, { "cve": "CVE-2026-86246", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-86246" } ], "notes": [ { "category": "general", "text": "Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 2.0.16 or 1.3.9, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-86246", "url": "https://www.suse.com/security/cve/CVE-2026-86246" }, { "category": "external", "summary": "SUSE Bug 1282622 for CVE-2026-86246", "url": "https://bugzilla.suse.com/1282622" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-86246" }, { "cve": "CVE-2026-86247", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-86247" } ], "notes": [ { "category": "general", "text": "Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations.\n\n\n\nThis issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 2.0.16 or 1.3.9, which fixes the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-86247", "url": "https://www.suse.com/security/cve/CVE-2026-86247" }, { "category": "external", "summary": "SUSE Bug 1282621 for CVE-2026-86247", "url": "https://bugzilla.suse.com/1282621" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-86247" }, { "cve": "CVE-2026-86248", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-86248" } ], "notes": [ { "category": "general", "text": "CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.25, from 10.1.22 through 10.1.59, from 9.0.92 through 9.0.121.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-86248", "url": "https://www.suse.com/security/cve/CVE-2026-86248" }, { "category": "external", "summary": "SUSE Bug 1282620 for CVE-2026-86248", "url": "https://bugzilla.suse.com/1282620" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "critical" } ], "title": "CVE-2026-86248" }, { "cve": "CVE-2026-86350", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-86350" } ], "notes": [ { "category": "general", "text": "Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.22 through 11.0.25, from 10.1.55 through 10.1.59, from 9.0.118 through 9.0.121.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.0.122, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-86350", "url": "https://www.suse.com/security/cve/CVE-2026-86350" }, { "category": "external", "summary": "SUSE Bug 1265163 for CVE-2026-86350", "url": "https://bugzilla.suse.com/1265163" }, { "category": "external", "summary": "SUSE Bug 1282787 for CVE-2026-86350", "url": "https://bugzilla.suse.com/1282787" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-86350" }, { "cve": "CVE-2026-87022", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-87022" } ], "notes": [ { "category": "general", "text": "Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used.\n\n\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 through 9.0.121.\n\n\n\nThe following versions were EOS at the time the CVE was created but are known to be affected: from 8.5.0 through 8.5.100, from 7.0.56 through 7.0.109. Other unsupported versions may also be affected.\n\n\n\nUsers are recommended to upgrade to version 11.0.26, 10.1.60 or 9.1.22, which fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-87022", "url": "https://www.suse.com/security/cve/CVE-2026-87022" }, { "category": "external", "summary": "SUSE Bug 1282581 for CVE-2026-87022", "url": "https://bugzilla.suse.com/1282581" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-1-0-0:1.3.9-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libtcnative-2-0-0:2.0.16-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-admin-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-docs-webapp-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-el-3_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-embed-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-javadoc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsp-2_3-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-jsvc-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-lib-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-servlet-4_0-api-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat-webapps-0:9.0.122-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-admin-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-doc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-docs-webapp-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-el-5_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-embed-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsp-3_1-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-jsvc-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-lib-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-servlet-6_0-api-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat10-webapps-0:10.1.60-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-admin-webapps-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-doc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-docs-webapp-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-el-6_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-embed-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsp-4_0-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-jsvc-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-lib-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-servlet-6_1-api-0:11.0.26-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:tomcat11-webapps-0:11.0.26-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-87022" } ] } ``` ## [suse-su-2026:23984-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23984-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for helm", "title": "Title of the patch" }, { "category": "description", "text": "This update for helm fixes the following issues:\n\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n (bsc#1265758).\n- CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin\n (bsc#1261939).\n- CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin\n provenance verification (bsc#1261935).\n- CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart\n (bsc#1261938).\n- CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length\n headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510).\n- CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled\n configuration (bsc#1265428).\n- CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to\n exfiltrate credentials and refresh tokens (bsc#1270127).\n- CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660).\n- CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327).\n- CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997).\n- CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1281426).\n- CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426).\n- CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025).\n- CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024).\n- CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426).\n- CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass\n allows log telemetry interception and alteration (bsc#1281468).\n- CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission\n (bsc#1281469).\n- CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network\n probing (bsc#1281112).\n- gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation\n (bsc#1276514).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1794", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23984-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23984-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23984-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623984-1/" }, { "category": "self", "summary": "SUSE Bug 1261935", "url": "https://bugzilla.suse.com/1261935" }, { "category": "self", "summary": "SUSE Bug 1261938", "url": "https://bugzilla.suse.com/1261938" }, { "category": "self", "summary": "SUSE Bug 1261939", "url": "https://bugzilla.suse.com/1261939" }, { "category": "self", "summary": "SUSE Bug 1265428", "url": "https://bugzilla.suse.com/1265428" }, { "category": "self", "summary": "SUSE Bug 1265758", "url": "https://bugzilla.suse.com/1265758" }, { "category": "self", "summary": "SUSE Bug 1270127", "url": "https://bugzilla.suse.com/1270127" }, { "category": "self", "summary": "SUSE Bug 1271660", "url": "https://bugzilla.suse.com/1271660" }, { "category": "self", "summary": "SUSE Bug 1271997", "url": "https://bugzilla.suse.com/1271997" }, { "category": "self", "summary": "SUSE Bug 1275024", "url": "https://bugzilla.suse.com/1275024" }, { "category": "self", "summary": "SUSE Bug 1275025", "url": "https://bugzilla.suse.com/1275025" }, { "category": "self", "summary": "SUSE Bug 1276327", "url": "https://bugzilla.suse.com/1276327" }, { "category": "self", "summary": "SUSE Bug 1276510", "url": "https://bugzilla.suse.com/1276510" }, { "category": "self", "summary": "SUSE Bug 1276514", "url": "https://bugzilla.suse.com/1276514" }, { "category": "self", "summary": "SUSE Bug 1281112", "url": "https://bugzilla.suse.com/1281112" }, { "category": "self", "summary": "SUSE Bug 1281426", "url": "https://bugzilla.suse.com/1281426" }, { "category": "self", "summary": "SUSE Bug 1281468", "url": "https://bugzilla.suse.com/1281468" }, { "category": "self", "summary": "SUSE Bug 1281469", "url": "https://bugzilla.suse.com/1281469" }, { "category": "self", "summary": "SUSE CVE CVE-2026-33814 page", "url": "https://www.suse.com/security/cve/CVE-2026-33814/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-35204 page", "url": "https://www.suse.com/security/cve/CVE-2026-35204/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-35205 page", "url": "https://www.suse.com/security/cve/CVE-2026-35205/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-35206 page", "url": "https://www.suse.com/security/cve/CVE-2026-35206/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41178 page", "url": "https://www.suse.com/security/cve/CVE-2026-41178/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41888 page", "url": "https://www.suse.com/security/cve/CVE-2026-41888/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-48978 page", "url": "https://www.suse.com/security/cve/CVE-2026-48978/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-50151 page", "url": "https://www.suse.com/security/cve/CVE-2026-50151/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-50163 page", "url": "https://www.suse.com/security/cve/CVE-2026-50163/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56852 page", "url": "https://www.suse.com/security/cve/CVE-2026-56852/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56854 page", "url": "https://www.suse.com/security/cve/CVE-2026-56854/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56855 page", "url": "https://www.suse.com/security/cve/CVE-2026-56855/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56864 page", "url": "https://www.suse.com/security/cve/CVE-2026-56864/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56865 page", "url": "https://www.suse.com/security/cve/CVE-2026-56865/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-78662 page", "url": "https://www.suse.com/security/cve/CVE-2026-78662/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-81871 page", "url": "https://www.suse.com/security/cve/CVE-2026-81871/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-81872 page", "url": "https://www.suse.com/security/cve/CVE-2026-81872/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-85732 page", "url": "https://www.suse.com/security/cve/CVE-2026-85732/" } ], "title": "Security update for helm", "tracking": { "current_release_date": "2026-10-05T16:59:28Z", "generator": { "date": "2026-09-30T17:49:13Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23984-1", "initial_release_date": "2026-09-30T17:49:13Z", "revision_history": [ { "date": "2026-09-30T17:49:13Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:28Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.aarch64", "product": { "name": "helm-0:4.3.0-160000.1.1.aarch64", "product_id": "helm-0:4.3.0-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=aarch64&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "product": { "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "product_id": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm-bash-completion@4.3.0-160000.1.1?arch=noarch&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "helm-fish-completion-0:4.3.0-160000.1.1.noarch", "product": { "name": "helm-fish-completion-0:4.3.0-160000.1.1.noarch", "product_id": "helm-fish-completion-0:4.3.0-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm-fish-completion@4.3.0-160000.1.1?arch=noarch&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "product": { "name": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "product_id": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm-zsh-completion@4.3.0-160000.1.1?arch=noarch&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.ppc64le", "product": { "name": "helm-0:4.3.0-160000.1.1.ppc64le", "product_id": "helm-0:4.3.0-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=ppc64le&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.s390x", "product": { "name": "helm-0:4.3.0-160000.1.1.s390x", "product_id": "helm-0:4.3.0-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=s390x&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.x86_64", "product": { "name": "helm-0:4.3.0-160000.1.1.x86_64", "product_id": "helm-0:4.3.0-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=x86_64&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64" }, "product_reference": "helm-0:4.3.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le" }, "product_reference": "helm-0:4.3.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x" }, "product_reference": "helm-0:4.3.0-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64" }, "product_reference": "helm-0:4.3.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-fish-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-fish-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64" }, "product_reference": "helm-0:4.3.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le" }, "product_reference": "helm-0:4.3.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x" }, "product_reference": "helm-0:4.3.0-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64" }, "product_reference": "helm-0:4.3.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-fish-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-fish-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-33814", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-33814" } ], "notes": [ { "category": "general", "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-33814", "url": "https://www.suse.com/security/cve/CVE-2026-33814" }, { "category": "external", "summary": "SUSE Bug 1264506 for CVE-2026-33814", "url": "https://bugzilla.suse.com/1264506" }, { "category": "external", "summary": "SUSE Bug 1268758 for CVE-2026-33814", "url": "https://bugzilla.suse.com/1268758" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-33814" }, { "cve": "CVE-2026-35204", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-35204" } ], "notes": [ { "category": "general", "text": "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem location. To prevent this, validate that the plugin.yaml of the Helm plugin does not include a version: field containing POSIX dot-dot path separators ie. \"/../\". This vulnerability is fixed in 4.1.4.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-35204", "url": "https://www.suse.com/security/cve/CVE-2026-35204" }, { "category": "external", "summary": "SUSE Bug 1261939 for CVE-2026-35204", "url": "https://bugzilla.suse.com/1261939" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-35204" }, { "cve": "CVE-2026-35205", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-35205" } ], "notes": [ { "category": "general", "text": "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-35205", "url": "https://www.suse.com/security/cve/CVE-2026-35205" }, { "category": "external", "summary": "SUSE Bug 1261934 for CVE-2026-35205", "url": "https://bugzilla.suse.com/1261934" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-35205" }, { "cve": "CVE-2026-35206", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-35206" } ], "notes": [ { "category": "general", "text": "Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to write the Chart's contents to the immediate output directory (as defaulted to the current working directory; or as given by the --destination and --untardir flags), rather than the expected output directory suffixed by the chart's name. This vulnerability is fixed in 3.20.2 and 4.1.4.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-35206", "url": "https://www.suse.com/security/cve/CVE-2026-35206" }, { "category": "external", "summary": "SUSE Bug 1261938 for CVE-2026-35206", "url": "https://bugzilla.suse.com/1261938" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-35206" }, { "cve": "CVE-2026-41178", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41178" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41178", "url": "https://www.suse.com/security/cve/CVE-2026-41178" }, { "category": "external", "summary": "SUSE Bug 1276509 for CVE-2026-41178", "url": "https://bugzilla.suse.com/1276509" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41178" }, { "cve": "CVE-2026-41888", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41888" } ], "notes": [ { "category": "general", "text": "Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2//manifests/ endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41888", "url": "https://www.suse.com/security/cve/CVE-2026-41888" }, { "category": "external", "summary": "SUSE Bug 1265422 for CVE-2026-41888", "url": "https://bugzilla.suse.com/1265422" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41888" }, { "cve": "CVE-2026-48978", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-48978" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as http://169.254.169.254/, http://10.0.0.x/, and http://127.0.0.1/, or to downgrade a registry contacted over https:// to an http:// token endpoint in registry/remote/auth/client.go through Client.Do(), Client.fetchBearerToken(), fetchDistributionToken, and fetchOAuth2Token. This issue is fixed in version 2.6.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-48978", "url": "https://www.suse.com/security/cve/CVE-2026-48978" }, { "category": "external", "summary": "SUSE Bug 1270126 for CVE-2026-48978", "url": "https://bugzilla.suse.com/1270126" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-48978" }, { "cve": "CVE-2026-50151", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-50151" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the subsequent PUT request, allowing a malicious registry to return a cross-host Location and receive the caller's credentials at an attacker-controlled endpoint. This issue is fixed in version 2.6.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-50151", "url": "https://www.suse.com/security/cve/CVE-2026-50151" }, { "category": "external", "summary": "SUSE Bug 1271461 for CVE-2026-50151", "url": "https://bugzilla.suse.com/1271461" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-50151" }, { "cve": "CVE-2026-50163", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-50163" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link(\"victim.secret\", \"/payload.tar.gz/evil_cwd_link\") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname=\"victim.secret\" with io.deis.oras.content.unpack: \"true\", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-50163", "url": "https://www.suse.com/security/cve/CVE-2026-50163" }, { "category": "external", "summary": "SUSE Bug 1271462 for CVE-2026-50163", "url": "https://bugzilla.suse.com/1271462" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-50163" }, { "cve": "CVE-2026-56852", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56852" } ], "notes": [ { "category": "general", "text": "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56852", "url": "https://www.suse.com/security/cve/CVE-2026-56852" }, { "category": "external", "summary": "SUSE Bug 1271661 for CVE-2026-56852", "url": "https://bugzilla.suse.com/1271661" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-56852", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-56852" }, { "cve": "CVE-2026-56854", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56854" } ], "notes": [ { "category": "general", "text": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56854", "url": "https://www.suse.com/security/cve/CVE-2026-56854" }, { "category": "external", "summary": "SUSE Bug 1278446 for CVE-2026-56854", "url": "https://bugzilla.suse.com/1278446" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-56854", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-56854" }, { "cve": "CVE-2026-56855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56855" } ], "notes": [ { "category": "general", "text": "Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56855", "url": "https://www.suse.com/security/cve/CVE-2026-56855" }, { "category": "external", "summary": "SUSE Bug 1278446 for CVE-2026-56855", "url": "https://bugzilla.suse.com/1278446" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-56855", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-56855" }, { "cve": "CVE-2026-56864", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56864" } ], "notes": [ { "category": "general", "text": "A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56864", "url": "https://www.suse.com/security/cve/CVE-2026-56864" }, { "category": "external", "summary": "SUSE Bug 1275025 for CVE-2026-56864", "url": "https://bugzilla.suse.com/1275025" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-56864" }, { "cve": "CVE-2026-56865", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56865" } ], "notes": [ { "category": "general", "text": "A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that cannot be detected by evaluating the transparency log. All tiles are now correctly verified against their parents. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56865", "url": "https://www.suse.com/security/cve/CVE-2026-56865" }, { "category": "external", "summary": "SUSE Bug 1275024 for CVE-2026-56865", "url": "https://bugzilla.suse.com/1275024" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-56865" }, { "cve": "CVE-2026-78662", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-78662" } ], "notes": [ { "category": "general", "text": "Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-78662", "url": "https://www.suse.com/security/cve/CVE-2026-78662" }, { "category": "external", "summary": "SUSE Bug 1278446 for CVE-2026-78662", "url": "https://bugzilla.suse.com/1278446" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-78662", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-78662" }, { "cve": "CVE-2026-81871", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-81871" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_EXPORTER_OTLP_CERTIFICATE, and related client certificate environment variables through loadEnvTLS into cfg.tlsCfg, but newGRPCDialOptions does not apply cfg.tlsCfg when creating gRPC transport credentials. The environment-only TLS path instead uses credentials.NewTLS with system roots and no configured client certificate, bypassing intended private CA pinning and mutual TLS unless the application also supplies WithTLSCredentials. A network attacker able to intercept or spoof the collector connection with a system-trusted certificate can read or alter log telemetry. This issue is fixed in version 0.21.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-81871", "url": "https://www.suse.com/security/cve/CVE-2026-81871" }, { "category": "external", "summary": "SUSE Bug 1281466 for CVE-2026-81871", "url": "https://bugzilla.suse.com/1281466" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-81871" }, { "cve": "CVE-2026-81872", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-81872" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor wraps the exporter with newBufferExporter(exporter, 1), and the poll loop calls queue.TryDequeue and bufferExporter.EnqueueExport before immediately signaling pollTrigger whenever the queue remains at or above batchSize. Because a failed nonblocking EnqueueExport leaves the queue length unchanged, the processor repeatedly retries without waiting for its ticker, exhausting CPU and degrading or denying service in the embedding process. This issue is fixed in version 0.21.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-81872", "url": "https://www.suse.com/security/cve/CVE-2026-81872" }, { "category": "external", "summary": "SUSE Bug 1281467 for CVE-2026-81872", "url": "https://bugzilla.suse.com/1281467" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-81872" }, { "cve": "CVE-2026-85732", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-85732" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a GET request to the attacker-selected URL from the victim's network, allowing blind server-side request forgery against internal services. The response body is not returned to the attacker, but timing and error differences can reveal service reachability, and credentials may be attached when the credential store has an entry for the target host. Exploitation requires a victim to perform a pagination-based listing operation against a malicious registry. The maintainer identifies this report as a duplicate of GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated issue is fixed in version 2.6.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-85732", "url": "https://www.suse.com/security/cve/CVE-2026-85732" }, { "category": "external", "summary": "SUSE Bug 1281108 for CVE-2026-85732", "url": "https://bugzilla.suse.com/1281108" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-bash-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-fish-completion-0:4.3.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:helm-zsh-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-85732" } ] } ``` ## [suse-su-2026:23983-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23983-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for sccache", "title": "Title of the patch" }, { "category": "description", "text": "This update for sccache fixes the following issues:\n\n- CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868).\n- CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes\n (bsc#1274146).\n- CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion\n (bsc#1257923).\n- CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1\n (bsc#1270206).\n- CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-\n openssl crate (bsc#1270559).\n- CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl crate (bsc#1270693).\n- CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate\n (bsc#1270736).\n- CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent\n memory in rust-openssl crate (bsc#1270869).\n- CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate\n (bsc#1270512).\n- CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-wrap-with-padding in rust-openssl crate\n (bsc#1270938).\n- CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust-\n openssl crate (bsc#1270948).\n- CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values (bsc#1273881).\n- CVE-2026-66754: rouille: remove_prefix function that allows remote unauthenticated attackers to crash the server by\n sending a crafted percent-encoded URL (bsc#1273884).\n- CVE-2026-67181: rouille: HTTP Request Smuggling via Transfer-Encoding Desynchronization (bsc#1273886).\n- CVE-2026-67182: rouille: HTTP Request Smuggling Enables Front-End Access Control Bypass (bsc#1273888).\n- CVE-2026-93599: rustls-webpki: panic via empty BIT STRING (bsc#1282211).\n- CVE-2026-93600: rustls-webpki: name constraints URI validation bypass (bsc#1282211).\n- CVE-2026-93601: rustls-webpki: name constraint bypass (bsc#1282211).\n- CVE-2026-93602: rustls-webpki: CRL revocation check bypass (bsc#1282211).\n\nChanges for sccache:\n\nUpdate to version 0.18.0~2:\n * Add experimental concurrent cache support\n * chore: Remove dependency status badge (#2856)\n * Don't hand the jobserver to children that can't use it\n * dist: refuse to trim rlibs from crates that also emit a cdylib\n * fix(cache): avoid duplicate multilevel reads\n * Strip basedirs from the compiler arguments too\n * tests/integration: replace MinIO with Silo\n * ci: dump sccache logs on integration failures\n * multilevel: a chain with any writable level is writable\n * Fix parsing of #line directives\n * Release 0.18.0\n * daemonize: use an allow-list approach to inherited FDs\n * gcc, clang: make the assembler part of the cache key\n * support cl.exe /openmp:llvm\n * support all current /fsanitize*, /fsanitize-coverage*, and /fno-sanitize* args\n * support MSVC /feature argument\n * msvc: support lots of flags (#2832)\n * Update shlex dependency to version 2 (#2836)\n * gcc: mark flags as TooHard if need to cache something else (#2833)\n * clang: support more CLI options (#2834)\n * msvc: support arm64EC and fastfail flags (#2830)\n * chore: fix typo in comment (#2829)\n * nvcc: accept the --diag-error/--diag-suppress/--diag-warn family (#2816)\n * cache: allow skipping capability checks (#2822)\n * Bump opendal to 0.58.1 and fix fallout (fixes local GCS cache usage) (#2715)\n * nvcc (Windows): protect escaped quotes in dryrun lines before flattening backslashes (#2811)\n * Add an agent (#2812)\n * Add support for d20bforceinline. (#2807)\n * feat: add Microsoft Entra ID (passwordless) auth for the Azure Blob backend (#2802)\n * Bump MSRV to 1.91.0 (#2793)\n * Fix `nvcc` dryrun parsing for CUDA 13.3 (#2722)\n * test: Fixed hardcoded binary path in test\n * Release 0.17.0\n * tests: pin libc in the dist test crate\n * doc: clarify server-side outputs and drop 'recommended mode' claim\n * doc: document SCCACHE_CLIENT_SIDE env var\n * doc: document client-side and direct modes in Architecture.md\n * Fix description of Unix socket-based Redis connection\n * server: remove redundant async block in start_compile_task\n * server: simplify bind() request loops with ? instead of manual match arms\n * Add support for arg files in Rust (#2782)\n * feat: support S3 SSE-KMS with AWS-managed and customer-managed keys (#2770)\n * abort compile tasks and associated subprocesses when a client disconnects\n * treat -ivfsoverlay as a preprocessor-only argument\n * gcc: refine response-file tokenizer visibility and whitespace handling\n * integration: convert cmake 4.x modules XFAIL test to a passing test\n * gcc/clang: cache and distribute builds using quoted @response files\n * fix: Fix ToolchainPackager cfg gate to build on ppc64le/s390x\n * fix: make gcc diagnostics color output work the same as for rustc\n * implement client-side mode\n * split handle_compile_response so that the compilation result can be handled separately\n * implement IpcStorage -- Storage backend over IPC\n * extend wire protocol with storage RPCs\n * implement AddAssign for ServerStats and related types\n * add Storage::get_path for direct file access\n * implement get_raw/put_raw on MultiLevelStorage\n * add client_side_mode config flag (SCCACHE_CLIENT_SIDE)\n * Extract new_client_runtime() helper to DRY up client runtime creation\n * Clarify single-threaded runtime rationale comment (grammar)\n * fix: use single-threaded tokio runtime in sccache dist-client\n * fix: use single-threaded tokio runtime in sccache client\n * fix: handle disabled cache backend features in multilevel chain\n * Fix ldd output parsing: remove .exists() check that failed on systems where the symlink source path does not exist locally (e.g. aarch64)\n * Fix cfg guard for PanicToolchainPackager to also cover non-x86_64 Linux architectures (e.g. aarch64)\n * Release 0.16.0\n * fix: strip SCCACHE_BASEDIRS from escaped-backslash paths on Windows (#2736)\n * Ignore empty-set environment values (#2639)\n * feat: all backends support making them as read-only (#2705)\n * Enable RE on Linux-aarch64 (#2668)\n * Slightly improve logging (#2734)\n * chore: encode jwt key and cert digest with base64 in logs (#2712)\n * chore: make clippy happy (#2727)\n * feat: avoid sccache wrapper when resolving compiler (#2720)\n * Fall back to direct cache write if tempfile creation on the same fs fails (#2369)\n * remove too noisy bench\n * feat(nvcc): support argument: `--dependency-output` (#2708)\n * fix: add newline when printing dist-status to stdout\n * Revert \"Classify .s files as AssemblerToPreprocess so #include/#ifdef are hon...\"\n * Don't wait depfiles for gcc/clang preprocessed inputs\n * Classify .s files as AssemblerToPreprocess so #include/#ifdef are honored\n * prepare release 0.15.0\n * Add cargo-binstall metadata for prebuilt binary installation\n * Fix coverage\n * fix: handle directories in dep-info source file hashing\n * docs(Rust.md): Add caveats from README\n * Add retry for dists docker image build\n * ci: set crt-static for riscv64 musl targets\n * feat: Add loongarch64 support\n * feat: Implement multi-tier caching with fallback and backfilling (#2581)\n * msvc: add support for Y-, YI, Zf flags\n * Group tests logging in CI\n * Add failing test for cmake-modules + cmake 4 version\n * Unfold ninja output in the test\n * Add a comment for maintaining integration tests\n * Move cmake-modules to integration tests\n * fix: exclude CARGO_ENCODED_RUSTFLAGS from env var hash (#2651)\n * chore(deps): update rust crate quinn-proto to v0.11.14\n * Fix sync GCS initialization\n * clippy: fix from_iter_instead_of_collect lint\n * fix: add Win32_Security feature to windows-sys dependency\n * build(deps): bump actions/download-artifact from 5 to 8\n * msvc: Append the default .pdb extension for the /Fd argument (#2621)\n * build(deps): bump actions/upload-artifact from 4 to 7\n * clippy: fix ref_option lint\n * ci: install grcov from prebuilt binary instead of cargo install\n * ci: use default toolchain to install grcov\n * ci: fix artifact_failure action when target dir does not exist\n * Remove benchmark normalize_win_path_utf8 (#2634)\n * Revert \"actions: add security audit workflow (#2594)\" (#2603)\n * partial c++20 module support (#2516)\n * clippy: fix ptr_as_ptr lint (#2611)\n * Add support for `d1nodatetime` & `await:strict` MSVC flags (#2617)\n * chore: switch thirtyfour_sync to thirtyfour (#2613)\n * clippy: fix manual_string_new lint (#2609)\n * clippy: fix unnecessary_semicolon lint (#2615)\n * clippy: fix explicit_into_iter_loop lint (#2616)\n * Avoid double-caching when ccache is installed in PATH (#2524)\n * clippy: fix cloned_instead_of_copied lint (#2605)\n * clippy: fix semicolon_if_nothing_returned lint (#2601)\n * Move PreprocessorCacheModeConfig to src/config.rs (#2604)\n * clippy: fix cloned_ref_to_slice_refs lint (#2602)\n * prepare the new release (#2600)\n * chore: update to toml 0.9 (#2599)\n * ci: Add coverage to integration tests, report it to Codecov.io (#2598)\n * Preparation for multilevel caching (#2597)\n * Add sccache-dist to flake.nix (#2579)\n * fixup! cargo fmt\n * fixup! rustfmt update\n * Extract FileObjectSource, CacheRead and CacheWrite to cache_io.rs\n * chore: update to nix 0.30\n * Add a helper method to get a correct backend name\n * Add cos feature gate to RemoteStorage\n * Simplify profiles for integration tests\n * clippy: fix implicit_clone lint (#2584)\n * actions: add security audit workflow (#2594)\n * docs: fix examples showing an xz-compress toolchain archive (#2587)\n * add benches for normalize_win_path strip_basedirs (#2588)\n * snap: update to core24 (#2570)\n * Add .rustfmt.toml for consistent style between `rustfmt` and `cargo fmt` (#2582)\n * add comments about auth token requirements (#2583)\n * chore: update to tokio-serde 0.9 (#2585)\n * ci: update freebsd to 15.0 (#2586)\n * distributed compilation support for asm & preprocessor outputs (#2557)\n * remove unused declaration (#2577)\n * Extract LazyDiskCache to a separated file (#2573)\n * Revert \"ci: show diff for toml_format\" (#2578)\n * Open Add SCCACHE_BASEDIRS support\n * ci: show diff for toml_format\n * chore: update to syslog 7\n * refactor: use matrix to reduce deduplication\n * fix: remove outdated `analysis` mode\n * Unbreak the s390x CI\n * ci: add macos-15-intel for prebuilt binary (#2555)\n * Integration tests (#2564)\n * Fix code review.\n * Impl for COS.\n * build(deps): bump opendal from 0.54.0 to 0.55.0\n * Move integration tests related stuff to subdir\n * Add Objective C Header for consistency\n * github action: fix the syntax - fails in the ci\n * sccache: prepare a new release\n * msvc: add msbuild support test\n * msvc: fix detect_showincludes_prefix with MSBuild\n * chore: update to gzp 2\n * build(deps): bump rsa from 0.9.6 to 0.9.10\n * codspeed: evaluate the memory benchmarking\n * remove too quick benchmarks\n * codspeed: move to simulation mode\n * Add realistic LRU cache access pattern benchmarks\n * Add compression characteristics benchmarks\n * Add build workflow simulation benchmarks\n * Add hash computation scenario benchmarks\n * Add batch cache entry benchmarks\n * Add cache artifact serialization benchmarks\n * Add /etc/ld.so.conf.d (if present) to compiler package\n * Assembly language support\n * fix(ci): pin serde_json to avoid zmij dependency\n * fix(ci): update zmij to fix s390x cross-compilation\n * Fix the run of the CI\n * run the benchmark in the ci\n * add benchmarks\n * dedup some code\n * Fix hash logging prefix\n * Add support for C preprocessor output\n * Add GCC pipe flag support\n * Improve save-temps gcc flags detection\n * MSVC: support forward slash as an output dir marker\n * add clang -fplugin=x regression test\n * canbeconcatenated is not accounted for in cmp\n * Reversed the order for looking `rustc`, added comment\n * Fix failing test_rlib_dep_reader_call for omit CARGO_HOME\n * fix: don't hash -parallel-jobs in Clang\n * docs: add installation steps for nix (#2523)\n * Support clang -fexperimental-assignment-tracking option (#2517)\n * add a nix flake (#2518)\n * Switch from the unmaintained daemonize crate to a maintained fork\n * chore: update to fs-err 3\n * Fix grammar of error message\n * Add server name info to stderr of remote jobs that ran, but failed\n * Remove another pointless destructuring\n * try to unbreak the ci\n * fix s390x build error\n * Add riscv64 support\n * fix: make aarch64-pc-windows-msvc also zip not tar.gz\n * Free up disk space in CI\n * MSVC on Windows only\n * Avoid 'No space left on device' errors in CI\n * GitHub dropped macos-13 runners\n * Proper function pointer to int cast\n * Avoid unused structs with dist-server disabled\n * no check cfg (#2507)\n * chore: switch once_cell crate to standard library (#2499)\n * Avoid unreliable assert_cmd::cargo::cargo_bin (#2489)\n * Fix build on macOS which doesn't have separate 32-bit dirent (#2492)\n * Fix Clippy warnings (#2490)\n * docs: bump MSRV to 1.85.0\n * msvc: handle '/FoRelease\\' command-line argument\n * chore: drop tower dependency\n * chore: update to itertools 0.14\n * Use generator in CMAKE_MSVC_DEBUG_INFORMATION_FORMAT in README\n * Update directories to 6.0\n * Configuration.md - note logging env variables\n * chore: update to env_logger 0.11\n * deps: update blake3\n * prepare version 0.12.0\n * Update README with winget installation instructions\n * Skip CARGO_BUILD_JOBS in hash keys\n * build(deps): bump object from 0.36.7 to 0.37.1\n * Adjust tests after the rust update\n * Fix CI by adding cargo-features and updating coverage test to use modern -Cinstrument-coverage\n * Fix more clippy warnings\n * bump rustc in the ci too\n * Fix rustc 1.85 clippy warnings\n * bump to rustc 1.85 / edition 2024. mandatory for reqsign-core and run rustfmt with the version\n * fix clippy warnings\n * bump opendal to 0.54.0 & reqsign to 0.18.0\n * github action: when creating a release, make it as draft before (#2458)\n * prepare version 0.11.0 (#2457)\n * document SCCACHE_LOG_MILLIS (#2456)\n * logging: add a option to log milliseconds (Closes: #2454) (#2455)\n * feat: handle human size prefixes (#2405)\n * fix: in stats, Compare values AND keys to have a fully deterministic order (#2403)\n * Add --diagnostic-width to test for args ignored in hash\n * Ignore --diagnostic-width argument when computing hash\n * build(deps): bump actions/checkout from 4 to 5\n * build(deps): bump actions/download-artifact from 4 to 5\n * build(deps): bump actions/github-script from 7 to 8\n * Fix rustfmt\n * Fix comments on request\n * Fix clippy and rustfmt\n * Add test for count toolchain and use Determenistic for create tar archive\n * Fix mtime for reproducable toolchains\n * build(deps): bump chrono from 0.4.41 to 0.4.42\n * fix typo in an environment variable name\n * Fix documentation of azure configuration\n * Account for clippy-driver having extra prefix `rustc`\n * Fix build on Android (in Termux)\n * add support for s390x build\n * chore: replace retry crate with backon\n * Remove or replace \"Windows 2019\" CI config\n * Needs another result unwrapping, it seems\n * Test: invoking symlink \"compiler\" to \"sccache\" invokes \"compiler\"\n * Add a comment about the problem with symlinks and current_exe()\n * Fix symbolic links to sccache on linux\n * Allow the CI configuration to disable clang++ for CUDA testing\n * Don't run tests using clang++ as CUDA compiler on Windows\n * add description to sccache-dist commands\n * Display a more user-friendly error when compiling on Linux/arm64\n * Clarify documentation about \"the hash\" (aka cache key)\n * Remove stray ')'\n * Remove documentation for removed limitations of preprocessor cache mode\n * Fix preprocessor cache mode when the compiler outputs a dep file\n * Partially revert \"Don't cache dep file (#2322)\"\n * Do not disable preprocessor cache mode if there is a dep file\n * Fix preprocessor cache mode with distributed builds (#2173)\n * Change self of generate_hash_key() from Box to &mut Self\n * Remove a few IMO pointless indirections / aliases\n * Remove workaround for #2173\n * Add test for bug #2173\n * chore: fix some minor issues in comments\n * build(deps): bump chrono from 0.4.40 to 0.4.41\n * build(deps): bump memchr from 2.7.1 to 2.7.5\n * check if we can use a specific version of rust to build grcov\n * Move comment that hadn't moved with its corresponding code\n * Rework direct mode documentation some more\n * Explain what preprocessor cache mode really does\n * Reword and correct the preprocessor cache mode documentation\n * chore: Remove not working mozilla code\n * Add support for -fsanitize-ignorelist\n * github storage: adjust the doc\n * github storage: ACTIONS_CACHE_URL => ACTIONS_RESULTS_URL\n * github storage: force version 2\n * Update codecov badge in README.md\n * Expand tests for dist-server\n * ci: Consolidate testing, coverage\n * ci: Update ubuntu-20.04 runners to ubuntu-22.04\n * chore: fix some comments\n * Give the --dist-status user some information about when a retry will happen.\n * Add support for Xclang flag '-mrelax-all'\n * Add support for Xclang flag '-mconstructor-aliases'\n * feat(utils): Add support for object >= 0.33\n * fix(tests): Remove executable bit from oauth.rs\n * build(deps): bump openssl from 0.10.64 to 0.10.72\n * build(deps): bump tokio from 1.41.0 to 1.43.1\n * Improve the CARGO_INCREMENTAL checking (#2364)\n * build(deps): bump chrono from 0.4.38 to 0.4.40\n * build(deps): bump clap from 4.4.18 to 4.5.13\n * build(deps): bump ring from 0.17.7 to 0.17.13\n * Bail on `nvcc -time` and `nvcc -fdevice-time-trace` flags\n * test hip with librandomize_readdir\n * Add randomize_readdir test utility\n * fix non-strict HIP device lib order\n * Create config during testing to collect coverage data\n * Extend coverage to distributed tests\n * chore: replace num_cpus crate with available_parallelism in standard library (#2342)\n * Update CI coverage: grcov/codecov\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1793", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23983-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23983-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623983-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23983-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623983-1/" }, { "category": "self", "summary": "SUSE Bug 1243868", "url": "https://bugzilla.suse.com/1243868" }, { "category": "self", "summary": "SUSE Bug 1257923", "url": "https://bugzilla.suse.com/1257923" }, { "category": "self", "summary": "SUSE Bug 1270206", "url": "https://bugzilla.suse.com/1270206" }, { "category": "self", "summary": "SUSE Bug 1270512", "url": "https://bugzilla.suse.com/1270512" }, { "category": "self", "summary": "SUSE Bug 1270559", "url": "https://bugzilla.suse.com/1270559" }, { "category": "self", "summary": "SUSE Bug 1270693", "url": "https://bugzilla.suse.com/1270693" }, { "category": "self", "summary": "SUSE Bug 1270736", "url": "https://bugzilla.suse.com/1270736" }, { "category": "self", "summary": "SUSE Bug 1270869", "url": "https://bugzilla.suse.com/1270869" }, { "category": "self", "summary": "SUSE Bug 1270938", "url": "https://bugzilla.suse.com/1270938" }, { "category": "self", "summary": "SUSE Bug 1270948", "url": "https://bugzilla.suse.com/1270948" }, { "category": "self", "summary": "SUSE Bug 1273881", "url": "https://bugzilla.suse.com/1273881" }, { "category": "self", "summary": "SUSE Bug 1273884", "url": "https://bugzilla.suse.com/1273884" }, { "category": "self", "summary": "SUSE Bug 1273886", "url": "https://bugzilla.suse.com/1273886" }, { "category": "self", "summary": "SUSE Bug 1273888", "url": "https://bugzilla.suse.com/1273888" }, { "category": "self", "summary": "SUSE Bug 1274146", "url": "https://bugzilla.suse.com/1274146" }, { "category": "self", "summary": "SUSE Bug 1282211", "url": "https://bugzilla.suse.com/1282211" }, { "category": "self", "summary": "SUSE CVE CVE-2024-12224 page", "url": "https://www.suse.com/security/cve/CVE-2024-12224/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-25541 page", "url": "https://www.suse.com/security/cve/CVE-2026-25541/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-25727 page", "url": "https://www.suse.com/security/cve/CVE-2026-25727/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41676 page", "url": "https://www.suse.com/security/cve/CVE-2026-41676/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41677 page", "url": "https://www.suse.com/security/cve/CVE-2026-41677/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41678 page", "url": "https://www.suse.com/security/cve/CVE-2026-41678/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41681 page", "url": "https://www.suse.com/security/cve/CVE-2026-41681/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41898 page", "url": "https://www.suse.com/security/cve/CVE-2026-41898/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42327 page", "url": "https://www.suse.com/security/cve/CVE-2026-42327/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-44662 page", "url": "https://www.suse.com/security/cve/CVE-2026-44662/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-45784 page", "url": "https://www.suse.com/security/cve/CVE-2026-45784/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-66746 page", "url": "https://www.suse.com/security/cve/CVE-2026-66746/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-66754 page", "url": "https://www.suse.com/security/cve/CVE-2026-66754/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-67181 page", "url": "https://www.suse.com/security/cve/CVE-2026-67181/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-67182 page", "url": "https://www.suse.com/security/cve/CVE-2026-67182/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-93599 page", "url": "https://www.suse.com/security/cve/CVE-2026-93599/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-93600 page", "url": "https://www.suse.com/security/cve/CVE-2026-93600/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-93601 page", "url": "https://www.suse.com/security/cve/CVE-2026-93601/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-93602 page", "url": "https://www.suse.com/security/cve/CVE-2026-93602/" } ], "title": "Security update for sccache", "tracking": { "current_release_date": "2026-10-05T16:59:27Z", "generator": { "date": "2026-09-30T17:49:13Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23983-1", "initial_release_date": "2026-09-30T17:49:13Z", "revision_history": [ { "date": "2026-09-30T17:49:13Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:27Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "sccache-0:0.18.0~2-160000.1.1.aarch64", "product": { "name": "sccache-0:0.18.0~2-160000.1.1.aarch64", "product_id": "sccache-0:0.18.0~2-160000.1.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/sccache@0.18.0~2-160000.1.1?arch=aarch64&upstream=sccache-0:0.18.0~2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "sccache-0:0.18.0~2-160000.1.1.ppc64le", "product": { "name": "sccache-0:0.18.0~2-160000.1.1.ppc64le", "product_id": "sccache-0:0.18.0~2-160000.1.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/sccache@0.18.0~2-160000.1.1?arch=ppc64le&upstream=sccache-0:0.18.0~2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "sccache-0:0.18.0~2-160000.1.1.s390x", "product": { "name": "sccache-0:0.18.0~2-160000.1.1.s390x", "product_id": "sccache-0:0.18.0~2-160000.1.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/sccache@0.18.0~2-160000.1.1?arch=s390x&upstream=sccache-0:0.18.0~2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "sccache-0:0.18.0~2-160000.1.1.x86_64", "product": { "name": "sccache-0:0.18.0~2-160000.1.1.x86_64", "product_id": "sccache-0:0.18.0~2-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/sccache@0.18.0~2-160000.1.1?arch=x86_64&upstream=sccache-0:0.18.0~2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "sccache-0:0.18.0~2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" }, "product_reference": "sccache-0:0.18.0~2-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-12224", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-12224" } ], "notes": [ { "category": "general", "text": "Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-12224", "url": "https://www.suse.com/security/cve/CVE-2024-12224" }, { "category": "external", "summary": "SUSE Bug 1243848 for CVE-2024-12224", "url": "https://bugzilla.suse.com/1243848" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2024-12224" }, { "cve": "CVE-2026-25541", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-25541" } ], "notes": [ { "category": "general", "text": "Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition \"v_capacity >= new_cap + offset\" uses an unchecked addition. When new_cap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacity. Subsequent APIs such as spare_capacity_mut() then trust this corrupted cap value and may create out-of-bounds slices, leading to UB. This behavior is observable in release builds (integer overflow wraps), whereas debug builds panic due to overflow checks. This issue has been patched in version 1.11.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-25541", "url": "https://www.suse.com/security/cve/CVE-2026-25541" }, { "category": "external", "summary": "SUSE Bug 1271347 for CVE-2026-25541", "url": "https://bugzilla.suse.com/1271347" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-25541" }, { "cve": "CVE-2026-25727", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-25727" } ], "notes": [ { "category": "general", "text": "time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-25727", "url": "https://www.suse.com/security/cve/CVE-2026-25727" }, { "category": "external", "summary": "SUSE Bug 1257901 for CVE-2026-25727", "url": "https://bugzilla.suse.com/1257901" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-25727" }, { "cve": "CVE-2026-41676", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41676" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (and PkeyCtxRef::derive) sets len = buf.len() and passes it as the in/out length to EVP_PKEY_derive, relying on OpenSSL to honor it. On OpenSSL 1.1.x, X25519, X448, DH and HKDF-extract ignore the incoming *keylen, unconditionally writing the full shared secret (32/56/prime-size bytes). A caller passing a short slice gets a heap/stack overflow from safe code. OpenSSL 3.x providers do check, so this only impacts older OpenSSL. This vulnerability is fixed in 0.10.78.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41676", "url": "https://www.suse.com/security/cve/CVE-2026-41676" }, { "category": "external", "summary": "SUSE Bug 1270137 for CVE-2026-41676", "url": "https://bugzilla.suse.com/1270137" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-41676", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41676" }, { "cve": "CVE-2026-41677", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41677" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callback APIs did not validate the length returned by the user's callback. A password callback that returns a value larger than the buffer it was given can cause some versions of OpenSSL to over-read this buffer. OpenSSL 3.x is not affected by this. This vulnerability is fixed in 0.10.78.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41677", "url": "https://www.suse.com/security/cve/CVE-2026-41677" }, { "category": "external", "summary": "SUSE Bug 1270540 for CVE-2026-41677", "url": "https://bugzilla.suse.com/1270540" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-41677", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41677" }, { "cve": "CVE-2026-41678", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41678" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contains an incorrect assertion: it checks that out.len() + 8 <= in_.len(), but this condition is reversed. The intended invariant is out.len() >= in_.len() - 8, ensuring the output buffer is large enough. Because of the inverted check, the function only accepts buffers at or below the minimum required size and rejects larger ones. If a smaller buffer is provided the function will write past the end of out by in_.len() - 8 - out.len() bytes, causing an out-of-bounds write from a safe public function. This vulnerability is fixed in 0.10.78.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41678", "url": "https://www.suse.com/security/cve/CVE-2026-41678" }, { "category": "external", "summary": "SUSE Bug 1270641 for CVE-2026-41678", "url": "https://bugzilla.suse.com/1270641" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-41678", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-41678" }, { "cve": "CVE-2026-41681", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41681" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() always writes EVP_MD_CTX_size(ctx) to the out buffer. If out is smaller than that, MdCtxRef::digest_final() writes past its end, usually corrupting the stack. This is reachable from safe Rust. This vulnerability is fixed in 0.10.78.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41681", "url": "https://www.suse.com/security/cve/CVE-2026-41681" }, { "category": "external", "summary": "SUSE Bug 1270719 for CVE-2026-41681", "url": "https://bugzilla.suse.com/1270719" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-41681", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41681" }, { "cve": "CVE-2026-41898", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41898" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk_client_callback, set_psk_server_callback, set_cookie_generate_cb, and set_stateless_cookie_generate_cb forwarded the user closure's returned usize directly to OpenSSL without checking it against the &mut [u8] that was handed to the closure. This can lead to buffer overflows and other unintended consequences. This vulnerability is fixed in 0.10.78.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41898", "url": "https://www.suse.com/security/cve/CVE-2026-41898" }, { "category": "external", "summary": "SUSE Bug 1270798 for CVE-2026-41898", "url": "https://bugzilla.suse.com/1270798" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-41898", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41898" }, { "cve": "CVE-2026-42327", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42327" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::from_utf8_unchecked. OpenSSL does not enforce that the underlying IA5String is ASCII, so a certificate with non-UTF-8 bytes in its OCSP accessLocation causes safe Rust code to construct a &str that violates the UTF-8 invariant - resulting in undefined behavior. This vulnerability is fixed in 0.10.79.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42327", "url": "https://www.suse.com/security/cve/CVE-2026-42327" }, { "category": "external", "summary": "SUSE Bug 1270454 for CVE-2026-42327", "url": "https://bugzilla.suse.com/1270454" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-42327", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-42327" }, { "cve": "CVE-2026-44662", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-44662" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipher_update, CipherCtxRef::cipher_update_vec, and symm::Crypter::update incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers (EVP_aes_{128,192,256}_wrap_pad). For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced. This only impacts users using AES key-wrap-with-padding ciphers. This vulnerability is fixed in 0.10.79.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-44662", "url": "https://www.suse.com/security/cve/CVE-2026-44662" }, { "category": "external", "summary": "SUSE Bug 1270872 for CVE-2026-44662", "url": "https://bugzilla.suse.com/1270872" }, { "category": "external", "summary": "SUSE Bug 1271911 for CVE-2026-44662", "url": "https://bugzilla.suse.com/1271911" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-44662" }, { "cve": "CVE-2026-45784", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-45784" } ], "notes": [ { "category": "general", "text": "rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/src/cipher_ctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVP_aes_{128,192,256}_wrap_pad. For a non-multiple-of-8 input, OpenSSL writes up to 7 bytes past the end of the caller's buffer or Vec, producing attacker-controllable heap corruption when the plaintext length is attacker-influenced. This issue is fixed in version 0.10.80.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-45784", "url": "https://www.suse.com/security/cve/CVE-2026-45784" }, { "category": "external", "summary": "SUSE Bug 1270946 for CVE-2026-45784", "url": "https://bugzilla.suse.com/1270946" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-45784" }, { "cve": "CVE-2026-66746", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-66746" } ], "notes": [ { "category": "general", "text": "Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return (0x0D) or line feed (0x0A) bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflected into response headers or inject bare LF characters into Cookie header values that are interpolated directly into Set-Cookie response headers, enabling cache poisoning, session fixation, and security header override attacks such as bypassing CSP or CORS policies.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-66746", "url": "https://www.suse.com/security/cve/CVE-2026-66746" }, { "category": "external", "summary": "SUSE Bug 1273878 for CVE-2026-66746", "url": "https://bugzilla.suse.com/1273878" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-66746" }, { "cve": "CVE-2026-66754", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-66754" } ], "notes": [ { "category": "general", "text": "Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove_prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix while the raw percent-encoded path does not, causing the assert! to fail and triggering either a 500 error or full process termination depending on the panic configuration.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-66754", "url": "https://www.suse.com/security/cve/CVE-2026-66754" }, { "category": "external", "summary": "SUSE Bug 1273883 for CVE-2026-66754", "url": "https://bugzilla.suse.com/1273883" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-66754" }, { "cve": "CVE-2026-67181", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-67181" } ], "notes": [ { "category": "general", "text": "Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize HTTP message boundaries by exploiting improper header forwarding in the proxy implementation. The proxy in src/proxy.rs forwards the client's Transfer-Encoding header to upstream backends unchanged while transmitting a body already de-chunked by tiny_http, enabling CL.TE desynchronization attacks where attackers control where the backend believes the request body ends.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-67181", "url": "https://www.suse.com/security/cve/CVE-2026-67181" }, { "category": "external", "summary": "SUSE Bug 1273885 for CVE-2026-67181", "url": "https://bugzilla.suse.com/1273885" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-67181" }, { "cve": "CVE-2026-67182", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-67182" } ], "notes": [ { "category": "general", "text": "Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters (0x0A) into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers can craft a header value containing a complete additional HTTP request that is interpreted as a separate request by backends such as Go net/http and Python http.server, causing the backend to process a smuggled request with attacker-chosen method, path, and headers that bypasses the rouille handler's access control logic.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-67182", "url": "https://www.suse.com/security/cve/CVE-2026-67182" }, { "category": "external", "summary": "SUSE Bug 1273887 for CVE-2026-67182", "url": "https://bugzilla.suse.com/1273887" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-67182" }, { "cve": "CVE-2026-93599", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-93599" } ], "notes": [ { "category": "general", "text": "rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (zero padding bits and no data bytes), so raw_bits.len() - 1 underflows on the empty slice and the subsequent index operation panics (subtract-with-overflow in debug, index-out-of-bounds in release). The condition is reachable through the public API BorrowedCertRevocationList::from_der() when a CRL contains an issuingDistributionPoint extension with such an onlySomeReasons value. Exploitation requires an application that explicitly opts in to CRL revocation checking by passing RevocationOptions to verify_for_usage() and that parses CRL bytes obtained from a source the attacker can influence; the default rustls configuration, which does not use RevocationOptions, is unaffected. A crafted CRL causes a denial of service via the panic. Fixed in 0.103.13 and 0.104.0-alpha.7.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-93599", "url": "https://www.suse.com/security/cve/CVE-2026-93599" }, { "category": "external", "summary": "SUSE Bug 1282202 for CVE-2026-93599", "url": "https://bugzilla.suse.com/1282202" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-93599" }, { "cve": "CVE-2026-93600", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-93600" } ], "notes": [ { "category": "general", "text": "rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issued certificates, the flaw is only reachable after successful signature verification and requires a misissued certificate to exploit; the library also provides no API for asserting URI names, and URI name constraints are otherwise unimplemented. Versions 0.103.12 and 0.104.0-alpha.6 reject URI name constraints unconditionally.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-93600", "url": "https://www.suse.com/security/cve/CVE-2026-93600" }, { "category": "external", "summary": "SUSE Bug 1282202 for CVE-2026-93600", "url": "https://bugzilla.suse.com/1282202" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.2, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-93600" }, { "cve": "CVE-2026-93601", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-93601" } ], "notes": [ { "category": "general", "text": "rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a certificate for *.example.com, which could feasibly assert reject.example.com - a name outside the permitted subtree. Because name constraints are restrictions applied to otherwise properly issued certificates, the issue is only reachable after signature verification succeeds and requires a misissued wildcard certificate to exploit.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-93601", "url": "https://www.suse.com/security/cve/CVE-2026-93601" }, { "category": "external", "summary": "SUSE Bug 1282202 for CVE-2026-93601", "url": "https://bugzilla.suse.com/1282202" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-93601" }, { "cve": "CVE-2026-93602", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-93602" } ], "notes": [ { "category": "general", "text": "rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can present revoked certificates that pass revocation checks under UnknownStatusPolicy::Allow, or cause incorrect errors under the default deny policy.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-93602", "url": "https://www.suse.com/security/cve/CVE-2026-93602" }, { "category": "external", "summary": "SUSE Bug 1282202 for CVE-2026-93602", "url": "https://bugzilla.suse.com/1282202" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:sccache-0:0.18.0~2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-93602" } ] } ``` ## [suse-su-2026:23981-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23981-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for MozillaFirefox", "title": "Title of the patch" }, { "category": "description", "text": "This update for MozillaFirefox fixes the following issues:\n\nUpdate to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929):\n\n- CVE-2026-96869: Information disclosure in the Networking component.\n- CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component.\n- CVE-2026-100757: Use-after-free in the Widget component.\n- CVE-2026-100758: Sandbox escape in the DOM: Navigation component.\n- CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component.\n- CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component.\n- CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component.\n- CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component.\n- CVE-2026-100766: Information disclosure in the Networking: JAR component.\n- CVE-2026-100767: Use-after-free in the Networking: Cache component.\n- CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component.\n- CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component.\n- CVE-2026-100771: Undefined behavior in the DOM: Streams component.\n- CVE-2026-100772: Use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100773: Use-after-free in the Storage: IndexedDB component.\n- CVE-2026-100774: Use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100775: Sandbox escape in the Graphics component.\n- CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component.\n- CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component.\n- CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100779: Use-after-free in the XSLT component.\n- CVE-2026-100780: Use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.\n- CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component.\n- CVE-2026-100783: Uninitialized memory in the Audio/Video component.\n- CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component.\n- CVE-2026-100785: Use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component.\n- CVE-2026-100787: Sandbox escape in the XUL component.\n- CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component.\n- CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component.\n- CVE-2026-100790: Use-after-free in the XSLT component.\n- CVE-2026-100791: Use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component.\n- CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component.\n- CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component.\n- CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component.\n- CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component.\n- CVE-2026-100801: Privilege escalation in the DLL Services component.\n- CVE-2026-100803: Same-origin policy bypass in the WebExtensions component.\n- CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component.\n- CVE-2026-100807: Privilege escalation in the DOM: Service Workers component.\n- CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component.\n- CVE-2026-100809: Same-origin policy bypass in the DevTools component.\n- CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component.\n- CVE-2026-100812: Denial-of-service in the Graphics component.\n- CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component.\n- CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component.\n- CVE-2026-100816: Site isolation issue in the DOM: Networking component.\n- CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component.\n- CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component.\n- CVE-2026-100820: Privilege escalation in the Address Bar component.\n- CVE-2026-100821: Site isolation issue in the Panning and Zooming component.\n- CVE-2026-100822: Spoofing issue in the Networking: HTTP component.\n- CVE-2026-100824: Privilege escalation in the Places component.\n- CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component.\n- CVE-2026-100826: Denial-of-service in the Storage: StorageManager component.\n- CVE-2026-100828: Mitigation bypass in the Bookmarks & History component.\n- CVE-2026-100829: Mitigation bypass in the DOM: Security component.\n- CVE-2026-100830: Mitigation bypass in the DOM: Navigation component.\n- CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component.\n- CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1791", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23981-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23981-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623981-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23981-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623981-1/" }, { "category": "self", "summary": "SUSE Bug 1282929", "url": "https://bugzilla.suse.com/1282929" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100756 page", "url": "https://www.suse.com/security/cve/CVE-2026-100756/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100757 page", "url": "https://www.suse.com/security/cve/CVE-2026-100757/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100758 page", "url": "https://www.suse.com/security/cve/CVE-2026-100758/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100759 page", "url": "https://www.suse.com/security/cve/CVE-2026-100759/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100760 page", "url": "https://www.suse.com/security/cve/CVE-2026-100760/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100762 page", "url": "https://www.suse.com/security/cve/CVE-2026-100762/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100765 page", "url": "https://www.suse.com/security/cve/CVE-2026-100765/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100766 page", "url": "https://www.suse.com/security/cve/CVE-2026-100766/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100767 page", "url": "https://www.suse.com/security/cve/CVE-2026-100767/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100769 page", "url": "https://www.suse.com/security/cve/CVE-2026-100769/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100770 page", "url": "https://www.suse.com/security/cve/CVE-2026-100770/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100771 page", "url": "https://www.suse.com/security/cve/CVE-2026-100771/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100772 page", "url": "https://www.suse.com/security/cve/CVE-2026-100772/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100773 page", "url": "https://www.suse.com/security/cve/CVE-2026-100773/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100774 page", "url": "https://www.suse.com/security/cve/CVE-2026-100774/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100775 page", "url": "https://www.suse.com/security/cve/CVE-2026-100775/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100776 page", "url": "https://www.suse.com/security/cve/CVE-2026-100776/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100777 page", "url": "https://www.suse.com/security/cve/CVE-2026-100777/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100778 page", "url": "https://www.suse.com/security/cve/CVE-2026-100778/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100779 page", "url": "https://www.suse.com/security/cve/CVE-2026-100779/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100780 page", "url": "https://www.suse.com/security/cve/CVE-2026-100780/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100781 page", "url": "https://www.suse.com/security/cve/CVE-2026-100781/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100782 page", "url": "https://www.suse.com/security/cve/CVE-2026-100782/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100783 page", "url": "https://www.suse.com/security/cve/CVE-2026-100783/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100784 page", "url": "https://www.suse.com/security/cve/CVE-2026-100784/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100785 page", "url": "https://www.suse.com/security/cve/CVE-2026-100785/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100786 page", "url": "https://www.suse.com/security/cve/CVE-2026-100786/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100787 page", "url": "https://www.suse.com/security/cve/CVE-2026-100787/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100788 page", "url": "https://www.suse.com/security/cve/CVE-2026-100788/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100789 page", "url": "https://www.suse.com/security/cve/CVE-2026-100789/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100790 page", "url": "https://www.suse.com/security/cve/CVE-2026-100790/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100791 page", "url": "https://www.suse.com/security/cve/CVE-2026-100791/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100792 page", "url": "https://www.suse.com/security/cve/CVE-2026-100792/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100794 page", "url": "https://www.suse.com/security/cve/CVE-2026-100794/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100797 page", "url": "https://www.suse.com/security/cve/CVE-2026-100797/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100798 page", "url": "https://www.suse.com/security/cve/CVE-2026-100798/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100800 page", "url": "https://www.suse.com/security/cve/CVE-2026-100800/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100801 page", "url": "https://www.suse.com/security/cve/CVE-2026-100801/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100803 page", "url": "https://www.suse.com/security/cve/CVE-2026-100803/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100806 page", "url": "https://www.suse.com/security/cve/CVE-2026-100806/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100807 page", "url": "https://www.suse.com/security/cve/CVE-2026-100807/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100808 page", "url": "https://www.suse.com/security/cve/CVE-2026-100808/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100809 page", "url": "https://www.suse.com/security/cve/CVE-2026-100809/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100811 page", "url": "https://www.suse.com/security/cve/CVE-2026-100811/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100812 page", "url": "https://www.suse.com/security/cve/CVE-2026-100812/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100814 page", "url": "https://www.suse.com/security/cve/CVE-2026-100814/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100815 page", "url": "https://www.suse.com/security/cve/CVE-2026-100815/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100816 page", "url": "https://www.suse.com/security/cve/CVE-2026-100816/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100818 page", "url": "https://www.suse.com/security/cve/CVE-2026-100818/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100819 page", "url": "https://www.suse.com/security/cve/CVE-2026-100819/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100820 page", "url": "https://www.suse.com/security/cve/CVE-2026-100820/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100821 page", "url": "https://www.suse.com/security/cve/CVE-2026-100821/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100822 page", "url": "https://www.suse.com/security/cve/CVE-2026-100822/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100824 page", "url": "https://www.suse.com/security/cve/CVE-2026-100824/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100825 page", "url": "https://www.suse.com/security/cve/CVE-2026-100825/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100826 page", "url": "https://www.suse.com/security/cve/CVE-2026-100826/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100828 page", "url": "https://www.suse.com/security/cve/CVE-2026-100828/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100829 page", "url": "https://www.suse.com/security/cve/CVE-2026-100829/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100830 page", "url": "https://www.suse.com/security/cve/CVE-2026-100830/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100831 page", "url": "https://www.suse.com/security/cve/CVE-2026-100831/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-100832 page", "url": "https://www.suse.com/security/cve/CVE-2026-100832/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-96869 page", "url": "https://www.suse.com/security/cve/CVE-2026-96869/" } ], "title": "Security update for MozillaFirefox", "tracking": { "current_release_date": "2026-10-05T16:59:26Z", "generator": { "date": "2026-09-30T13:03:58Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23981-1", "initial_release_date": "2026-09-30T13:03:58Z", "revision_history": [ { "date": "2026-09-30T13:03:58Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:26Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "product": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "product_id": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox@153.4.0-160000.1.1?arch=aarch64&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "product": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "product_id": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-translations-common@153.4.0-160000.1.1?arch=aarch64&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "product": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "product_id": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-translations-other@153.4.0-160000.1.1?arch=aarch64&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "product": { "name": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "product_id": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-devel@153.4.0-160000.1.1?arch=noarch&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "product": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "product_id": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox@153.4.0-160000.1.1?arch=ppc64le&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "product": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "product_id": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-translations-common@153.4.0-160000.1.1?arch=ppc64le&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "product": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "product_id": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-translations-other@153.4.0-160000.1.1?arch=ppc64le&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "product": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "product_id": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox@153.4.0-160000.1.1?arch=x86_64&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "product": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "product_id": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-translations-common@153.4.0-160000.1.1?arch=x86_64&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "product": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "product_id": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:mozilla:firefox:153.4.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/MozillaFirefox-translations-other@153.4.0-160000.1.1?arch=x86_64&upstream=MozillaFirefox-0:153.4.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64" }, "product_reference": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le" }, "product_reference": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64" }, "product_reference": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch" }, "product_reference": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64" }, "product_reference": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le" }, "product_reference": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64" }, "product_reference": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64" }, "product_reference": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le" }, "product_reference": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" }, "product_reference": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64" }, "product_reference": "MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le" }, "product_reference": "MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64" }, "product_reference": "MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch" }, "product_reference": "MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64" }, "product_reference": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le" }, "product_reference": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64" }, "product_reference": "MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64" }, "product_reference": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le" }, "product_reference": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" }, "product_reference": "MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-100756", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100756" } ], "notes": [ { "category": "general", "text": "Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100756", "url": "https://www.suse.com/security/cve/CVE-2026-100756" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100756", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100756" }, { "cve": "CVE-2026-100757", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100757" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Widget component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100757", "url": "https://www.suse.com/security/cve/CVE-2026-100757" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100757", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100757" }, { "cve": "CVE-2026-100758", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100758" } ], "notes": [ { "category": "general", "text": "Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100758", "url": "https://www.suse.com/security/cve/CVE-2026-100758" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100758", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100758" }, { "cve": "CVE-2026-100759", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100759" } ], "notes": [ { "category": "general", "text": "Uninitialized memory in the Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100759", "url": "https://www.suse.com/security/cve/CVE-2026-100759" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100759", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100759" }, { "cve": "CVE-2026-100760", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100760" } ], "notes": [ { "category": "general", "text": "Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100760", "url": "https://www.suse.com/security/cve/CVE-2026-100760" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100760", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100760" }, { "cve": "CVE-2026-100762", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100762" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100762", "url": "https://www.suse.com/security/cve/CVE-2026-100762" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100762", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100762" }, { "cve": "CVE-2026-100765", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100765" } ], "notes": [ { "category": "general", "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100765", "url": "https://www.suse.com/security/cve/CVE-2026-100765" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100765", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100765" }, { "cve": "CVE-2026-100766", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100766" } ], "notes": [ { "category": "general", "text": "Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100766", "url": "https://www.suse.com/security/cve/CVE-2026-100766" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100766", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100766" }, { "cve": "CVE-2026-100767", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100767" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100767", "url": "https://www.suse.com/security/cve/CVE-2026-100767" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100767", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100767" }, { "cve": "CVE-2026-100769", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100769" } ], "notes": [ { "category": "general", "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100769", "url": "https://www.suse.com/security/cve/CVE-2026-100769" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100769", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100769" }, { "cve": "CVE-2026-100770", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100770" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100770", "url": "https://www.suse.com/security/cve/CVE-2026-100770" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100770", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100770" }, { "cve": "CVE-2026-100771", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100771" } ], "notes": [ { "category": "general", "text": "Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100771", "url": "https://www.suse.com/security/cve/CVE-2026-100771" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100771", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100771" }, { "cve": "CVE-2026-100772", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100772" } ], "notes": [ { "category": "general", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100772", "url": "https://www.suse.com/security/cve/CVE-2026-100772" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100772", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100772" }, { "cve": "CVE-2026-100773", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100773" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100773", "url": "https://www.suse.com/security/cve/CVE-2026-100773" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100773", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100773" }, { "cve": "CVE-2026-100774", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100774" } ], "notes": [ { "category": "general", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100774", "url": "https://www.suse.com/security/cve/CVE-2026-100774" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100774", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100774" }, { "cve": "CVE-2026-100775", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100775" } ], "notes": [ { "category": "general", "text": "Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100775", "url": "https://www.suse.com/security/cve/CVE-2026-100775" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100775", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100775" }, { "cve": "CVE-2026-100776", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100776" } ], "notes": [ { "category": "general", "text": "Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100776", "url": "https://www.suse.com/security/cve/CVE-2026-100776" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100776", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100776" }, { "cve": "CVE-2026-100777", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100777" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100777", "url": "https://www.suse.com/security/cve/CVE-2026-100777" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100777", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100777" }, { "cve": "CVE-2026-100778", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100778" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100778", "url": "https://www.suse.com/security/cve/CVE-2026-100778" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100778", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100778" }, { "cve": "CVE-2026-100779", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100779" } ], "notes": [ { "category": "general", "text": "Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100779", "url": "https://www.suse.com/security/cve/CVE-2026-100779" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100779", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100779" }, { "cve": "CVE-2026-100780", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100780" } ], "notes": [ { "category": "general", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100780", "url": "https://www.suse.com/security/cve/CVE-2026-100780" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100780", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100780" }, { "cve": "CVE-2026-100781", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100781" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100781", "url": "https://www.suse.com/security/cve/CVE-2026-100781" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100781", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100781" }, { "cve": "CVE-2026-100782", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100782" } ], "notes": [ { "category": "general", "text": "Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100782", "url": "https://www.suse.com/security/cve/CVE-2026-100782" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100782", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100782" }, { "cve": "CVE-2026-100783", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100783" } ], "notes": [ { "category": "general", "text": "Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100783", "url": "https://www.suse.com/security/cve/CVE-2026-100783" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100783", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100783" }, { "cve": "CVE-2026-100784", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100784" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100784", "url": "https://www.suse.com/security/cve/CVE-2026-100784" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100784", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100784" }, { "cve": "CVE-2026-100785", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100785" } ], "notes": [ { "category": "general", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100785", "url": "https://www.suse.com/security/cve/CVE-2026-100785" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100785", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100785" }, { "cve": "CVE-2026-100786", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100786" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100786", "url": "https://www.suse.com/security/cve/CVE-2026-100786" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100786", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100786" }, { "cve": "CVE-2026-100787", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100787" } ], "notes": [ { "category": "general", "text": "Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100787", "url": "https://www.suse.com/security/cve/CVE-2026-100787" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100787", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100787" }, { "cve": "CVE-2026-100788", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100788" } ], "notes": [ { "category": "general", "text": "Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100788", "url": "https://www.suse.com/security/cve/CVE-2026-100788" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100788", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100788" }, { "cve": "CVE-2026-100789", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100789" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100789", "url": "https://www.suse.com/security/cve/CVE-2026-100789" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100789", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100789" }, { "cve": "CVE-2026-100790", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100790" } ], "notes": [ { "category": "general", "text": "Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100790", "url": "https://www.suse.com/security/cve/CVE-2026-100790" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100790", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100790" }, { "cve": "CVE-2026-100791", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100791" } ], "notes": [ { "category": "general", "text": "Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100791", "url": "https://www.suse.com/security/cve/CVE-2026-100791" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100791", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100791" }, { "cve": "CVE-2026-100792", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100792" } ], "notes": [ { "category": "general", "text": "JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100792", "url": "https://www.suse.com/security/cve/CVE-2026-100792" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100792", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100792" }, { "cve": "CVE-2026-100794", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100794" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to incorrect boundary conditions in the Internationalization component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100794", "url": "https://www.suse.com/security/cve/CVE-2026-100794" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100794", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100794" }, { "cve": "CVE-2026-100797", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100797" } ], "notes": [ { "category": "general", "text": "Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100797", "url": "https://www.suse.com/security/cve/CVE-2026-100797" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100797", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100797" }, { "cve": "CVE-2026-100798", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100798" } ], "notes": [ { "category": "general", "text": "Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100798", "url": "https://www.suse.com/security/cve/CVE-2026-100798" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100798", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100798" }, { "cve": "CVE-2026-100800", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100800" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100800", "url": "https://www.suse.com/security/cve/CVE-2026-100800" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100800", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100800" }, { "cve": "CVE-2026-100801", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100801" } ], "notes": [ { "category": "general", "text": "Privilege escalation in the DLL Services component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100801", "url": "https://www.suse.com/security/cve/CVE-2026-100801" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100801", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100801" }, { "cve": "CVE-2026-100803", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100803" } ], "notes": [ { "category": "general", "text": "Same-origin policy bypass in the WebExtensions component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100803", "url": "https://www.suse.com/security/cve/CVE-2026-100803" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100803", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100803" }, { "cve": "CVE-2026-100806", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100806" } ], "notes": [ { "category": "general", "text": "Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100806", "url": "https://www.suse.com/security/cve/CVE-2026-100806" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100806", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100806" }, { "cve": "CVE-2026-100807", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100807" } ], "notes": [ { "category": "general", "text": "Privilege escalation in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100807", "url": "https://www.suse.com/security/cve/CVE-2026-100807" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100807", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100807" }, { "cve": "CVE-2026-100808", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100808" } ], "notes": [ { "category": "general", "text": "Mitigation bypass in the DOM: Service Workers component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100808", "url": "https://www.suse.com/security/cve/CVE-2026-100808" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100808", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100808" }, { "cve": "CVE-2026-100809", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100809" } ], "notes": [ { "category": "general", "text": "Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100809", "url": "https://www.suse.com/security/cve/CVE-2026-100809" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100809", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100809" }, { "cve": "CVE-2026-100811", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100811" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100811", "url": "https://www.suse.com/security/cve/CVE-2026-100811" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100811", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100811" }, { "cve": "CVE-2026-100812", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100812" } ], "notes": [ { "category": "general", "text": "Denial-of-service in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100812", "url": "https://www.suse.com/security/cve/CVE-2026-100812" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100812", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100812" }, { "cve": "CVE-2026-100814", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100814" } ], "notes": [ { "category": "general", "text": "Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100814", "url": "https://www.suse.com/security/cve/CVE-2026-100814" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100814", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100814" }, { "cve": "CVE-2026-100815", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100815" } ], "notes": [ { "category": "general", "text": "Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100815", "url": "https://www.suse.com/security/cve/CVE-2026-100815" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100815", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100815" }, { "cve": "CVE-2026-100816", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100816" } ], "notes": [ { "category": "general", "text": "Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100816", "url": "https://www.suse.com/security/cve/CVE-2026-100816" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100816", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100816" }, { "cve": "CVE-2026-100818", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100818" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100818", "url": "https://www.suse.com/security/cve/CVE-2026-100818" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100818", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100818" }, { "cve": "CVE-2026-100819", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100819" } ], "notes": [ { "category": "general", "text": "Sandbox escape due to incorrect boundary conditions in the XPCOM component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100819", "url": "https://www.suse.com/security/cve/CVE-2026-100819" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100819", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100819" }, { "cve": "CVE-2026-100820", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100820" } ], "notes": [ { "category": "general", "text": "Privilege escalation in the Address Bar component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100820", "url": "https://www.suse.com/security/cve/CVE-2026-100820" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100820", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100820" }, { "cve": "CVE-2026-100821", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100821" } ], "notes": [ { "category": "general", "text": "Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100821", "url": "https://www.suse.com/security/cve/CVE-2026-100821" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100821", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100821" }, { "cve": "CVE-2026-100822", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100822" } ], "notes": [ { "category": "general", "text": "Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100822", "url": "https://www.suse.com/security/cve/CVE-2026-100822" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100822", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100822" }, { "cve": "CVE-2026-100824", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100824" } ], "notes": [ { "category": "general", "text": "Privilege escalation in the Places component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100824", "url": "https://www.suse.com/security/cve/CVE-2026-100824" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100824", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100824" }, { "cve": "CVE-2026-100825", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100825" } ], "notes": [ { "category": "general", "text": "Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100825", "url": "https://www.suse.com/security/cve/CVE-2026-100825" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100825", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100825" }, { "cve": "CVE-2026-100826", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100826" } ], "notes": [ { "category": "general", "text": "Denial-of-service in the Storage: StorageManager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100826", "url": "https://www.suse.com/security/cve/CVE-2026-100826" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100826", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100826" }, { "cve": "CVE-2026-100828", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100828" } ], "notes": [ { "category": "general", "text": "Mitigation bypass in the Bookmarks & History component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100828", "url": "https://www.suse.com/security/cve/CVE-2026-100828" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100828", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100828" }, { "cve": "CVE-2026-100829", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100829" } ], "notes": [ { "category": "general", "text": "Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100829", "url": "https://www.suse.com/security/cve/CVE-2026-100829" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100829", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100829" }, { "cve": "CVE-2026-100830", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100830" } ], "notes": [ { "category": "general", "text": "Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100830", "url": "https://www.suse.com/security/cve/CVE-2026-100830" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100830", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100830" }, { "cve": "CVE-2026-100831", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100831" } ], "notes": [ { "category": "general", "text": "Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100831", "url": "https://www.suse.com/security/cve/CVE-2026-100831" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100831", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100831" }, { "cve": "CVE-2026-100832", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-100832" } ], "notes": [ { "category": "general", "text": "Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-100832", "url": "https://www.suse.com/security/cve/CVE-2026-100832" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-100832", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-100832" }, { "cve": "CVE-2026-96869", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-96869" } ], "notes": [ { "category": "general", "text": "Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-96869", "url": "https://www.suse.com/security/cve/CVE-2026-96869" }, { "category": "external", "summary": "SUSE Bug 1282929 for CVE-2026-96869", "url": "https://bugzilla.suse.com/1282929" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-devel-0:153.4.0-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-common-0:153.4.0-160000.1.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:MozillaFirefox-translations-other-0:153.4.0-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T13:03:58Z", "details": "critical" } ], "title": "CVE-2026-96869" } ] } ``` ## [suse-su-2026:23980-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23980-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for glib2", "title": "Title of the patch" }, { "category": "description", "text": "This update for glib2 fixes the following issue:\n\n- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1788", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23980-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23980-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623980-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23980-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623980-1/" }, { "category": "self", "summary": "SUSE Bug 1272206", "url": "https://bugzilla.suse.com/1272206" }, { "category": "self", "summary": "SUSE CVE CVE-2026-15588 page", "url": "https://www.suse.com/security/cve/CVE-2026-15588/" } ], "title": "Security update for glib2", "tracking": { "current_release_date": "2026-10-05T16:59:24Z", "generator": { "date": "2026-09-30T09:45:44Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23980-1", "initial_release_date": "2026-09-30T09:45:44Z", "revision_history": [ { "date": "2026-09-30T09:45:44Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:24Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "glib2-devel-0:2.84.4-160000.5.1.aarch64", "product": { "name": "glib2-devel-0:2.84.4-160000.5.1.aarch64", "product_id": "glib2-devel-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "product": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "product_id": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel-static@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-doc-0:2.84.4-160000.5.1.aarch64", "product": { "name": "glib2-doc-0:2.84.4-160000.5.1.aarch64", "product_id": "glib2-doc-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-doc@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "product_id": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgthread-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GIRepository-3_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLibUnix-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "glib2-lang-0:2.84.4-160000.5.1.noarch", "product": { "name": "glib2-lang-0:2.84.4-160000.5.1.noarch", "product_id": "glib2-lang-0:2.84.4-160000.5.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-lang@2.84.4-160000.5.1?arch=noarch&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "glib2-devel-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "glib2-devel-0:2.84.4-160000.5.1.ppc64le", "product_id": "glib2-devel-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "product_id": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel-static@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-doc-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "glib2-doc-0:2.84.4-160000.5.1.ppc64le", "product_id": "glib2-doc-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-doc@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "product_id": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgthread-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GIRepository-3_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLibUnix-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "glib2-devel-0:2.84.4-160000.5.1.s390x", "product": { "name": "glib2-devel-0:2.84.4-160000.5.1.s390x", "product_id": "glib2-devel-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-devel-static-0:2.84.4-160000.5.1.s390x", "product": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.s390x", "product_id": "glib2-devel-static-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel-static@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-doc-0:2.84.4-160000.5.1.s390x", "product": { "name": "glib2-doc-0:2.84.4-160000.5.1.s390x", "product_id": "glib2-doc-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-doc@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.s390x", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.s390x", "product_id": "glib2-tools-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgthread-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GIRepository-3_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLibUnix-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "glib2-devel-0:2.84.4-160000.5.1.x86_64", "product": { "name": "glib2-devel-0:2.84.4-160000.5.1.x86_64", "product_id": "glib2-devel-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "product": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "product_id": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-devel-static@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-doc-0:2.84.4-160000.5.1.x86_64", "product": { "name": "glib2-doc-0:2.84.4-160000.5.1.x86_64", "product_id": "glib2-doc-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-doc@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "product_id": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgthread-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GIRepository-3_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLibUnix-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-lang-0:2.84.4-160000.5.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch" }, "product_reference": "glib2-lang-0:2.84.4-160000.5.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-devel-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-doc-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-doc-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-lang-0:2.84.4-160000.5.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch" }, "product_reference": "glib2-lang-0:2.84.4-160000.5.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-15588", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-15588" } ], "notes": [ { "category": "general", "text": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-15588", "url": "https://www.suse.com/security/cve/CVE-2026-15588" }, { "category": "external", "summary": "SUSE Bug 1272206 for CVE-2026-15588", "url": "https://bugzilla.suse.com/1272206" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-devel-static-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-doc-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-lang-0:2.84.4-160000.5.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:libgthread-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GIRepository-3_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GLibUnix-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Enterprise Server for SAP applications 16.0:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T09:45:44Z", "details": "moderate" } ], "title": "CVE-2026-15588" } ] } ``` ## [suse-su-2026:23975-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23975-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for wget", "title": "Title of the patch" }, { "category": "description", "text": "This update for wget fixes the following issue:\n\n- CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-1802", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23975-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23975-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623975-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23975-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623975-1/" }, { "category": "self", "summary": "SUSE Bug 1276962", "url": "https://bugzilla.suse.com/1276962" }, { "category": "self", "summary": "SUSE CVE CVE-2026-16599 page", "url": "https://www.suse.com/security/cve/CVE-2026-16599/" } ], "title": "Security update for wget", "tracking": { "current_release_date": "2026-10-05T16:59:24Z", "generator": { "date": "2026-10-01T12:39:28Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23975-1", "initial_release_date": "2026-10-01T12:39:28Z", "revision_history": [ { "date": "2026-10-01T12:39:28Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:24Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.aarch64", "product": { "name": "wget-0:1.25.0-160000.4.1.aarch64", "product_id": "wget-0:1.25.0-160000.4.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=aarch64&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.ppc64le", "product": { "name": "wget-0:1.25.0-160000.4.1.ppc64le", "product_id": "wget-0:1.25.0-160000.4.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=ppc64le&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.s390x", "product": { "name": "wget-0:1.25.0-160000.4.1.s390x", "product_id": "wget-0:1.25.0-160000.4.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=s390x&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "wget-0:1.25.0-160000.4.1.x86_64", "product": { "name": "wget-0:1.25.0-160000.4.1.x86_64", "product_id": "wget-0:1.25.0-160000.4.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/wget@1.25.0-160000.4.1?arch=x86_64&upstream=wget-0:1.25.0-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sl-micro:6.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.aarch64" }, "product_reference": "wget-0:1.25.0-160000.4.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.ppc64le" }, "product_reference": "wget-0:1.25.0-160000.4.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.s390x" }, "product_reference": "wget-0:1.25.0-160000.4.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "wget-0:1.25.0-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.x86_64" }, "product_reference": "wget-0:1.25.0-160000.4.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-16599", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-16599" } ], "notes": [ { "category": "general", "text": "GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network attacker positioned to intercept FTP traffic can send a crafted OPIE challenge with a sequence number near INT_MAX, causing wget to perform up to approximately 2.1 billion MD5 computations and suspend for some time. The --timeout option does not mitigate this because it applies only to network I/O, not CPU computation.\n\n\nThis issue was fixed in commit e9697d98e7249b0f68a6be040a4f3dcc5bc101fa", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-16599", "url": "https://www.suse.com/security/cve/CVE-2026-16599" }, { "category": "external", "summary": "SUSE Bug 1276962 for CVE-2026-16599", "url": "https://bugzilla.suse.com/1276962" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.aarch64", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.ppc64le", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.s390x", "SUSE Linux Micro 6.2:wget-0:1.25.0-160000.4.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-10-01T12:39:28Z", "details": "moderate" } ], "title": "CVE-2026-16599" } ] } ``` ## [suse-su-2026:23973-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23973-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for helm", "title": "Title of the patch" }, { "category": "description", "text": "This update for helm fixes the following issues:\n\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n (bsc#1265758).\n- CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin\n (bsc#1261939).\n- CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin\n provenance verification (bsc#1261935).\n- CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart\n (bsc#1261938).\n- CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length\n headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510).\n- CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled\n configuration (bsc#1265428).\n- CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to\n exfiltrate credentials and refresh tokens (bsc#1270127).\n- CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660).\n- CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327).\n- CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997).\n- CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1281426).\n- CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426).\n- CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025).\n- CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024).\n- CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426).\n- CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass\n allows log telemetry interception and alteration (bsc#1281468).\n- CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission\n (bsc#1281469).\n- CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network\n probing (bsc#1281112).\n- gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation\n (bsc#1276514).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-1794", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23973-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23973-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23973-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623973-1/" }, { "category": "self", "summary": "SUSE Bug 1261935", "url": "https://bugzilla.suse.com/1261935" }, { "category": "self", "summary": "SUSE Bug 1261938", "url": "https://bugzilla.suse.com/1261938" }, { "category": "self", "summary": "SUSE Bug 1261939", "url": "https://bugzilla.suse.com/1261939" }, { "category": "self", "summary": "SUSE Bug 1265428", "url": "https://bugzilla.suse.com/1265428" }, { "category": "self", "summary": "SUSE Bug 1265758", "url": "https://bugzilla.suse.com/1265758" }, { "category": "self", "summary": "SUSE Bug 1270127", "url": "https://bugzilla.suse.com/1270127" }, { "category": "self", "summary": "SUSE Bug 1271660", "url": "https://bugzilla.suse.com/1271660" }, { "category": "self", "summary": "SUSE Bug 1271997", "url": "https://bugzilla.suse.com/1271997" }, { "category": "self", "summary": "SUSE Bug 1275024", "url": "https://bugzilla.suse.com/1275024" }, { "category": "self", "summary": "SUSE Bug 1275025", "url": "https://bugzilla.suse.com/1275025" }, { "category": "self", "summary": "SUSE Bug 1276327", "url": "https://bugzilla.suse.com/1276327" }, { "category": "self", "summary": "SUSE Bug 1276510", "url": "https://bugzilla.suse.com/1276510" }, { "category": "self", "summary": "SUSE Bug 1276514", "url": "https://bugzilla.suse.com/1276514" }, { "category": "self", "summary": "SUSE Bug 1281112", "url": "https://bugzilla.suse.com/1281112" }, { "category": "self", "summary": "SUSE Bug 1281426", "url": "https://bugzilla.suse.com/1281426" }, { "category": "self", "summary": "SUSE Bug 1281468", "url": "https://bugzilla.suse.com/1281468" }, { "category": "self", "summary": "SUSE Bug 1281469", "url": "https://bugzilla.suse.com/1281469" }, { "category": "self", "summary": "SUSE CVE CVE-2026-33814 page", "url": "https://www.suse.com/security/cve/CVE-2026-33814/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-35204 page", "url": "https://www.suse.com/security/cve/CVE-2026-35204/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-35205 page", "url": "https://www.suse.com/security/cve/CVE-2026-35205/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-35206 page", "url": "https://www.suse.com/security/cve/CVE-2026-35206/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41178 page", "url": "https://www.suse.com/security/cve/CVE-2026-41178/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-41888 page", "url": "https://www.suse.com/security/cve/CVE-2026-41888/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-48978 page", "url": "https://www.suse.com/security/cve/CVE-2026-48978/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-50151 page", "url": "https://www.suse.com/security/cve/CVE-2026-50151/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-50163 page", "url": "https://www.suse.com/security/cve/CVE-2026-50163/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56852 page", "url": "https://www.suse.com/security/cve/CVE-2026-56852/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56854 page", "url": "https://www.suse.com/security/cve/CVE-2026-56854/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56855 page", "url": "https://www.suse.com/security/cve/CVE-2026-56855/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56864 page", "url": "https://www.suse.com/security/cve/CVE-2026-56864/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-56865 page", "url": "https://www.suse.com/security/cve/CVE-2026-56865/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-78662 page", "url": "https://www.suse.com/security/cve/CVE-2026-78662/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-81871 page", "url": "https://www.suse.com/security/cve/CVE-2026-81871/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-81872 page", "url": "https://www.suse.com/security/cve/CVE-2026-81872/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-85732 page", "url": "https://www.suse.com/security/cve/CVE-2026-85732/" } ], "title": "Security update for helm", "tracking": { "current_release_date": "2026-10-05T16:59:23Z", "generator": { "date": "2026-09-30T17:49:13Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23973-1", "initial_release_date": "2026-09-30T17:49:13Z", "revision_history": [ { "date": "2026-09-30T17:49:13Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:23Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.aarch64", "product": { "name": "helm-0:4.3.0-160000.1.1.aarch64", "product_id": "helm-0:4.3.0-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=aarch64&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "product": { "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "product_id": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm-bash-completion@4.3.0-160000.1.1?arch=noarch&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.ppc64le", "product": { "name": "helm-0:4.3.0-160000.1.1.ppc64le", "product_id": "helm-0:4.3.0-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=ppc64le&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.s390x", "product": { "name": "helm-0:4.3.0-160000.1.1.s390x", "product_id": "helm-0:4.3.0-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=s390x&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "helm-0:4.3.0-160000.1.1.x86_64", "product": { "name": "helm-0:4.3.0-160000.1.1.x86_64", "product_id": "helm-0:4.3.0-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:helm:helm:4.3.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/helm@4.3.0-160000.1.1?arch=x86_64&upstream=helm-0:4.3.0-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sl-micro:6.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64" }, "product_reference": "helm-0:4.3.0-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le" }, "product_reference": "helm-0:4.3.0-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x" }, "product_reference": "helm-0:4.3.0-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "helm-0:4.3.0-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64" }, "product_reference": "helm-0:4.3.0-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "helm-bash-completion-0:4.3.0-160000.1.1.noarch as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" }, "product_reference": "helm-bash-completion-0:4.3.0-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-33814", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-33814" } ], "notes": [ { "category": "general", "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-33814", "url": "https://www.suse.com/security/cve/CVE-2026-33814" }, { "category": "external", "summary": "SUSE Bug 1264506 for CVE-2026-33814", "url": "https://bugzilla.suse.com/1264506" }, { "category": "external", "summary": "SUSE Bug 1268758 for CVE-2026-33814", "url": "https://bugzilla.suse.com/1268758" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-33814" }, { "cve": "CVE-2026-35204", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-35204" } ], "notes": [ { "category": "general", "text": "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, a specially crafted Helm plugin, when installed or updated, will cause Helm to write the contents of the plugin to an arbitrary filesystem location. To prevent this, validate that the plugin.yaml of the Helm plugin does not include a version: field containing POSIX dot-dot path separators ie. \"/../\". This vulnerability is fixed in 4.1.4.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-35204", "url": "https://www.suse.com/security/cve/CVE-2026-35204" }, { "category": "external", "summary": "SUSE Bug 1261939 for CVE-2026-35204", "url": "https://bugzilla.suse.com/1261939" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-35204" }, { "cve": "CVE-2026-35205", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-35205" } ], "notes": [ { "category": "general", "text": "Helm is a package manager for Charts for Kubernetes. From 4.0.0 to 4.1.3, Helm will install plugins missing provenance (.prov file) when signature verification is required. This vulnerability is fixed in 4.1.4.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-35205", "url": "https://www.suse.com/security/cve/CVE-2026-35205" }, { "category": "external", "summary": "SUSE Bug 1261934 for CVE-2026-35205", "url": "https://bugzilla.suse.com/1261934" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-35205" }, { "cve": "CVE-2026-35206", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-35206" } ], "notes": [ { "category": "general", "text": "Helm is a package manager for Charts for Kubernetes. In Helm versions <=3.20.1 and <=4.1.3, a specially crafted Chart will cause helm pull --untar [chart URL | repo/chartname] to write the Chart's contents to the immediate output directory (as defaulted to the current working directory; or as given by the --destination and --untardir flags), rather than the expected output directory suffixed by the chart's name. This vulnerability is fixed in 3.20.2 and 4.1.4.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-35206", "url": "https://www.suse.com/security/cve/CVE-2026-35206" }, { "category": "external", "summary": "SUSE Bug 1261938 for CVE-2026-35206", "url": "https://bugzilla.suse.com/1261938" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-35206" }, { "cve": "CVE-2026-41178", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41178" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Versions 1.41.0 and 1.43.0 removed raw-length rejection and it causes `Parse` to process arbitrarily large/invalid baggage headers and log errors, enabling DoS via oversized inputs. Versions 1.42.0 and 1.44.0 fix the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41178", "url": "https://www.suse.com/security/cve/CVE-2026-41178" }, { "category": "external", "summary": "SUSE Bug 1276509 for CVE-2026-41178", "url": "https://bugzilla.suse.com/1276509" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41178" }, { "cve": "CVE-2026-41888", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-41888" } ], "notes": [ { "category": "general", "text": "Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2//manifests/ endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-41888", "url": "https://www.suse.com/security/cve/CVE-2026-41888" }, { "category": "external", "summary": "SUSE Bug 1265422 for CVE-2026-41888", "url": "https://bugzilla.suse.com/1265422" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-41888" }, { "cve": "CVE-2026-48978", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-48978" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as http://169.254.169.254/, http://10.0.0.x/, and http://127.0.0.1/, or to downgrade a registry contacted over https:// to an http:// token endpoint in registry/remote/auth/client.go through Client.Do(), Client.fetchBearerToken(), fetchDistributionToken, and fetchOAuth2Token. This issue is fixed in version 2.6.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-48978", "url": "https://www.suse.com/security/cve/CVE-2026-48978" }, { "category": "external", "summary": "SUSE Bug 1270126 for CVE-2026-48978", "url": "https://bugzilla.suse.com/1270126" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-48978" }, { "cve": "CVE-2026-50151", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-50151" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the subsequent PUT request, allowing a malicious registry to return a cross-host Location and receive the caller's credentials at an attacker-controlled endpoint. This issue is fixed in version 2.6.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-50151", "url": "https://www.suse.com/security/cve/CVE-2026-50151" }, { "category": "external", "summary": "SUSE Bug 1271461 for CVE-2026-50151", "url": "https://bugzilla.suse.com/1271461" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-50151" }, { "cve": "CVE-2026-50163", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-50163" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link(\"victim.secret\", \"/payload.tar.gz/evil_cwd_link\") to resolve header.Linkname against the process current working directory for a Typeflag=TypeLink entry such as Name=payload.tar.gz/evil_cwd_link and Linkname=\"victim.secret\" with io.deis.oras.content.unpack: \"true\", which can expose or tamper with files such as .env, .git/config, .aws/credentials, and ~/.ssh/config. This issue is fixed in version 2.6.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-50163", "url": "https://www.suse.com/security/cve/CVE-2026-50163" }, { "category": "external", "summary": "SUSE Bug 1271462 for CVE-2026-50163", "url": "https://bugzilla.suse.com/1271462" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-50163" }, { "cve": "CVE-2026-56852", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56852" } ], "notes": [ { "category": "general", "text": "A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56852", "url": "https://www.suse.com/security/cve/CVE-2026-56852" }, { "category": "external", "summary": "SUSE Bug 1271661 for CVE-2026-56852", "url": "https://bugzilla.suse.com/1271661" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-56852", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-56852" }, { "cve": "CVE-2026-56854", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56854" } ], "notes": [ { "category": "general", "text": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks were not validated against the client's remote address, so a source-address restriction set by those callbacks was silently ignored. The check is now applied to the Permissions returned by any authentication callback.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56854", "url": "https://www.suse.com/security/cve/CVE-2026-56854" }, { "category": "external", "summary": "SUSE Bug 1278446 for CVE-2026-56854", "url": "https://bugzilla.suse.com/1278446" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-56854", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-56854" }, { "cve": "CVE-2026-56855", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56855" } ], "notes": [ { "category": "general", "text": "Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56855", "url": "https://www.suse.com/security/cve/CVE-2026-56855" }, { "category": "external", "summary": "SUSE Bug 1278446 for CVE-2026-56855", "url": "https://bugzilla.suse.com/1278446" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-56855", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-56855" }, { "cve": "CVE-2026-56864", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56864" } ], "notes": [ { "category": "general", "text": "A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56864", "url": "https://www.suse.com/security/cve/CVE-2026-56864" }, { "category": "external", "summary": "SUSE Bug 1275025 for CVE-2026-56864", "url": "https://bugzilla.suse.com/1275025" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-56864" }, { "cve": "CVE-2026-56865", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-56865" } ], "notes": [ { "category": "general", "text": "A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that cannot be detected by evaluating the transparency log. All tiles are now correctly verified against their parents. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ && go mod tidy", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-56865", "url": "https://www.suse.com/security/cve/CVE-2026-56865" }, { "category": "external", "summary": "SUSE Bug 1275024 for CVE-2026-56865", "url": "https://bugzilla.suse.com/1275024" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-56865" }, { "cve": "CVE-2026-78662", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-78662" } ], "notes": [ { "category": "general", "text": "Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-78662", "url": "https://www.suse.com/security/cve/CVE-2026-78662" }, { "category": "external", "summary": "SUSE Bug 1278446 for CVE-2026-78662", "url": "https://bugzilla.suse.com/1278446" }, { "category": "external", "summary": "SUSE Bug 1280553 for CVE-2026-78662", "url": "https://bugzilla.suse.com/1280553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "important" } ], "title": "CVE-2026-78662" }, { "cve": "CVE-2026-81871", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-81871" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE, OTEL_EXPORTER_OTLP_CERTIFICATE, and related client certificate environment variables through loadEnvTLS into cfg.tlsCfg, but newGRPCDialOptions does not apply cfg.tlsCfg when creating gRPC transport credentials. The environment-only TLS path instead uses credentials.NewTLS with system roots and no configured client certificate, bypassing intended private CA pinning and mutual TLS unless the application also supplies WithTLSCredentials. A network attacker able to intercept or spoof the collector connection with a system-trusted certificate can read or alter log telemetry. This issue is fixed in version 0.21.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-81871", "url": "https://www.suse.com/security/cve/CVE-2026-81871" }, { "category": "external", "summary": "SUSE Bug 1281466 for CVE-2026-81871", "url": "https://bugzilla.suse.com/1281466" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-81871" }, { "cve": "CVE-2026-81872", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-81872" } ], "notes": [ { "category": "general", "text": "OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight CPU loop when attacker-driven log emission fills its asynchronous export buffer while the exporter is backpressured. NewBatchingProcessor wraps the exporter with newBufferExporter(exporter, 1), and the poll loop calls queue.TryDequeue and bufferExporter.EnqueueExport before immediately signaling pollTrigger whenever the queue remains at or above batchSize. Because a failed nonblocking EnqueueExport leaves the queue length unchanged, the processor repeatedly retries without waiting for its ticker, exhausting CPU and degrading or denying service in the embedding process. This issue is fixed in version 0.21.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-81872", "url": "https://www.suse.com/security/cve/CVE-2026-81872" }, { "category": "external", "summary": "SUSE Bug 1281467 for CVE-2026-81872", "url": "https://bugzilla.suse.com/1281467" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-81872" }, { "cve": "CVE-2026-85732", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-85732" } ], "notes": [ { "category": "general", "text": "oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a registry-controlled Link response header without validating its scheme, host, or port. Tags, Referrers, and Repositories pagination operations then issue a GET request to the attacker-selected URL from the victim's network, allowing blind server-side request forgery against internal services. The response body is not returned to the attacker, but timing and error differences can reveal service reachability, and credentials may be attached when the credential store has an entry for the target host. Exploitation requires a victim to perform a pagination-based listing operation against a malicious registry. The maintainer identifies this report as a duplicate of GHSA-3hr5-mjrr-hfjh and states that remediation is consolidated in that earlier advisory. The consolidated issue is fixed in version 2.6.2.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-85732", "url": "https://www.suse.com/security/cve/CVE-2026-85732" }, { "category": "external", "summary": "SUSE Bug 1281108 for CVE-2026-85732", "url": "https://bugzilla.suse.com/1281108" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.aarch64", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.s390x", "SUSE Linux Micro 6.2:helm-0:4.3.0-160000.1.1.x86_64", "SUSE Linux Micro 6.2:helm-bash-completion-0:4.3.0-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T17:49:13Z", "details": "moderate" } ], "title": "CVE-2026-85732" } ] } ``` ## [suse-su-2026:23971-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23971-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for glib2", "title": "Title of the patch" }, { "category": "description", "text": "This update for glib2 fixes the following issue:\n\n- CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-1788", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23971-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23971-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623971-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23971-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623971-1/" }, { "category": "self", "summary": "SUSE Bug 1272206", "url": "https://bugzilla.suse.com/1272206" }, { "category": "self", "summary": "SUSE CVE CVE-2026-15588 page", "url": "https://www.suse.com/security/cve/CVE-2026-15588/" } ], "title": "Security update for glib2", "tracking": { "current_release_date": "2026-10-05T16:59:22Z", "generator": { "date": "2026-09-30T09:45:44Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23971-1", "initial_release_date": "2026-09-30T09:45:44Z", "revision_history": [ { "date": "2026-09-30T09:45:44Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:59:22Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "product_id": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=aarch64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "product_id": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=ppc64le&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.s390x", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.s390x", "product_id": "glib2-tools-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=s390x&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "product": { "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "product_id": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/glib2-tools@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgio-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgirepository-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libglib-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgmodule-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_id": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libgobject-2_0-0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GLib-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GModule-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-GObject-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "product": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "product_id": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:glib:2.84.4:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-Gio-2_0@2.84.4-160000.5.1?arch=x86_64&upstream=glib2-0:2.84.4-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sl-micro:6.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.s390x" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "glib2-tools-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "glib2-tools-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" }, "product_reference": "typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-15588", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-15588" } ], "notes": [ { "category": "general", "text": "A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-15588", "url": "https://www.suse.com/security/cve/CVE-2026-15588" }, { "category": "external", "summary": "SUSE Bug 1272206 for CVE-2026-15588", "url": "https://bugzilla.suse.com/1272206" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:glib2-tools-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgio-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgirepository-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libglib-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgmodule-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:libgobject-2_0-0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GLib-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GModule-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-GObject-2_0-0:2.84.4-160000.5.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-Gio-2_0-0:2.84.4-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-09-30T09:45:44Z", "details": "moderate" } ], "title": "CVE-2026-15588" } ] } ``` ## [suse-su-2026:23150-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23150-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for bouncycastle", "title": "Title of the patch" }, { "category": "description", "text": "This update for bouncycastle fixes the following issues:\n\nUpdate to 1.85.\n\nSecurity issues fixed:\n\n- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).\n- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).\n- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).\n- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).\n- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).\n- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).\n- CVE-2026-12852: MLS wire decoder allocates attacker-declared opaque length before bounds check (bsc#1272707).\n- CVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (bsc#1272708).\n- CVE-2026-13506: Lazy ASN.1 sequence forcing resets nesting-depth guard (bsc#1272709).\n- CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (bsc#1272710).\n- CVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length read (bsc#1272711).\n- CVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input (bsc#1272712).\n- CVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished names (bsc#1272713).\n- CVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verify (bsc#1272714).\n- CVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag check (bsc#1272715).\n- CVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificate (bsc#1272716).\n- CVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted file (bsc#1272717).\n- CVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (bsc#1272718).\n- CVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signers (bsc#1272719).\n- CVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key paths (bsc#1272720).\n- CVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validation (bsc#1272721).\n- CVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs present (bsc#1272722).\n- CVE-2026-59643: OpenPGP inline-signature policy failures silently ignored (bsc#1272723).\n- CVE-2026-59644: MLS hash-ratchet honours arbitrary 32-bit generation counter from sender (bsc#1272724).\n- CVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (bsc#1272725).\n- CVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit length (bsc#1272726).\n- CVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration count (bsc#1272727).\n- CVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passes (bsc#1272728).\n- CVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memory (bsc#1272729).\n- CVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer value (bsc#1272730).\n- CVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC key (bsc#1272731).\n- CVE-2026-59652: LDAP filter injection in legacy jdk1.4 LDAPStoreHelper (bsc#1272732).\n\nAdditional notes:\n\n- The standardised PQC algorithms ML-KEM, ML-DSA, SLH-DSA, FrodoKEM, and CMCE have been repackaged under\n `org.bouncycastle.crypto` and the versions under `org.bouncycastle.crypto.pqc` have been deprecated. These deprecated\n versions will be removed in BC 1.86.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1437", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23150-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23150-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623150-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23150-1", "url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049265.html" }, { "category": "self", "summary": "SUSE Bug 1272700", "url": "https://bugzilla.suse.com/1272700" }, { "category": "self", "summary": "SUSE Bug 1272701", "url": "https://bugzilla.suse.com/1272701" }, { "category": "self", "summary": "SUSE Bug 1272702", "url": "https://bugzilla.suse.com/1272702" }, { "category": "self", "summary": "SUSE Bug 1272703", "url": "https://bugzilla.suse.com/1272703" }, { "category": "self", "summary": "SUSE Bug 1272704", "url": "https://bugzilla.suse.com/1272704" }, { "category": "self", "summary": "SUSE Bug 1272705", "url": "https://bugzilla.suse.com/1272705" }, { "category": "self", "summary": "SUSE Bug 1272707", "url": "https://bugzilla.suse.com/1272707" }, { "category": "self", "summary": "SUSE Bug 1272708", "url": "https://bugzilla.suse.com/1272708" }, { "category": "self", "summary": "SUSE Bug 1272709", "url": "https://bugzilla.suse.com/1272709" }, { "category": "self", "summary": "SUSE Bug 1272710", "url": "https://bugzilla.suse.com/1272710" }, { "category": "self", "summary": "SUSE Bug 1272711", "url": "https://bugzilla.suse.com/1272711" }, { "category": "self", "summary": "SUSE Bug 1272712", "url": "https://bugzilla.suse.com/1272712" }, { "category": "self", "summary": "SUSE Bug 1272713", "url": "https://bugzilla.suse.com/1272713" }, { "category": "self", "summary": "SUSE Bug 1272714", "url": "https://bugzilla.suse.com/1272714" }, { "category": "self", "summary": "SUSE Bug 1272715", "url": "https://bugzilla.suse.com/1272715" }, { "category": "self", "summary": "SUSE Bug 1272716", "url": "https://bugzilla.suse.com/1272716" }, { "category": "self", "summary": "SUSE Bug 1272717", "url": "https://bugzilla.suse.com/1272717" }, { "category": "self", "summary": "SUSE Bug 1272718", "url": "https://bugzilla.suse.com/1272718" }, { "category": "self", "summary": "SUSE Bug 1272719", "url": "https://bugzilla.suse.com/1272719" }, { "category": "self", "summary": "SUSE Bug 1272720", "url": "https://bugzilla.suse.com/1272720" }, { "category": "self", "summary": "SUSE Bug 1272721", "url": "https://bugzilla.suse.com/1272721" }, { "category": "self", "summary": "SUSE Bug 1272722", "url": "https://bugzilla.suse.com/1272722" }, { "category": "self", "summary": "SUSE Bug 1272723", "url": "https://bugzilla.suse.com/1272723" }, { "category": "self", "summary": "SUSE Bug 1272724", "url": "https://bugzilla.suse.com/1272724" }, { "category": "self", "summary": "SUSE Bug 1272725", "url": "https://bugzilla.suse.com/1272725" }, { "category": "self", "summary": "SUSE Bug 1272726", "url": "https://bugzilla.suse.com/1272726" }, { "category": "self", "summary": "SUSE Bug 1272727", "url": "https://bugzilla.suse.com/1272727" }, { "category": "self", "summary": "SUSE Bug 1272728", "url": "https://bugzilla.suse.com/1272728" }, { "category": "self", "summary": "SUSE Bug 1272729", "url": "https://bugzilla.suse.com/1272729" }, { "category": "self", "summary": "SUSE Bug 1272730", "url": "https://bugzilla.suse.com/1272730" }, { "category": "self", "summary": "SUSE Bug 1272731", "url": "https://bugzilla.suse.com/1272731" }, { "category": "self", "summary": "SUSE Bug 1272732", "url": "https://bugzilla.suse.com/1272732" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12185 page", "url": "https://www.suse.com/security/cve/CVE-2026-12185/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12802 page", "url": "https://www.suse.com/security/cve/CVE-2026-12802/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12803 page", "url": "https://www.suse.com/security/cve/CVE-2026-12803/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12816 page", "url": "https://www.suse.com/security/cve/CVE-2026-12816/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12817 page", "url": "https://www.suse.com/security/cve/CVE-2026-12817/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12852 page", "url": "https://www.suse.com/security/cve/CVE-2026-12852/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12860 page", "url": "https://www.suse.com/security/cve/CVE-2026-12860/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-13506 page", "url": "https://www.suse.com/security/cve/CVE-2026-13506/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-13586 page", "url": "https://www.suse.com/security/cve/CVE-2026-13586/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-14682 page", "url": "https://www.suse.com/security/cve/CVE-2026-14682/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-15055 page", "url": "https://www.suse.com/security/cve/CVE-2026-15055/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58059 page", "url": "https://www.suse.com/security/cve/CVE-2026-58059/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58060 page", "url": "https://www.suse.com/security/cve/CVE-2026-58060/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58061 page", "url": "https://www.suse.com/security/cve/CVE-2026-58061/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58062 page", "url": "https://www.suse.com/security/cve/CVE-2026-58062/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58063 page", "url": "https://www.suse.com/security/cve/CVE-2026-58063/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59638 page", "url": "https://www.suse.com/security/cve/CVE-2026-59638/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59639 page", "url": "https://www.suse.com/security/cve/CVE-2026-59639/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59640 page", "url": "https://www.suse.com/security/cve/CVE-2026-59640/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59641 page", "url": "https://www.suse.com/security/cve/CVE-2026-59641/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59642 page", "url": "https://www.suse.com/security/cve/CVE-2026-59642/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59643 page", "url": "https://www.suse.com/security/cve/CVE-2026-59643/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59644 page", "url": "https://www.suse.com/security/cve/CVE-2026-59644/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59645 page", "url": "https://www.suse.com/security/cve/CVE-2026-59645/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59646 page", "url": "https://www.suse.com/security/cve/CVE-2026-59646/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59647 page", "url": "https://www.suse.com/security/cve/CVE-2026-59647/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59648 page", "url": "https://www.suse.com/security/cve/CVE-2026-59648/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59649 page", "url": "https://www.suse.com/security/cve/CVE-2026-59649/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59650 page", "url": "https://www.suse.com/security/cve/CVE-2026-59650/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59651 page", "url": "https://www.suse.com/security/cve/CVE-2026-59651/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59652 page", "url": "https://www.suse.com/security/cve/CVE-2026-59652/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-8763 page", "url": "https://www.suse.com/security/cve/CVE-2026-8763/" } ], "title": "Security update for bouncycastle", "tracking": { "current_release_date": "2026-10-05T16:59:06Z", "generator": { "date": "2026-08-06T07:40:53Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23150-1", "initial_release_date": "2026-08-06T07:40:53Z", "revision_history": [ { "date": "2026-08-06T07:40:53Z", "number": "1", "summary": "Current version" }, { "date": "2026-09-16T19:24:08Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-16T20:12:02Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-17T16:11:53Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-10-02T17:46:51Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-10-05T16:59:06Z", "number": "6", "summary": "unknown changes" } ], "status": "final", "version": "6" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "bouncycastle-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-javadoc@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-jmail@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-mail@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-pg@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-pkix@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-tls@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-util-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-util-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-util-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-util@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-util-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-util-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-util-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-util-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-12185", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12185" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12185", "url": "https://www.suse.com/security/cve/CVE-2026-12185" }, { "category": "external", "summary": "SUSE Bug 1272701 for CVE-2026-12185", "url": "https://bugzilla.suse.com/1272701" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-12185" }, { "cve": "CVE-2026-12802", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12802" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12802", "url": "https://www.suse.com/security/cve/CVE-2026-12802" }, { "category": "external", "summary": "SUSE Bug 1272702 for CVE-2026-12802", "url": "https://bugzilla.suse.com/1272702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12802" }, { "cve": "CVE-2026-12803", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12803" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12803", "url": "https://www.suse.com/security/cve/CVE-2026-12803" }, { "category": "external", "summary": "SUSE Bug 1272703 for CVE-2026-12803", "url": "https://bugzilla.suse.com/1272703" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12803" }, { "cve": "CVE-2026-12816", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12816" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12816", "url": "https://www.suse.com/security/cve/CVE-2026-12816" }, { "category": "external", "summary": "SUSE Bug 1272704 for CVE-2026-12816", "url": "https://bugzilla.suse.com/1272704" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12816" }, { "cve": "CVE-2026-12817", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12817" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12817", "url": "https://www.suse.com/security/cve/CVE-2026-12817" }, { "category": "external", "summary": "SUSE Bug 1272705 for CVE-2026-12817", "url": "https://bugzilla.suse.com/1272705" }, { "category": "external", "summary": "SUSE Bug 1284222 for CVE-2026-12817", "url": "https://bugzilla.suse.com/1284222" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12817" }, { "cve": "CVE-2026-12852", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12852" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12852", "url": "https://www.suse.com/security/cve/CVE-2026-12852" }, { "category": "external", "summary": "SUSE Bug 1272707 for CVE-2026-12852", "url": "https://bugzilla.suse.com/1272707" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12852" }, { "cve": "CVE-2026-12860", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12860" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12860", "url": "https://www.suse.com/security/cve/CVE-2026-12860" }, { "category": "external", "summary": "SUSE Bug 1272708 for CVE-2026-12860", "url": "https://bugzilla.suse.com/1272708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12860" }, { "cve": "CVE-2026-13506", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-13506" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-13506", "url": "https://www.suse.com/security/cve/CVE-2026-13506" }, { "category": "external", "summary": "SUSE Bug 1272709 for CVE-2026-13506", "url": "https://bugzilla.suse.com/1272709" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-13506" }, { "cve": "CVE-2026-13586", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-13586" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-13586", "url": "https://www.suse.com/security/cve/CVE-2026-13586" }, { "category": "external", "summary": "SUSE Bug 1272710 for CVE-2026-13586", "url": "https://bugzilla.suse.com/1272710" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-13586" }, { "cve": "CVE-2026-14682", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-14682" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-14682", "url": "https://www.suse.com/security/cve/CVE-2026-14682" }, { "category": "external", "summary": "SUSE Bug 1272711 for CVE-2026-14682", "url": "https://bugzilla.suse.com/1272711" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-14682" }, { "cve": "CVE-2026-15055", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-15055" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-15055", "url": "https://www.suse.com/security/cve/CVE-2026-15055" }, { "category": "external", "summary": "SUSE Bug 1272712 for CVE-2026-15055", "url": "https://bugzilla.suse.com/1272712" }, { "category": "external", "summary": "SUSE Bug 1284073 for CVE-2026-15055", "url": "https://bugzilla.suse.com/1284073" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-15055" }, { "cve": "CVE-2026-58059", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58059" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58059", "url": "https://www.suse.com/security/cve/CVE-2026-58059" }, { "category": "external", "summary": "SUSE Bug 1272713 for CVE-2026-58059", "url": "https://bugzilla.suse.com/1272713" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-58059" }, { "cve": "CVE-2026-58060", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58060" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58060", "url": "https://www.suse.com/security/cve/CVE-2026-58060" }, { "category": "external", "summary": "SUSE Bug 1272714 for CVE-2026-58060", "url": "https://bugzilla.suse.com/1272714" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-58060" }, { "cve": "CVE-2026-58061", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58061" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58061", "url": "https://www.suse.com/security/cve/CVE-2026-58061" }, { "category": "external", "summary": "SUSE Bug 1272715 for CVE-2026-58061", "url": "https://bugzilla.suse.com/1272715" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-58061" }, { "cve": "CVE-2026-58062", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58062" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58062", "url": "https://www.suse.com/security/cve/CVE-2026-58062" }, { "category": "external", "summary": "SUSE Bug 1272716 for CVE-2026-58062", "url": "https://bugzilla.suse.com/1272716" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-58062" }, { "cve": "CVE-2026-58063", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58063" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58063", "url": "https://www.suse.com/security/cve/CVE-2026-58063" }, { "category": "external", "summary": "SUSE Bug 1272717 for CVE-2026-58063", "url": "https://bugzilla.suse.com/1272717" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-58063" }, { "cve": "CVE-2026-59638", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59638" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59638", "url": "https://www.suse.com/security/cve/CVE-2026-59638" }, { "category": "external", "summary": "SUSE Bug 1272718 for CVE-2026-59638", "url": "https://bugzilla.suse.com/1272718" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-59638" }, { "cve": "CVE-2026-59639", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59639" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59639", "url": "https://www.suse.com/security/cve/CVE-2026-59639" }, { "category": "external", "summary": "SUSE Bug 1272719 for CVE-2026-59639", "url": "https://bugzilla.suse.com/1272719" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59639" }, { "cve": "CVE-2026-59640", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59640" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59640", "url": "https://www.suse.com/security/cve/CVE-2026-59640" }, { "category": "external", "summary": "SUSE Bug 1272720 for CVE-2026-59640", "url": "https://bugzilla.suse.com/1272720" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59640" }, { "cve": "CVE-2026-59641", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59641" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.X series), 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59641", "url": "https://www.suse.com/security/cve/CVE-2026-59641" }, { "category": "external", "summary": "SUSE Bug 1272721 for CVE-2026-59641", "url": "https://bugzilla.suse.com/1272721" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59641" }, { "cve": "CVE-2026-59642", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59642" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59642", "url": "https://www.suse.com/security/cve/CVE-2026-59642" }, { "category": "external", "summary": "SUSE Bug 1272722 for CVE-2026-59642", "url": "https://bugzilla.suse.com/1272722" }, { "category": "external", "summary": "SUSE Bug 1284215 for CVE-2026-59642", "url": "https://bugzilla.suse.com/1284215" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59642" }, { "cve": "CVE-2026-59643", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59643" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59643", "url": "https://www.suse.com/security/cve/CVE-2026-59643" }, { "category": "external", "summary": "SUSE Bug 1272723 for CVE-2026-59643", "url": "https://bugzilla.suse.com/1272723" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59643" }, { "cve": "CVE-2026-59644", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59644" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59644", "url": "https://www.suse.com/security/cve/CVE-2026-59644" }, { "category": "external", "summary": "SUSE Bug 1272724 for CVE-2026-59644", "url": "https://bugzilla.suse.com/1272724" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59644" }, { "cve": "CVE-2026-59645", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59645" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59645", "url": "https://www.suse.com/security/cve/CVE-2026-59645" }, { "category": "external", "summary": "SUSE Bug 1272725 for CVE-2026-59645", "url": "https://bugzilla.suse.com/1272725" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59645" }, { "cve": "CVE-2026-59646", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59646" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59646", "url": "https://www.suse.com/security/cve/CVE-2026-59646" }, { "category": "external", "summary": "SUSE Bug 1272726 for CVE-2026-59646", "url": "https://bugzilla.suse.com/1272726" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59646" }, { "cve": "CVE-2026-59647", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59647" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59647", "url": "https://www.suse.com/security/cve/CVE-2026-59647" }, { "category": "external", "summary": "SUSE Bug 1272727 for CVE-2026-59647", "url": "https://bugzilla.suse.com/1272727" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59647" }, { "cve": "CVE-2026-59648", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59648" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59648", "url": "https://www.suse.com/security/cve/CVE-2026-59648" }, { "category": "external", "summary": "SUSE Bug 1272728 for CVE-2026-59648", "url": "https://bugzilla.suse.com/1272728" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59648" }, { "cve": "CVE-2026-59649", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59649" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59649", "url": "https://www.suse.com/security/cve/CVE-2026-59649" }, { "category": "external", "summary": "SUSE Bug 1272729 for CVE-2026-59649", "url": "https://bugzilla.suse.com/1272729" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59649" }, { "cve": "CVE-2026-59650", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59650" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59650", "url": "https://www.suse.com/security/cve/CVE-2026-59650" }, { "category": "external", "summary": "SUSE Bug 1272730 for CVE-2026-59650", "url": "https://bugzilla.suse.com/1272730" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-59650" }, { "cve": "CVE-2026-59651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59651" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59651", "url": "https://www.suse.com/security/cve/CVE-2026-59651" }, { "category": "external", "summary": "SUSE Bug 1272731 for CVE-2026-59651", "url": "https://bugzilla.suse.com/1272731" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59651" }, { "cve": "CVE-2026-59652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59652" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59652", "url": "https://www.suse.com/security/cve/CVE-2026-59652" }, { "category": "external", "summary": "SUSE Bug 1272732 for CVE-2026-59652", "url": "https://bugzilla.suse.com/1272732" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59652" }, { "cve": "CVE-2026-8763", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-8763" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-8763", "url": "https://www.suse.com/security/cve/CVE-2026-8763" }, { "category": "external", "summary": "SUSE Bug 1272700 for CVE-2026-8763", "url": "https://bugzilla.suse.com/1272700" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-8763" } ] } ``` ## [suse-su-2026:23127-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A23127-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for bouncycastle", "title": "Title of the patch" }, { "category": "description", "text": "This update for bouncycastle fixes the following issues:\n\nUpdate to 1.85.\n\nSecurity issues fixed:\n\n- CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI (bsc#1272700).\n- CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check (bsc#1272701).\n- CVE-2026-12802: CMS AuthEnvelopedData fails to enforce tag-length on decryption (bsc#1272702).\n- CVE-2026-12803: KCCMBlockCipher MAC does not bind nonce when AAD is absent (bsc#1272703).\n- CVE-2026-12816: IESEngine stream-mode MAC forgery via length-dependent KDF split (bsc#1272704).\n- CVE-2026-12817: OpenPGP AEAD decryption skips final tag on chunk-aligned data (bsc#1272705).\n- CVE-2026-12852: MLS wire decoder allocates attacker-declared opaque length before bounds check (bsc#1272707).\n- CVE-2026-12860: RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path (bsc#1272708).\n- CVE-2026-13506: Lazy ASN.1 sequence forcing resets nesting-depth guard (bsc#1272709).\n- CVE-2026-13586: PKCS#12 MAC and bag-decryption KDF iteration-count bound (bsc#1272710).\n- CVE-2026-14682: Possible OOM from unbounded up-front allocation on a definite-length read (bsc#1272711).\n- CVE-2026-15055: PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input (bsc#1272712).\n- CVE-2026-58059: Quadratic-time escaping when stringifying X.500 distinguished names (bsc#1272713).\n- CVE-2026-58060: HSS public-key level count unbounded, enabling huge allocation on verify (bsc#1272714).\n- CVE-2026-58061: CCM-family modes write plaintext to caller buffer before tag check (bsc#1272715).\n- CVE-2026-58062: Stapled OCSP response accepted without binding to the checked certificate (bsc#1272716).\n- CVE-2026-58063: BCFKS keystore load honours unbounded KDF cost from untrusted file (bsc#1272717).\n- CVE-2026-59638: JSSE hostname verifier CN-fallback enabled by default despite documented opt-in (bsc#1272718).\n- CVE-2026-59639: CMS verifySignatures returns true for SignedData with zero signers (bsc#1272719).\n- CVE-2026-59640: OpenPGP CFB quick-check oracle active on symmetric/session-key paths (bsc#1272720).\n- CVE-2026-59641: S/MIME validator trusts signer-asserted signingTime for path validation (bsc#1272721).\n- CVE-2026-59642: CMS AuthenticatedData content not bound to MAC when authAttrs present (bsc#1272722).\n- CVE-2026-59643: OpenPGP inline-signature policy failures silently ignored (bsc#1272723).\n- CVE-2026-59644: MLS hash-ratchet honours arbitrary 32-bit generation counter from sender (bsc#1272724).\n- CVE-2026-59645: OER parser recurses without depth limit on self-referential IEEE 1609.2 schema (bsc#1272725).\n- CVE-2026-59646: DTLS handshake reassembler allocates buffer from unchecked 24-bit length (bsc#1272726).\n- CVE-2026-59647: CRMF/CMP password-MAC honours unbounded iteration count (bsc#1272727).\n- CVE-2026-59648: OpenPGP Argon2 S2K honours attacker-chosen memory and passes (bsc#1272728).\n- CVE-2026-59649: OpenPGP user-attribute subpacket length bounded only by JVM max memory (bsc#1272729).\n- CVE-2026-59650: MTI/A0 DH agreement exponentiates unvalidated peer value (bsc#1272730).\n- CVE-2026-59651: BKS keystore accepts legacy version with 16-bit integrity MAC key (bsc#1272731).\n- CVE-2026-59652: LDAP filter injection in legacy jdk1.4 LDAPStoreHelper (bsc#1272732).\n\nAdditional notes:\n\n- The standardised PQC algorithms ML-KEM, ML-DSA, SLH-DSA, FrodoKEM, and CMCE have been repackaged under\n `org.bouncycastle.crypto` and the versions under `org.bouncycastle.crypto.pqc` have been deprecated. These deprecated\n versions will be removed in BC 1.86.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SLES-16.0-1437", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23127-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:23127-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623127-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:23127-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028319.html" }, { "category": "self", "summary": "SUSE Bug 1272700", "url": "https://bugzilla.suse.com/1272700" }, { "category": "self", "summary": "SUSE Bug 1272701", "url": "https://bugzilla.suse.com/1272701" }, { "category": "self", "summary": "SUSE Bug 1272702", "url": "https://bugzilla.suse.com/1272702" }, { "category": "self", "summary": "SUSE Bug 1272703", "url": "https://bugzilla.suse.com/1272703" }, { "category": "self", "summary": "SUSE Bug 1272704", "url": "https://bugzilla.suse.com/1272704" }, { "category": "self", "summary": "SUSE Bug 1272705", "url": "https://bugzilla.suse.com/1272705" }, { "category": "self", "summary": "SUSE Bug 1272707", "url": "https://bugzilla.suse.com/1272707" }, { "category": "self", "summary": "SUSE Bug 1272708", "url": "https://bugzilla.suse.com/1272708" }, { "category": "self", "summary": "SUSE Bug 1272709", "url": "https://bugzilla.suse.com/1272709" }, { "category": "self", "summary": "SUSE Bug 1272710", "url": "https://bugzilla.suse.com/1272710" }, { "category": "self", "summary": "SUSE Bug 1272711", "url": "https://bugzilla.suse.com/1272711" }, { "category": "self", "summary": "SUSE Bug 1272712", "url": "https://bugzilla.suse.com/1272712" }, { "category": "self", "summary": "SUSE Bug 1272713", "url": "https://bugzilla.suse.com/1272713" }, { "category": "self", "summary": "SUSE Bug 1272714", "url": "https://bugzilla.suse.com/1272714" }, { "category": "self", "summary": "SUSE Bug 1272715", "url": "https://bugzilla.suse.com/1272715" }, { "category": "self", "summary": "SUSE Bug 1272716", "url": "https://bugzilla.suse.com/1272716" }, { "category": "self", "summary": "SUSE Bug 1272717", "url": "https://bugzilla.suse.com/1272717" }, { "category": "self", "summary": "SUSE Bug 1272718", "url": "https://bugzilla.suse.com/1272718" }, { "category": "self", "summary": "SUSE Bug 1272719", "url": "https://bugzilla.suse.com/1272719" }, { "category": "self", "summary": "SUSE Bug 1272720", "url": "https://bugzilla.suse.com/1272720" }, { "category": "self", "summary": "SUSE Bug 1272721", "url": "https://bugzilla.suse.com/1272721" }, { "category": "self", "summary": "SUSE Bug 1272722", "url": "https://bugzilla.suse.com/1272722" }, { "category": "self", "summary": "SUSE Bug 1272723", "url": "https://bugzilla.suse.com/1272723" }, { "category": "self", "summary": "SUSE Bug 1272724", "url": "https://bugzilla.suse.com/1272724" }, { "category": "self", "summary": "SUSE Bug 1272725", "url": "https://bugzilla.suse.com/1272725" }, { "category": "self", "summary": "SUSE Bug 1272726", "url": "https://bugzilla.suse.com/1272726" }, { "category": "self", "summary": "SUSE Bug 1272727", "url": "https://bugzilla.suse.com/1272727" }, { "category": "self", "summary": "SUSE Bug 1272728", "url": "https://bugzilla.suse.com/1272728" }, { "category": "self", "summary": "SUSE Bug 1272729", "url": "https://bugzilla.suse.com/1272729" }, { "category": "self", "summary": "SUSE Bug 1272730", "url": "https://bugzilla.suse.com/1272730" }, { "category": "self", "summary": "SUSE Bug 1272731", "url": "https://bugzilla.suse.com/1272731" }, { "category": "self", "summary": "SUSE Bug 1272732", "url": "https://bugzilla.suse.com/1272732" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12185 page", "url": "https://www.suse.com/security/cve/CVE-2026-12185/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12802 page", "url": "https://www.suse.com/security/cve/CVE-2026-12802/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12803 page", "url": "https://www.suse.com/security/cve/CVE-2026-12803/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12816 page", "url": "https://www.suse.com/security/cve/CVE-2026-12816/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12817 page", "url": "https://www.suse.com/security/cve/CVE-2026-12817/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12852 page", "url": "https://www.suse.com/security/cve/CVE-2026-12852/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-12860 page", "url": "https://www.suse.com/security/cve/CVE-2026-12860/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-13506 page", "url": "https://www.suse.com/security/cve/CVE-2026-13506/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-13586 page", "url": "https://www.suse.com/security/cve/CVE-2026-13586/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-14682 page", "url": "https://www.suse.com/security/cve/CVE-2026-14682/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-15055 page", "url": "https://www.suse.com/security/cve/CVE-2026-15055/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58059 page", "url": "https://www.suse.com/security/cve/CVE-2026-58059/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58060 page", "url": "https://www.suse.com/security/cve/CVE-2026-58060/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58061 page", "url": "https://www.suse.com/security/cve/CVE-2026-58061/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58062 page", "url": "https://www.suse.com/security/cve/CVE-2026-58062/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-58063 page", "url": "https://www.suse.com/security/cve/CVE-2026-58063/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59638 page", "url": "https://www.suse.com/security/cve/CVE-2026-59638/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59639 page", "url": "https://www.suse.com/security/cve/CVE-2026-59639/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59640 page", "url": "https://www.suse.com/security/cve/CVE-2026-59640/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59641 page", "url": "https://www.suse.com/security/cve/CVE-2026-59641/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59642 page", "url": "https://www.suse.com/security/cve/CVE-2026-59642/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59643 page", "url": "https://www.suse.com/security/cve/CVE-2026-59643/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59644 page", "url": "https://www.suse.com/security/cve/CVE-2026-59644/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59645 page", "url": "https://www.suse.com/security/cve/CVE-2026-59645/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59646 page", "url": "https://www.suse.com/security/cve/CVE-2026-59646/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59647 page", "url": "https://www.suse.com/security/cve/CVE-2026-59647/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59648 page", "url": "https://www.suse.com/security/cve/CVE-2026-59648/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59649 page", "url": "https://www.suse.com/security/cve/CVE-2026-59649/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59650 page", "url": "https://www.suse.com/security/cve/CVE-2026-59650/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59651 page", "url": "https://www.suse.com/security/cve/CVE-2026-59651/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-59652 page", "url": "https://www.suse.com/security/cve/CVE-2026-59652/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-8763 page", "url": "https://www.suse.com/security/cve/CVE-2026-8763/" } ], "title": "Security update for bouncycastle", "tracking": { "current_release_date": "2026-10-05T16:59:05Z", "generator": { "date": "2026-08-06T07:40:53Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:23127-1", "initial_release_date": "2026-08-06T07:40:53Z", "revision_history": [ { "date": "2026-08-06T07:40:53Z", "number": "1", "summary": "Current version" }, { "date": "2026-09-16T19:23:50Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-16T20:11:42Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-17T16:11:31Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-10-02T17:46:50Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-10-05T16:59:05Z", "number": "6", "summary": "unknown changes" } ], "status": "final", "version": "6" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "bouncycastle-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-javadoc@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-jmail@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-mail@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-pg@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-pkix@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-tls@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "bouncycastle-util-0:1.85-160000.1.1.noarch", "product": { "name": "bouncycastle-util-0:1.85-160000.1.1.noarch", "product_id": "bouncycastle-util-0:1.85-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.85:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/bouncycastle-util@1.85-160000.1.1?arch=noarch&upstream=bouncycastle-0:1.85-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Server 16.0", "product": { "name": "SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product": { "name": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:server-sap" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-util-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0", "product_id": "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-util-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-jmail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-jmail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-mail-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-mail-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pg-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pg-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-pkix-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-pkix-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-tls-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-tls-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" }, { "category": "default_component_of", "full_product_name": { "name": "bouncycastle-util-0:1.85-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0", "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" }, "product_reference": "bouncycastle-util-0:1.85-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-12185", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12185" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12185", "url": "https://www.suse.com/security/cve/CVE-2026-12185" }, { "category": "external", "summary": "SUSE Bug 1272701 for CVE-2026-12185", "url": "https://bugzilla.suse.com/1272701" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-12185" }, { "cve": "CVE-2026-12802", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12802" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12802", "url": "https://www.suse.com/security/cve/CVE-2026-12802" }, { "category": "external", "summary": "SUSE Bug 1272702 for CVE-2026-12802", "url": "https://bugzilla.suse.com/1272702" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12802" }, { "cve": "CVE-2026-12803", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12803" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12803", "url": "https://www.suse.com/security/cve/CVE-2026-12803" }, { "category": "external", "summary": "SUSE Bug 1272703 for CVE-2026-12803", "url": "https://bugzilla.suse.com/1272703" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12803" }, { "cve": "CVE-2026-12816", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12816" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12816", "url": "https://www.suse.com/security/cve/CVE-2026-12816" }, { "category": "external", "summary": "SUSE Bug 1272704 for CVE-2026-12816", "url": "https://bugzilla.suse.com/1272704" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12816" }, { "cve": "CVE-2026-12817", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12817" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12817", "url": "https://www.suse.com/security/cve/CVE-2026-12817" }, { "category": "external", "summary": "SUSE Bug 1272705 for CVE-2026-12817", "url": "https://bugzilla.suse.com/1272705" }, { "category": "external", "summary": "SUSE Bug 1284222 for CVE-2026-12817", "url": "https://bugzilla.suse.com/1284222" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12817" }, { "cve": "CVE-2026-12852", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12852" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12852", "url": "https://www.suse.com/security/cve/CVE-2026-12852" }, { "category": "external", "summary": "SUSE Bug 1272707 for CVE-2026-12852", "url": "https://bugzilla.suse.com/1272707" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12852" }, { "cve": "CVE-2026-12860", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-12860" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-12860", "url": "https://www.suse.com/security/cve/CVE-2026-12860" }, { "category": "external", "summary": "SUSE Bug 1272708 for CVE-2026-12860", "url": "https://bugzilla.suse.com/1272708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-12860" }, { "cve": "CVE-2026-13506", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-13506" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-13506", "url": "https://www.suse.com/security/cve/CVE-2026-13506" }, { "category": "external", "summary": "SUSE Bug 1272709 for CVE-2026-13506", "url": "https://bugzilla.suse.com/1272709" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-13506" }, { "cve": "CVE-2026-13586", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-13586" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-13586", "url": "https://www.suse.com/security/cve/CVE-2026-13586" }, { "category": "external", "summary": "SUSE Bug 1272710 for CVE-2026-13586", "url": "https://bugzilla.suse.com/1272710" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-13586" }, { "cve": "CVE-2026-14682", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-14682" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), and before bctls-fips 1.0.24.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-14682", "url": "https://www.suse.com/security/cve/CVE-2026-14682" }, { "category": "external", "summary": "SUSE Bug 1272711 for CVE-2026-14682", "url": "https://bugzilla.suse.com/1272711" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-14682" }, { "cve": "CVE-2026-15055", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-15055" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-15055", "url": "https://www.suse.com/security/cve/CVE-2026-15055" }, { "category": "external", "summary": "SUSE Bug 1272712 for CVE-2026-15055", "url": "https://bugzilla.suse.com/1272712" }, { "category": "external", "summary": "SUSE Bug 1284073 for CVE-2026-15055", "url": "https://bugzilla.suse.com/1284073" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-15055" }, { "cve": "CVE-2026-58059", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58059" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58059", "url": "https://www.suse.com/security/cve/CVE-2026-58059" }, { "category": "external", "summary": "SUSE Bug 1272713 for CVE-2026-58059", "url": "https://bugzilla.suse.com/1272713" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-58059" }, { "cve": "CVE-2026-58060", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58060" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58060", "url": "https://www.suse.com/security/cve/CVE-2026-58060" }, { "category": "external", "summary": "SUSE Bug 1272714 for CVE-2026-58060", "url": "https://bugzilla.suse.com/1272714" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-58060" }, { "cve": "CVE-2026-58061", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58061" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58061", "url": "https://www.suse.com/security/cve/CVE-2026-58061" }, { "category": "external", "summary": "SUSE Bug 1272715 for CVE-2026-58061", "url": "https://bugzilla.suse.com/1272715" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-58061" }, { "cve": "CVE-2026-58062", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58062" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58062", "url": "https://www.suse.com/security/cve/CVE-2026-58062" }, { "category": "external", "summary": "SUSE Bug 1272716 for CVE-2026-58062", "url": "https://bugzilla.suse.com/1272716" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-58062" }, { "cve": "CVE-2026-58063", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-58063" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-58063", "url": "https://www.suse.com/security/cve/CVE-2026-58063" }, { "category": "external", "summary": "SUSE Bug 1272717 for CVE-2026-58063", "url": "https://bugzilla.suse.com/1272717" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-58063" }, { "cve": "CVE-2026-59638", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59638" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59638", "url": "https://www.suse.com/security/cve/CVE-2026-59638" }, { "category": "external", "summary": "SUSE Bug 1272718 for CVE-2026-59638", "url": "https://bugzilla.suse.com/1272718" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-59638" }, { "cve": "CVE-2026-59639", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59639" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59639", "url": "https://www.suse.com/security/cve/CVE-2026-59639" }, { "category": "external", "summary": "SUSE Bug 1272719 for CVE-2026-59639", "url": "https://bugzilla.suse.com/1272719" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59639" }, { "cve": "CVE-2026-59640", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59640" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59640", "url": "https://www.suse.com/security/cve/CVE-2026-59640" }, { "category": "external", "summary": "SUSE Bug 1272720 for CVE-2026-59640", "url": "https://bugzilla.suse.com/1272720" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59640" }, { "cve": "CVE-2026-59641", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59641" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 (1.0.X series), 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59641", "url": "https://www.suse.com/security/cve/CVE-2026-59641" }, { "category": "external", "summary": "SUSE Bug 1272721 for CVE-2026-59641", "url": "https://bugzilla.suse.com/1272721" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59641" }, { "cve": "CVE-2026-59642", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59642" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59642", "url": "https://www.suse.com/security/cve/CVE-2026-59642" }, { "category": "external", "summary": "SUSE Bug 1272722 for CVE-2026-59642", "url": "https://bugzilla.suse.com/1272722" }, { "category": "external", "summary": "SUSE Bug 1284215 for CVE-2026-59642", "url": "https://bugzilla.suse.com/1284215" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59642" }, { "cve": "CVE-2026-59643", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59643" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 2.0.13.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59643", "url": "https://www.suse.com/security/cve/CVE-2026-59643" }, { "category": "external", "summary": "SUSE Bug 1272723 for CVE-2026-59643", "url": "https://bugzilla.suse.com/1272723" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59643" }, { "cve": "CVE-2026-59644", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59644" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59644", "url": "https://www.suse.com/security/cve/CVE-2026-59644" }, { "category": "external", "summary": "SUSE Bug 1272724 for CVE-2026-59644", "url": "https://bugzilla.suse.com/1272724" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59644" }, { "cve": "CVE-2026-59645", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59645" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59645", "url": "https://www.suse.com/security/cve/CVE-2026-59645" }, { "category": "external", "summary": "SUSE Bug 1272725 for CVE-2026-59645", "url": "https://bugzilla.suse.com/1272725" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59645" }, { "cve": "CVE-2026-59646", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59646" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59646", "url": "https://www.suse.com/security/cve/CVE-2026-59646" }, { "category": "external", "summary": "SUSE Bug 1272726 for CVE-2026-59646", "url": "https://bugzilla.suse.com/1272726" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59646" }, { "cve": "CVE-2026-59647", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59647" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59647", "url": "https://www.suse.com/security/cve/CVE-2026-59647" }, { "category": "external", "summary": "SUSE Bug 1272727 for CVE-2026-59647", "url": "https://bugzilla.suse.com/1272727" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59647" }, { "cve": "CVE-2026-59648", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59648" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59648", "url": "https://www.suse.com/security/cve/CVE-2026-59648" }, { "category": "external", "summary": "SUSE Bug 1272728 for CVE-2026-59648", "url": "https://bugzilla.suse.com/1272728" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59648" }, { "cve": "CVE-2026-59649", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59649" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59649", "url": "https://www.suse.com/security/cve/CVE-2026-59649" }, { "category": "external", "summary": "SUSE Bug 1272729 for CVE-2026-59649", "url": "https://bugzilla.suse.com/1272729" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "important" } ], "title": "CVE-2026-59649" }, { "cve": "CVE-2026-59650", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59650" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59650", "url": "https://www.suse.com/security/cve/CVE-2026-59650" }, { "category": "external", "summary": "SUSE Bug 1272730 for CVE-2026-59650", "url": "https://bugzilla.suse.com/1272730" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-59650" }, { "cve": "CVE-2026-59651", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59651" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java LTS before 2.73.12.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59651", "url": "https://www.suse.com/security/cve/CVE-2026-59651" }, { "category": "external", "summary": "SUSE Bug 1272731 for CVE-2026-59651", "url": "https://bugzilla.suse.com/1272731" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59651" }, { "cve": "CVE-2026-59652", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-59652" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-59652", "url": "https://www.suse.com/security/cve/CVE-2026-59652" }, { "category": "external", "summary": "SUSE Bug 1272732 for CVE-2026-59652", "url": "https://bugzilla.suse.com/1272732" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "moderate" } ], "title": "CVE-2026-59652" }, { "cve": "CVE-2026-8763", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-8763" } ], "notes": [ { "category": "general", "text": "In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2026-8763", "url": "https://www.suse.com/security/cve/CVE-2026-8763" }, { "category": "external", "summary": "SUSE Bug 1272700 for CVE-2026-8763", "url": "https://bugzilla.suse.com/1272700" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Enterprise Server 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-javadoc-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-jmail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-mail-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pg-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-pkix-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-tls-0:1.85-160000.1.1.noarch", "SUSE Linux Enterprise Server for SAP applications 16.0:bouncycastle-util-0:1.85-160000.1.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2026-08-06T07:40:53Z", "details": "critical" } ], "title": "CVE-2026-8763" } ] } ``` ## [rhsa-2026:75573](https://vulnerability.circl.lu/vuln/rhsa-2026%3A75573) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "security update for jss", "title": "Title of the patch" }, { "category": "description", "text": "This security update provides a functional equivalent of RHSA-2026:75573.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:75573.\n", "title": "Description of the patch" }, { "category": "details", "text": "RHSA-2026:75573", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_75573.json" }, { "category": "self", "summary": "SUSE CVE CVE-2026-76561 page", "url": "https://www.suse.com/security/cve/CVE-2026-76561/" } ], "title": "security update for jss", "tracking": { "current_release_date": "2026-10-05T16:57:15Z", "generator": { "date": "2026-10-05T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "RHSA-2026:75573", "initial_release_date": "2026-10-05T00:00:00Z", "revision_history": [ { "date": "2026-10-05T00:00:00Z", "number": "1", "summary": "Current version" }, { "date": "2026-10-05T16:57:15Z", "number": "2", "summary": "unknown changes" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "product": { "name": "idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch (pki-core:10.6)", "product_id": "idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-ldapjdk@4.24.0-1.module+el8.10.0+21280+cce842b8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "product": { "name": "idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch (pki-core:10.6)", "product_id": "idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-ldapjdk-javadoc@4.24.0-1.module+el8.10.0+21280+cce842b8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-acme@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-base@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-base-java@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-ca@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-kra@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-server@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "product": { "name": "idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch (pki-core:10.6)", "product_id": "idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-tomcatjss@7.8.0-1.module+el8.10.0+21280+cce842b8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product": { "name": "python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch (pki-core:10.6)", "product_id": "python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/python3-idm-pki@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "product": { "name": "resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch (pki-core:10.6)", "product_id": "resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/resteasy@3.0.26-7.module+el8.10.0+21132+79720f4e?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "product": { "name": "resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch (pki-core:10.6)", "product_id": "resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/resteasy-javadoc@3.0.26-7.module+el8.10.0+21132+79720f4e?arch=noarch&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "product": { "name": "idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64 (pki-core:10.6)", "product_id": "idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-jss@4.11.0-1.module+el8.10.0+21280+cce842b8?arch=x86_64&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "product": { "name": "idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64 (pki-core:10.6)", "product_id": "idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-jss-javadoc@4.11.0-1.module+el8.10.0+21280+cce842b8?arch=x86_64&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "product": { "name": "idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64 (pki-core:10.6)", "product_id": "idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-symkey@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=x86_64&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } }, { "category": "product_version", "name": "idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "product": { "name": "idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64 (pki-core:10.6)", "product_id": "idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "product_identification_helper": { "purl": "pkg:rpm/suse/idm-pki-tools@10.15.1-3.module+el8.10.0+24994+a709cca8?arch=x86_64&rpmmod=pki-core:10.6:8000020261005072033:rhel8" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Liberty Linux 8", "product": { "name": "SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8", "product_identification_helper": { "cpe": "cpe:/o:suse:sll:8" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6" }, "product_reference": "idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6" }, "product_reference": "idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6" }, "product_reference": "idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6" }, "product_reference": "idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6" }, "product_reference": "idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6" }, "product_reference": "idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6" }, "product_reference": "idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6" }, "product_reference": "python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6" }, "product_reference": "resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" }, { "category": "default_component_of", "full_product_name": { "name": "resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6 as component of SUSE Liberty Linux 8", "product_id": "SUSE Liberty Linux 8:resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6" }, "product_reference": "resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "relates_to_product_reference": "SUSE Liberty Linux 8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-76561", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-76561" } ], "notes": [ { "category": "general", "text": "A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's ExternalProcessConstraint mechanism to execute arbitrary commands with attacker-controlled environment variables, achieving code execution as the pkiuser account.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Liberty Linux 8:idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "SUSE Liberty Linux 8:resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6" ] }, "references": [ { "category": "external", "summary": "CVE-2026-76561", "url": "https://www.suse.com/security/cve/CVE-2026-76561" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Liberty Linux 8:idm-jss-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-jss-javadoc-0:4.11.0-1.module+el8.10.0+21280+cce842b8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-ldapjdk-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-ldapjdk-javadoc-0:4.24.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-acme-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-base-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-base-java-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-ca-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-kra-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-server-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-symkey-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-pki-tools-0:10.15.1-3.module+el8.10.0+24994+a709cca8.x86_64::pki-core:10.6", "SUSE Liberty Linux 8:idm-tomcatjss-0:7.8.0-1.module+el8.10.0+21280+cce842b8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:python3-idm-pki-0:10.15.1-3.module+el8.10.0+24994+a709cca8.noarch::pki-core:10.6", "SUSE Liberty Linux 8:resteasy-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6", "SUSE Liberty Linux 8:resteasy-javadoc-0:3.0.26-7.module+el8.10.0+21132+79720f4e.noarch::pki-core:10.6" ] } ], "threats": [ { "category": "impact", "date": "2026-10-05T00:00:00Z", "details": "important" } ], "title": "CVE-2026-76561" } ] } ``` ## [suse-su-2026:22546-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A22546-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for docker-compose", "title": "Title of the patch" }, { "category": "description", "text": "This update for docker-compose fixes the following issues\n\n- CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute\n values in cache-to/cache-from configuration (bsc#1239766).\n- CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh\n (bsc#1239340).\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n (bsc#1265782).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n bypass and privilege escalation (bsc#1266625).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-1168", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22546-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:22546-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622546-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:22546-1", "url": "https://lists.suse.com/pipermail/sle-updates/2026-July/048135.html" }, { "category": "self", "summary": "SUSE Bug 1239340", "url": "https://bugzilla.suse.com/1239340" }, { "category": "self", "summary": "SUSE Bug 1239766", "url": "https://bugzilla.suse.com/1239766" }, { "category": "self", "summary": "SUSE Bug 1265782", "url": "https://bugzilla.suse.com/1265782" }, { "category": "self", "summary": "SUSE Bug 1266625", "url": "https://bugzilla.suse.com/1266625" }, { "category": "self", "summary": "SUSE CVE CVE-2025-0495 page", "url": "https://www.suse.com/security/cve/CVE-2025-0495/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-22869 page", "url": "https://www.suse.com/security/cve/CVE-2025-22869/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-33814 page", "url": "https://www.suse.com/security/cve/CVE-2026-33814/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-39821 page", "url": "https://www.suse.com/security/cve/CVE-2026-39821/" } ], "title": "Security update for docker-compose", "tracking": { "current_release_date": "2026-10-05T09:16:33Z", "generator": { "date": "2026-07-07T12:34:53Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:22546-1", "initial_release_date": "2026-07-07T12:34:53Z", "revision_history": [ { "date": "2026-07-07T12:34:53Z", "number": "1", "summary": "Current version" }, { "date": "2026-07-07T12:34:53Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:57:09Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:26:12Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T19:13:43Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T20:02:38Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T16:00:16Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:39:58Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:47:22Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:33Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:08:05Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:44Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:41Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:41Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:33Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "docker-compose-0:2.33.1-160000.5.1.aarch64", "product": { "name": "docker-compose-0:2.33.1-160000.5.1.aarch64", "product_id": "docker-compose-0:2.33.1-160000.5.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/docker-compose@2.33.1-160000.5.1?arch=aarch64&upstream=docker-compose-0:2.33.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "docker-compose-0:2.33.1-160000.5.1.ppc64le", "product": { "name": "docker-compose-0:2.33.1-160000.5.1.ppc64le", "product_id": "docker-compose-0:2.33.1-160000.5.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/docker-compose@2.33.1-160000.5.1?arch=ppc64le&upstream=docker-compose-0:2.33.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "docker-compose-0:2.33.1-160000.5.1.s390x", "product": { "name": "docker-compose-0:2.33.1-160000.5.1.s390x", "product_id": "docker-compose-0:2.33.1-160000.5.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/docker-compose@2.33.1-160000.5.1?arch=s390x&upstream=docker-compose-0:2.33.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "docker-compose-0:2.33.1-160000.5.1.x86_64", "product": { "name": "docker-compose-0:2.33.1-160000.5.1.x86_64", "product_id": "docker-compose-0:2.33.1-160000.5.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/docker-compose@2.33.1-160000.5.1?arch=x86_64&upstream=docker-compose-0:2.33.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "docker-compose-0:2.33.1-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64" }, "product_reference": "docker-compose-0:2.33.1-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-compose-0:2.33.1-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le" }, "product_reference": "docker-compose-0:2.33.1-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-compose-0:2.33.1-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x" }, "product_reference": "docker-compose-0:2.33.1-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "docker-compose-0:2.33.1-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" }, "product_reference": "docker-compose-0:2.33.1-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-0495", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-0495" } ], "notes": [ { "category": "general", "text": "Buildx is a Docker CLI plugin that extends build capabilities using BuildKit.\n\nCache backends support credentials by setting secrets directly as attribute values in cache-to/cache-from configuration. When supplied as user input, these secure values may be inadvertently captured in OpenTelemetry traces as part of the arguments and flags for the traced CLI command. OpenTelemetry traces are also saved in BuildKit daemon's history records.\n\n\nThis vulnerability does not impact secrets passed to the Github cache backend via environment variables or registry authentication.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-0495", "url": "https://www.suse.com/security/cve/CVE-2025-0495" }, { "category": "external", "summary": "SUSE Bug 1239765 for CVE-2025-0495", "url": "https://bugzilla.suse.com/1239765" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-07-07T12:34:53Z", "details": "moderate" } ], "title": "CVE-2025-0495" }, { "cve": "CVE-2025-22869", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-22869" } ], "notes": [ { "category": "general", "text": "SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-22869", "url": "https://www.suse.com/security/cve/CVE-2025-22869" }, { "category": "external", "summary": "SUSE Bug 1239322 for CVE-2025-22869", "url": "https://bugzilla.suse.com/1239322" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-07-07T12:34:53Z", "details": "important" } ], "title": "CVE-2025-22869" }, { "cve": "CVE-2026-33814", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-33814" } ], "notes": [ { "category": "general", "text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-33814", "url": "https://www.suse.com/security/cve/CVE-2026-33814" }, { "category": "external", "summary": "SUSE Bug 1264506 for CVE-2026-33814", "url": "https://bugzilla.suse.com/1264506" }, { "category": "external", "summary": "SUSE Bug 1268758 for CVE-2026-33814", "url": "https://bugzilla.suse.com/1268758" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-07-07T12:34:53Z", "details": "important" } ], "title": "CVE-2026-33814" }, { "cve": "CVE-2026-39821", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-39821" } ], "notes": [ { "category": "general", "text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-39821", "url": "https://www.suse.com/security/cve/CVE-2026-39821" }, { "category": "external", "summary": "SUSE Bug 1266474 for CVE-2026-39821", "url": "https://bugzilla.suse.com/1266474" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:docker-compose-0:2.33.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-07-07T12:34:53Z", "details": "important" } ], "title": "CVE-2026-39821" } ] } ``` ## [suse-su-2026:22251-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A22251-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for openssl-3", "title": "Title of the patch" }, { "category": "description", "text": "This update for openssl-3 fixes the following issues\n\n- CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).\n- CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345).\n- CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).\n- CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351).\n- CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352).\n- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).\n- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).\n- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-1017", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22251-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:22251-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622251-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:22251-1", "url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047707.html" }, { "category": "self", "summary": "SUSE Bug 1259652", "url": "https://bugzilla.suse.com/1259652" }, { "category": "self", "summary": "SUSE Bug 1266340", "url": "https://bugzilla.suse.com/1266340" }, { "category": "self", "summary": "SUSE Bug 1266341", "url": "https://bugzilla.suse.com/1266341" }, { "category": "self", "summary": "SUSE Bug 1266342", "url": "https://bugzilla.suse.com/1266342" }, { "category": "self", "summary": "SUSE Bug 1266344", "url": "https://bugzilla.suse.com/1266344" }, { "category": "self", "summary": "SUSE Bug 1266345", "url": "https://bugzilla.suse.com/1266345" }, { "category": "self", "summary": "SUSE Bug 1266347", "url": "https://bugzilla.suse.com/1266347" }, { "category": "self", "summary": "SUSE Bug 1266349", "url": "https://bugzilla.suse.com/1266349" }, { "category": "self", "summary": "SUSE Bug 1266350", "url": "https://bugzilla.suse.com/1266350" }, { "category": "self", "summary": "SUSE Bug 1266351", "url": "https://bugzilla.suse.com/1266351" }, { "category": "self", "summary": "SUSE Bug 1266352", "url": "https://bugzilla.suse.com/1266352" }, { "category": "self", "summary": "SUSE Bug 1266353", "url": "https://bugzilla.suse.com/1266353" }, { "category": "self", "summary": "SUSE Bug 1266355", "url": "https://bugzilla.suse.com/1266355" }, { "category": "self", "summary": "SUSE Bug 1266356", "url": "https://bugzilla.suse.com/1266356" }, { "category": "self", "summary": "SUSE Bug 1266357", "url": "https://bugzilla.suse.com/1266357" }, { "category": "self", "summary": "SUSE CVE CVE-2026-2673 page", "url": "https://www.suse.com/security/cve/CVE-2026-2673/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-34180 page", "url": "https://www.suse.com/security/cve/CVE-2026-34180/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-34182 page", "url": "https://www.suse.com/security/cve/CVE-2026-34182/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-34183 page", "url": "https://www.suse.com/security/cve/CVE-2026-34183/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42764 page", "url": "https://www.suse.com/security/cve/CVE-2026-42764/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42766 page", "url": "https://www.suse.com/security/cve/CVE-2026-42766/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42767 page", "url": "https://www.suse.com/security/cve/CVE-2026-42767/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42768 page", "url": "https://www.suse.com/security/cve/CVE-2026-42768/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42769 page", "url": "https://www.suse.com/security/cve/CVE-2026-42769/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-42770 page", "url": "https://www.suse.com/security/cve/CVE-2026-42770/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-45445 page", "url": "https://www.suse.com/security/cve/CVE-2026-45445/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-45446 page", "url": "https://www.suse.com/security/cve/CVE-2026-45446/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-45447 page", "url": "https://www.suse.com/security/cve/CVE-2026-45447/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-7383 page", "url": "https://www.suse.com/security/cve/CVE-2026-7383/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-9076 page", "url": "https://www.suse.com/security/cve/CVE-2026-9076/" } ], "title": "Security update for openssl-3", "tracking": { "current_release_date": "2026-10-05T09:16:30Z", "generator": { "date": "2026-06-22T12:23:46Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:22251-1", "initial_release_date": "2026-06-22T12:23:46Z", "revision_history": [ { "date": "2026-06-22T12:23:46Z", "number": "1", "summary": "Current version" }, { "date": "2026-06-22T12:23:46Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-06-22T12:23:46Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:58Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-15T09:26:06Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:09:17Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-16T19:58:33Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-17T15:56:26Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-20T18:39:28Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-21T08:47:19Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:31Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-22T16:08:03Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:42Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:39Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-09-29T17:26:45Z", "number": "15", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:39Z", "number": "16", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:30Z", "number": "17", "summary": "unknown changes" } ], "status": "final", "version": "17" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "product": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "product_id": "libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-devel@3.5.0-160000.8.1?arch=aarch64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "product": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "product_id": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-fips-provider@3.5.0-160000.8.1?arch=aarch64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl3-0:3.5.0-160000.8.1.aarch64", "product": { "name": "libopenssl3-0:3.5.0-160000.8.1.aarch64", "product_id": "libopenssl3-0:3.5.0-160000.8.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl3@3.5.0-160000.8.1?arch=aarch64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "openssl-3-0:3.5.0-160000.8.1.aarch64", "product": { "name": "openssl-3-0:3.5.0-160000.8.1.aarch64", "product_id": "openssl-3-0:3.5.0-160000.8.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/openssl-3@3.5.0-160000.8.1?arch=aarch64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "product": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "product_id": "libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-devel@3.5.0-160000.8.1?arch=ppc64le&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "product": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "product_id": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-fips-provider@3.5.0-160000.8.1?arch=ppc64le&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl3-0:3.5.0-160000.8.1.ppc64le", "product": { "name": "libopenssl3-0:3.5.0-160000.8.1.ppc64le", "product_id": "libopenssl3-0:3.5.0-160000.8.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl3@3.5.0-160000.8.1?arch=ppc64le&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "openssl-3-0:3.5.0-160000.8.1.ppc64le", "product": { "name": "openssl-3-0:3.5.0-160000.8.1.ppc64le", "product_id": "openssl-3-0:3.5.0-160000.8.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/openssl-3@3.5.0-160000.8.1?arch=ppc64le&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "product": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "product_id": "libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-devel@3.5.0-160000.8.1?arch=s390x&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "product": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "product_id": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-fips-provider@3.5.0-160000.8.1?arch=s390x&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl3-0:3.5.0-160000.8.1.s390x", "product": { "name": "libopenssl3-0:3.5.0-160000.8.1.s390x", "product_id": "libopenssl3-0:3.5.0-160000.8.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl3@3.5.0-160000.8.1?arch=s390x&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "openssl-3-0:3.5.0-160000.8.1.s390x", "product": { "name": "openssl-3-0:3.5.0-160000.8.1.s390x", "product_id": "openssl-3-0:3.5.0-160000.8.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/openssl-3@3.5.0-160000.8.1?arch=s390x&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "product": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "product_id": "libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-devel@3.5.0-160000.8.1?arch=x86_64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "product": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "product_id": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl-3-fips-provider@3.5.0-160000.8.1?arch=x86_64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "libopenssl3-0:3.5.0-160000.8.1.x86_64", "product": { "name": "libopenssl3-0:3.5.0-160000.8.1.x86_64", "product_id": "libopenssl3-0:3.5.0-160000.8.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libopenssl3@3.5.0-160000.8.1?arch=x86_64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } }, { "category": "product_version", "name": "openssl-3-0:3.5.0-160000.8.1.x86_64", "product": { "name": "openssl-3-0:3.5.0-160000.8.1.x86_64", "product_id": "openssl-3-0:3.5.0-160000.8.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:3.5.0:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/openssl-3@3.5.0-160000.8.1?arch=x86_64&upstream=openssl-3-0:3.5.0-160000.8.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64" }, "product_reference": "libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le" }, "product_reference": "libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x" }, "product_reference": "libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64" }, "product_reference": "libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64" }, "product_reference": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le" }, "product_reference": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x" }, "product_reference": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64" }, "product_reference": "libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-0:3.5.0-160000.8.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64" }, "product_reference": "libopenssl3-0:3.5.0-160000.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-0:3.5.0-160000.8.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le" }, "product_reference": "libopenssl3-0:3.5.0-160000.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-0:3.5.0-160000.8.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x" }, "product_reference": "libopenssl3-0:3.5.0-160000.8.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-0:3.5.0-160000.8.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64" }, "product_reference": "libopenssl3-0:3.5.0-160000.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-0:3.5.0-160000.8.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64" }, "product_reference": "openssl-3-0:3.5.0-160000.8.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-0:3.5.0-160000.8.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le" }, "product_reference": "openssl-3-0:3.5.0-160000.8.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-0:3.5.0-160000.8.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x" }, "product_reference": "openssl-3-0:3.5.0-160000.8.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-0:3.5.0-160000.8.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" }, "product_reference": "openssl-3-0:3.5.0-160000.8.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-2673", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-2673" } ], "notes": [ { "category": "general", "text": "Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected\npreferred key exchange group when its key exchange group configuration includes\nthe default by using the 'DEFAULT' keyword.\n\nImpact summary: A less preferred key exchange may be used even when a more\npreferred group is supported by both client and server, if the group\nwas not included among the client's initial predicated keyshares.\nThis will sometimes be the case with the new hybrid post-quantum groups,\nif the client chooses to defer their use until specifically requested by\nthe server.\n\nIf an OpenSSL TLS 1.3 server's configuration uses the 'DEFAULT' keyword to\ninterpolate the built-in default group list into its own configuration, perhaps\nadding or removing specific elements, then an implementation defect causes the\n'DEFAULT' list to lose its 'tuple' structure, and all server-supported groups\nwere treated as a single sufficiently secure 'tuple', with the server not\nsending a Hello Retry Request (HRR) even when a group in a more preferred tuple\nwas mutually supported.\n\nAs a result, the client and server might fail to negotiate a mutually supported\npost-quantum key agreement group, such as 'X25519MLKEM768', if the client's\nconfiguration results in only 'classical' groups (such as 'X25519' being the\nonly ones in the client's initial keyshare prediction).\n\nOpenSSL 3.5 and later support a new syntax for selecting the most preferred TLS\n1.3 key agreement group on TLS servers. The old syntax had a single 'flat'\nlist of groups, and treated all the supported groups as sufficiently secure.\nIf any of the keyshares predicted by the client were supported by the server\nthe most preferred among these was selected, even if other groups supported by\nthe client, but not included in the list of predicted keyshares would have been\nmore preferred, if included.\n\nThe new syntax partitions the groups into distinct 'tuples' of roughly\nequivalent security. Within each tuple the most preferred group included among\nthe client's predicted keyshares is chosen, but if the client supports a group\nfrom a more preferred tuple, but did not predict any corresponding keyshares,\nthe server will ask the client to retry the ClientHello (by issuing a Hello\nRetry Request or HRR) with the most preferred mutually supported group.\n\nThe above works as expected when the server's configuration uses the built-in\ndefault group list, or explicitly defines its own list by directly defining the\nvarious desired groups and group 'tuples'.\n\nNo OpenSSL FIPS modules are affected by this issue, the code in question lies\noutside the FIPS boundary.\n\nOpenSSL 3.6 and 3.5 are vulnerable to this issue.\n\nOpenSSL 3.6 users should upgrade to OpenSSL 3.6.2 once it is released.\nOpenSSL 3.5 users should upgrade to OpenSSL 3.5.6 once it is released.\n\nOpenSSL 3.4, 3.3, 3.0, 1.0.2 and 1.1.1 are not affected by this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-2673", "url": "https://www.suse.com/security/cve/CVE-2026-2673" }, { "category": "external", "summary": "SUSE Bug 1259652 for CVE-2026-2673", "url": "https://bugzilla.suse.com/1259652" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-2673" }, { "cve": "CVE-2026-34180", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-34180" } ], "notes": [ { "category": "general", "text": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL's ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL's own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-34180", "url": "https://www.suse.com/security/cve/CVE-2026-34180" }, { "category": "external", "summary": "SUSE Bug 1266342 for CVE-2026-34180", "url": "https://bugzilla.suse.com/1266342" }, { "category": "external", "summary": "SUSE Bug 1283133 for CVE-2026-34180", "url": "https://bugzilla.suse.com/1283133" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-34180" }, { "cve": "CVE-2026-34182", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-34182" } ], "notes": [ { "category": "general", "text": "Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\n\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\n\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher. OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\n\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim's private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\n\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\n\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\n\nThe FIPS modules are not affected by this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-34182", "url": "https://www.suse.com/security/cve/CVE-2026-34182" }, { "category": "external", "summary": "SUSE Bug 1266344 for CVE-2026-34182", "url": "https://bugzilla.suse.com/1266344" }, { "category": "external", "summary": "SUSE Bug 1269279 for CVE-2026-34182", "url": "https://bugzilla.suse.com/1269279" }, { "category": "external", "summary": "SUSE Bug 1270289 for CVE-2026-34182", "url": "https://bugzilla.suse.com/1270289" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-34182" }, { "cve": "CVE-2026-34183", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-34183" } ], "notes": [ { "category": "general", "text": "Issue summary: Remote peer may exhaust heap memory of the QUIC\nserver or client by flooding it with packets containing PATH_CHALLENGE\nframes.\n\nImpact summary: A malicious remote peer can cause an unbounded\nmemory allocation which can lead to an abnormal termination of the\napplication acting as a QUIC client or server and a Denial of Service.\n\nA remote peer may exhaust heap memory by flooding the local\nQUIC stack with PATH_CHALLENGE frames. The local QUIC stack\nallocates a PATH_RESPONSE frame for every PATH_CHALLENGE it receives.\nThe allocated PATH_RESPONSE frame gets freed only when the remote\npeer acknowledges reception of the PATH_RESPONSE frame which will\nnot be done by a malicious peer.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by\nthis issue. The QUIC stack is outside of OpenSSL FIPS module\nboundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-34183", "url": "https://www.suse.com/security/cve/CVE-2026-34183" }, { "category": "external", "summary": "SUSE Bug 1266345 for CVE-2026-34183", "url": "https://bugzilla.suse.com/1266345" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-34183" }, { "cve": "CVE-2026-42764", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42764" } ], "notes": [ { "category": "general", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42764", "url": "https://www.suse.com/security/cve/CVE-2026-42764" }, { "category": "external", "summary": "SUSE Bug 1266347 for CVE-2026-42764", "url": "https://bugzilla.suse.com/1266347" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-42764" }, { "cve": "CVE-2026-42766", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42766" } ], "notes": [ { "category": "general", "text": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42766", "url": "https://www.suse.com/security/cve/CVE-2026-42766" }, { "category": "external", "summary": "SUSE Bug 1266349 for CVE-2026-42766", "url": "https://bugzilla.suse.com/1266349" }, { "category": "external", "summary": "SUSE Bug 1283133 for CVE-2026-42766", "url": "https://bugzilla.suse.com/1283133" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-42766" }, { "cve": "CVE-2026-42767", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42767" } ], "notes": [ { "category": "general", "text": "Issue summary: An attacker-controlled CMP (Certificate Management Protocol)\nserver could trigger a NULL pointer dereference in a CMP client application.\n\nImpact summary: A NULL pointer dereference causes a crash of the\napplication and a Denial of Service.\n\nAn attacker controlling a CMP server (or acting as a man-in-the-middle) could\ncraft a CMP response containing a CRMF (Certificate Request Message Format)\nCertRepMessage with an EncryptedValue structure where the symmAlg field\nhas an algorithm OID but no parameters field. When the OpenSSL CMP client\nprocesses this response, the NULL dereference occurs, causing a crash of\nthe CMP client.\n\nApplications that process untrusted CMP/CRMF messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42767", "url": "https://www.suse.com/security/cve/CVE-2026-42767" }, { "category": "external", "summary": "SUSE Bug 1266350 for CVE-2026-42767", "url": "https://bugzilla.suse.com/1266350" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-42767" }, { "cve": "CVE-2026-42768", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42768" } ], "notes": [ { "category": "general", "text": "Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to\nBleichenbacher-style attack when an attacker is able to provide the CMS or\nS/MIME messages and observe the error code and/or decryption output.\n\nImpact summary: The Bleichenbacher-style attack allows an attacker to use the\nvictim's vulnerable application as a way to decrypt or sign messages with the\nvictim's private RSA key.\n\nThe attack is possible in 2 variants.\n\n1. The decryption API (CMS_decrypt(), PKCS7_decrypt()) is used without\nproviding the recipient certificate. In this case OpenSSL iterates over every\nKeyTransRecipientInfo (KTRI) without stopping at the first success.\n\nAn attacker who authors a message with two KTRI entries - the first one\nwrapping a real CEK under the victim's public key, the second with an\narbitrary probe ciphertext - obtains opportunity to iterate the 2nd KTRI to\nget a valid PKCS#1 v1.5 padding if the error code of the application is\navailable.\n\nThat is a Bleichenbacher oracle (Bleichenbacher, CRYPTO '98): an\nadaptive-chosen-ciphertext side channel from which the attacker decrypts any\nRSA ciphertext to the victim's key or forges any PKCS#1 v1.5 signature under\nit.\n\n2. When the decryption API (CMS_decrypt(), PKCS7_decrypt()) is provided with\nthe recipient certificate, and the recipient is not found, a random\nkey is substituted.\n\nAn attacker who authors a message and is able to compare both error code and\nthe result of the decryption, can mount a Bleichenbacher oracle.\n\nWe are not aware of any applications that provide a remote attacker\nan opportunity to mount an attack described in these scenarios. We consider\nthe existence of such application very unlikely, and for this reason this\nCVE has been evaluated as Low severity.\n\nTo avoid these attacks, when RSA PKCS#1 v1.5 Key Transport is in use, the\ninvoked EVP_PKEY_decrypt() will use the implicit rejection mechanism described\nin draft-irtf-cfrg-rsa-guidance. In previous OpenSSL releases the implicit\nrejection was explicitly disabled.\n\nThe implicit rejection mechanism always returns a plaintext value,\nthe symmetric key. This result is deterministic for the ciphertext and the\nprivate key. The length of the decryption result can happen to match the\nlength of the key of the symmetric cipher that was used for the content\nencryption. When a certificate is not provided, the last RecipientInfo\nproducing a key that looks valid will be used. It may cause getting garbage\ncontent on decryption. As a proper way to deal with this a recipient\ncertificate has to be provided to identify the particular RecipientInfo for\ndecryption.\n\nThe FIPS modules in 4.0, 3.6, 3.5, and 3.4 are not affected by this issue, as\nCMS and S/MIME processing happens outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42768", "url": "https://www.suse.com/security/cve/CVE-2026-42768" }, { "category": "external", "summary": "SUSE Bug 1266351 for CVE-2026-42768", "url": "https://bugzilla.suse.com/1266351" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-42768" }, { "cve": "CVE-2026-42769", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42769" } ], "notes": [ { "category": "general", "text": "Issue Summary: An error in the callback used to verify the certificate\nprovided in a Root CA key update Certificate Management Protocol (CMP)\nmessage response rendered the certificate validation ineffectual, which\ncould lead to escalation of credentials from the Registration Authority (RA)\nlevel to the root Certification Authority (root CA) level.\n\nImpact Summary: The Registration Autority could replace the root CA\ncertificate for the CMP clients with an arbitrary root CA certificate.\n\nOne of the parts of the Certificate Management Protocol (CMP), specified in\nRFC 9810, is Root Certification Authority (root CA) key Rollover,\nwhich is sent by the server in a message with type 'id-it-rootCaKeyUpdate'.\nAs part of these messages, 'newWithOld' certificate, the new root CA\ncertificate signed with the old root CA key, is provided, and verifying its\nsignature is crucial for transferring the trust from the old CA key to the\nnew one.\n\nThe 'id-it-rootCaKeyUpdate' messages are expected to be processed with\nOSSL_CMP_get1_rootCaKeyUpdate(), that is expected to verify the 'newWithOld'\ncertificate. A typo in the certificate chain building code led to adding\nan incorrect certificate ('newWithOld' instead of 'oldRoot') to the\ncertificate chain, rendering the certificate verification process ineffectual\n(only the issuer name and the algorithm OIDs were verified by other parts\nof the verification code).\n\nAn attacker who already has credentials that satisfy the CMP message\nprotection checks can generate a new key pair and use a crafted self-signed\ncertificate in its 'id-it-rootCaKeyUpdate' CMP messages which affected CMP\nclients would accept as a new trust anchor.\n\nSignificant preconditions for the attack (having valid RA-level credentials)\nare the reason the issue was assigned Low severity.\n\nThe FIPS modules are not affected by this issue, as the affected code is\noutside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42769", "url": "https://www.suse.com/security/cve/CVE-2026-42769" }, { "category": "external", "summary": "SUSE Bug 1266352 for CVE-2026-42769", "url": "https://bugzilla.suse.com/1266352" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-42769" }, { "cve": "CVE-2026-42770", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-42770" } ], "notes": [ { "category": "general", "text": "Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42)\npeer key, the peer key is not properly checked for the subgroup membership.\n\nImpact summary: A malicious peer which presents an X9.42 key carrying the\nvictim's p and g parameters, a forged q = r (a small prime factor of the\ncofactor (p−1)/q_local), and a public value Y of order r can recover the\nvictim's private key after a small number of key exchange attempts.\n\nWhen EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the\nsubgroup membership check Y^q ≡ 1 (mod p) is performed using the peer's\nown q parameter, not the local key's q. The peer's domain parameters are\nthen matched against the domain parameters of the private key, but the value\nof q is not compared.\n\nA malicious peer who presents an X9.42 key carrying the victim's p, g,\na forged q = r (a small prime factor of the cofactor), and a public\nvalue Y of order r passes all checks. The shared secret then takes only\nr distinct values, leaking priv mod r. Repeating for each small-prime\nfactor of the cofactor and combining via CRT recovers the full private\nkey (Lim-Lee / small-subgroup-confinement attack).\n\nThe realistic attack surface is narrow: principally CMP deployments with\nlong-lived RA/CA DHX keys and bespoke enterprise or government applications\nusing X9.42 DHX static keys with interactive protocols and therefore this\nissue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, 3.1.2 and 3.0 are affected by this\nissue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-42770", "url": "https://www.suse.com/security/cve/CVE-2026-42770" }, { "category": "external", "summary": "SUSE Bug 1266353 for CVE-2026-42770", "url": "https://bugzilla.suse.com/1266353" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-42770" }, { "cve": "CVE-2026-45445", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-45445" } ], "notes": [ { "category": "general", "text": "Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\n\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality. If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\n\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex(). The OCB provider's streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not. Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller's IV.\n\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext. The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\n\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected. Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-45445", "url": "https://www.suse.com/security/cve/CVE-2026-45445" }, { "category": "external", "summary": "SUSE Bug 1266355 for CVE-2026-45445", "url": "https://bugzilla.suse.com/1266355" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-45445" }, { "cve": "CVE-2026-45446", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-45446" } ], "notes": [ { "category": "general", "text": "Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV\n(RFC 8452) mishandle the authentication of AAD (Additional Authenticated\nData) with an empty ciphertext allowing a forgery of such messages.\n\nImpact summary: An attacker can forge empty messages with arbitrary AAD\nto the victim's application using these ciphers.\n\nAES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) are nonce-misuse-resistant AEAD\nmodes: they accept a key, nonce, optional AAD (bytes that are authenticated\nbut not encrypted), and plaintext, and produces ciphertext plus a 16-byte\ntag. On decrypt, `EVP_DecryptFinal_ex()` is documented to return success only\nif the tag is verified succesfully.\n\nIn OpenSSL's provider implementation of these ciphers, the expected tag is\ncomputed only when decryption function is invoked with non-empty data.\nIf the caller supplies AAD and then calls `EVP_DecryptFinal_ex()` without\ninvocation of the ciphertext update, which can happen when the received\nciphertext length is zero, the tag is never recalculated and still holds its\nall-zeros value.\n\nWhen AES-GCM-SIV is used, an attacker who sends arbitrary AAD, empty\nciphertext, and all-zeros tag passes authentication under any key they do not\nknow, single-shot. When AES-SIV is used, for mounting the attack it's\nnecessary for the application to reuse the decryption context without\nresetting the key.\n\nAES-SIV is implemented since OpenSSL 3.0. AES-GCM-SIV is implemented since\nOpenSSL 3.2.\n\nNo protocols implemented in OpenSSL itself (TLS/CMS/PKCS7/HPKE/QUIC) support\neither AES-GCM-SIV or AES-SIV. To mount an attack, the applications must\nimplement their own protocol and use the EVP interface. Also they must skip the\nciphertext update when a message with an empty ciphertext arrives.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as these algorithms are not FIPS approved and the affected code is\noutside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-45446", "url": "https://www.suse.com/security/cve/CVE-2026-45446" }, { "category": "external", "summary": "SUSE Bug 1266356 for CVE-2026-45446", "url": "https://bugzilla.suse.com/1266356" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-45446" }, { "cve": "CVE-2026-45447", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-45447" } ], "notes": [ { "category": "general", "text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-45447", "url": "https://www.suse.com/security/cve/CVE-2026-45447" }, { "category": "external", "summary": "SUSE Bug 1266357 for CVE-2026-45447", "url": "https://bugzilla.suse.com/1266357" }, { "category": "external", "summary": "SUSE Bug 1266389 for CVE-2026-45447", "url": "https://bugzilla.suse.com/1266389" }, { "category": "external", "summary": "SUSE Bug 1268888 for CVE-2026-45447", "url": "https://bugzilla.suse.com/1268888" }, { "category": "external", "summary": "SUSE Bug 1274609 for CVE-2026-45447", "url": "https://bugzilla.suse.com/1274609" }, { "category": "external", "summary": "SUSE Bug 1283218 for CVE-2026-45447", "url": "https://bugzilla.suse.com/1283218" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "important" } ], "title": "CVE-2026-45447" }, { "cve": "CVE-2026-7383", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-7383" } ], "notes": [ { "category": "general", "text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-7383", "url": "https://www.suse.com/security/cve/CVE-2026-7383" }, { "category": "external", "summary": "SUSE Bug 1266340 for CVE-2026-7383", "url": "https://bugzilla.suse.com/1266340" }, { "category": "external", "summary": "SUSE Bug 1283133 for CVE-2026-7383", "url": "https://bugzilla.suse.com/1283133" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-7383" }, { "cve": "CVE-2026-9076", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-9076" } ], "notes": [ { "category": "general", "text": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker's PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-9076", "url": "https://www.suse.com/security/cve/CVE-2026-9076" }, { "category": "external", "summary": "SUSE Bug 1266341 for CVE-2026-9076", "url": "https://bugzilla.suse.com/1266341" }, { "category": "external", "summary": "SUSE Bug 1283133 for CVE-2026-9076", "url": "https://bugzilla.suse.com/1283133" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.7, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-devel-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl-3-fips-provider-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:libopenssl3-0:3.5.0-160000.8.1.x86_64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.aarch64", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.ppc64le", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.s390x", "SUSE Linux Micro 6.2:openssl-3-0:3.5.0-160000.8.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-22T12:23:46Z", "details": "moderate" } ], "title": "CVE-2026-9076" } ] } ``` ## [suse-su-2026:22234-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A22234-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for tiff", "title": "Title of the patch" }, { "category": "description", "text": "This update for tiff fixes the following issues\n\nSecurity issues:\n\n- CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).\n- CVE-2026-4775: signed integer overflow in the `putcontig8bitYCbCr44tile` function (bsc#1260411).\n\nNon security issue:\n\n- QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-1007", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22234-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:22234-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622234-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:22234-1", "url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047474.html" }, { "category": "self", "summary": "SUSE Bug 1248278", "url": "https://bugzilla.suse.com/1248278" }, { "category": "self", "summary": "SUSE Bug 1257123", "url": "https://bugzilla.suse.com/1257123" }, { "category": "self", "summary": "SUSE Bug 1260411", "url": "https://bugzilla.suse.com/1260411" }, { "category": "self", "summary": "SUSE CVE CVE-2018-7456 page", "url": "https://www.suse.com/security/cve/CVE-2018-7456/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0800 page", "url": "https://www.suse.com/security/cve/CVE-2023-0800/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0801 page", "url": "https://www.suse.com/security/cve/CVE-2023-0801/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0802 page", "url": "https://www.suse.com/security/cve/CVE-2023-0802/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0803 page", "url": "https://www.suse.com/security/cve/CVE-2023-0803/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0804 page", "url": "https://www.suse.com/security/cve/CVE-2023-0804/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-8851 page", "url": "https://www.suse.com/security/cve/CVE-2025-8851/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-4775 page", "url": "https://www.suse.com/security/cve/CVE-2026-4775/" } ], "title": "Security update for tiff", "tracking": { "current_release_date": "2026-10-05T09:16:29Z", "generator": { "date": "2026-06-21T02:13:32Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:22234-1", "initial_release_date": "2026-06-21T02:13:32Z", "revision_history": [ { "date": "2026-06-21T02:13:32Z", "number": "1", "summary": "Current version" }, { "date": "2026-06-21T02:13:32Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:57Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:26:05Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T19:09:03Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:58:19Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T15:56:13Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:39:23Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:47:17Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:30Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:08:02Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:41Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:38Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:37Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:29Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libtiff6-0:4.7.1-160000.2.1.aarch64", "product": { "name": "libtiff6-0:4.7.1-160000.2.1.aarch64", "product_id": "libtiff6-0:4.7.1-160000.2.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:libtiff:libtiff:4.7.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libtiff6@4.7.1-160000.2.1?arch=aarch64&upstream=tiff-0:4.7.1-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libtiff6-0:4.7.1-160000.2.1.ppc64le", "product": { "name": "libtiff6-0:4.7.1-160000.2.1.ppc64le", "product_id": "libtiff6-0:4.7.1-160000.2.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:libtiff:libtiff:4.7.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libtiff6@4.7.1-160000.2.1?arch=ppc64le&upstream=tiff-0:4.7.1-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libtiff6-0:4.7.1-160000.2.1.s390x", "product": { "name": "libtiff6-0:4.7.1-160000.2.1.s390x", "product_id": "libtiff6-0:4.7.1-160000.2.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:libtiff:libtiff:4.7.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libtiff6@4.7.1-160000.2.1?arch=s390x&upstream=tiff-0:4.7.1-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libtiff6-0:4.7.1-160000.2.1.x86_64", "product": { "name": "libtiff6-0:4.7.1-160000.2.1.x86_64", "product_id": "libtiff6-0:4.7.1-160000.2.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:libtiff:libtiff:4.7.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libtiff6@4.7.1-160000.2.1?arch=x86_64&upstream=tiff-0:4.7.1-160000.2.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libtiff6-0:4.7.1-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64" }, "product_reference": "libtiff6-0:4.7.1-160000.2.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libtiff6-0:4.7.1-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le" }, "product_reference": "libtiff6-0:4.7.1-160000.2.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libtiff6-0:4.7.1-160000.2.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x" }, "product_reference": "libtiff6-0:4.7.1-160000.2.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libtiff6-0:4.7.1-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" }, "product_reference": "libtiff6-0:4.7.1-160000.2.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-7456", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-7456" } ], "notes": [ { "category": "general", "text": "A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-7456", "url": "https://www.suse.com/security/cve/CVE-2018-7456" }, { "category": "external", "summary": "SUSE Bug 1074317 for CVE-2018-7456", "url": "https://bugzilla.suse.com/1074317" }, { "category": "external", "summary": "SUSE Bug 1082825 for CVE-2018-7456", "url": "https://bugzilla.suse.com/1082825" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2018-7456" }, { "cve": "CVE-2023-0800", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0800" } ], "notes": [ { "category": "general", "text": "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0800", "url": "https://www.suse.com/security/cve/CVE-2023-0800" }, { "category": "external", "summary": "SUSE Bug 1208231 for CVE-2023-0800", "url": "https://bugzilla.suse.com/1208231" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2023-0800" }, { "cve": "CVE-2023-0801", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0801" } ], "notes": [ { "category": "general", "text": "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0801", "url": "https://www.suse.com/security/cve/CVE-2023-0801" }, { "category": "external", "summary": "SUSE Bug 1208232 for CVE-2023-0801", "url": "https://bugzilla.suse.com/1208232" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2023-0801" }, { "cve": "CVE-2023-0802", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0802" } ], "notes": [ { "category": "general", "text": "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0802", "url": "https://www.suse.com/security/cve/CVE-2023-0802" }, { "category": "external", "summary": "SUSE Bug 1208233 for CVE-2023-0802", "url": "https://bugzilla.suse.com/1208233" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2023-0802" }, { "cve": "CVE-2023-0803", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0803" } ], "notes": [ { "category": "general", "text": "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0803", "url": "https://www.suse.com/security/cve/CVE-2023-0803" }, { "category": "external", "summary": "SUSE Bug 1208234 for CVE-2023-0803", "url": "https://bugzilla.suse.com/1208234" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2023-0803" }, { "cve": "CVE-2023-0804", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0804" } ], "notes": [ { "category": "general", "text": "LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0804", "url": "https://www.suse.com/security/cve/CVE-2023-0804" }, { "category": "external", "summary": "SUSE Bug 1208236 for CVE-2023-0804", "url": "https://bugzilla.suse.com/1208236" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2023-0804" }, { "cve": "CVE-2025-8851", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-8851" } ], "notes": [ { "category": "general", "text": "A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-8851", "url": "https://www.suse.com/security/cve/CVE-2025-8851" }, { "category": "external", "summary": "SUSE Bug 1248274 for CVE-2025-8851", "url": "https://bugzilla.suse.com/1248274" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "moderate" } ], "title": "CVE-2025-8851" }, { "cve": "CVE-2026-4775", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-4775" } ], "notes": [ { "category": "general", "text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-4775", "url": "https://www.suse.com/security/cve/CVE-2026-4775" }, { "category": "external", "summary": "SUSE Bug 1260411 for CVE-2026-4775", "url": "https://bugzilla.suse.com/1260411" }, { "category": "external", "summary": "SUSE Bug 1272954 for CVE-2026-4775", "url": "https://bugzilla.suse.com/1272954" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.aarch64", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.ppc64le", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.s390x", "SUSE Linux Micro 6.2:libtiff6-0:4.7.1-160000.2.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-06-21T02:13:32Z", "details": "important" } ], "title": "CVE-2026-4775" } ] } ``` ## [suse-su-2026:20762-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20762-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for harfbuzz", "title": "Title of the patch" }, { "category": "description", "text": "This update for harfbuzz fixes the following issues:\n\nUpdate to version 11.4.5:\n\nSecurity fixes:\n\n - CVE-2026-22693: Fixed a NULL pointer dereference in SubtableUnicodesCache::create (bsc#1256459).\n\nOther fixes:\n\n - Bug fixes for “AAT” shaping, and other shaping micro\n optimizations.\n - Fix a shaping regression affecting mark glyphs in certain\n fonts.\n - Fix pruning of mark filtering sets when subsetting fonts, which\n caused changes in shaping behaviour.\n - Make shaping fail much faster for certain malformed fonts\n (e.g., those that trigger infinite recursion).\n - Fix undefined behaviour introduced in 11.4.2.\n - Fix detection of the “Cambria Math” font when fonts are scaled,\n so the workaround for the bad MATH table constant is applied.\n - Various performance and memory usage improvements.\n - The hb-shape command line tool can now be built with the\n amalgamated harfbuzz.cc source.\n - Fix regression in handling version 2 of avar table.\n - Increase various buffer length limits for better handling of\n fonts that generate huge number of glyphs per codepoint (e.g.\n Noto Sans Duployan).\n - Improvements to the harfrust shaper for more accurate testing.\n - Fix clang compiler warnings.\n - General shaping and subsetting speedups.\n - Fix in Graphite shaping backend when glyph advances became\n negative.\n - Subsetting improvements, pruning empty mark-attachment lookups.\n - Don't use the macro name _S, which is reserved by system\n liberaries.\n - Build fixes and speedup.\n - Add a kbts shaping backend that calls into the kb_text_shape\n single-header shaping library. This is purely for testing and\n performance evaluation and we do NOT recommend using it for any\n other purposes.\n - Fix bug in vertical shaping of fonts without the vmtx table.\n - Fix build with non-compliant C++11 compilers that don't\n recognize the \"and\" keyword.\n - Fix crasher in the glyph_v_origin function introduced in\n 11.3.0.\n - Speed up handling fonts with very large number of variations.\n - Speed up getting horizontal and vertical glyph advances by up\n to 24%.\n - Significantly speed up vertical text shaping.\n - Various documentation improvements.\n - Various build improvements.\n - Various subsetting improvements.\n - Various improvements to Rust font functions (fontations\n integration) and shaper (HarfRust integration).\n - Rename harfruzz option and shaper to harfrust following\n upstream rename.\n - Implement hb_face_reference_blob() for DirectWrite font\n functions.\n - Various build improvements.\n - Fix build with HB_NO_DRAW and HB_NO_PAINT.\n - Add an optional harfruzz shaper that uses HarfRuzz; an ongoing\n Rust port of HarfBuzz shaping. This shaper is mainly used for\n testing the output of the Rust implementation.\n - Fix regression that caused applying unsafe_to_break() to the\n whole buffer to be ignored.\n - Update USE data files.\n - Fix getting advances of out-of-rage glyph indices in\n DirectWrite font functions.\n - Painting of COLRv1 fonts without clip boxes is now about 10\n times faster.\n - Synthetic bold/slant of a sub font is now respected, instead of\n using the parent’s.\n - Glyph extents for fonts synthetic bold/slant are now accurately\n calculated.\n - Various build fixes.\n - Include bidi mirroring variants of the requested codepoints\n when subsetting. The new HB_SUBSET_FLAGS_NO_BIDI_CLOSURE can be\n used to disable this behaviour.\n - Various bug fixes.\n - Various build fixes and improvements.\n - Various test suite improvements.\n - The change in version 10.3.0 to apply “trak” table tracking\n values to glyph advances directly has been reverted as it\n required every font functions implementation to handle it,\n which breaks existing custom font functions. Tracking is\n instead back to being applied during shaping.\n - When directwrite integration is enabled, we now link to\n dwrite.dll instead of dynamically loading it.\n - A new experimental APIs for getting raw “CFF” and “CFF2”\n CharStrings.\n - We now provide manpages for the various command line utilities.\n Building manpages requires “help2man” and will be skipped if it\n is not present.\n - The command line utilities now set different return value for\n different kinds of failures. Details are provided in the\n manpages.\n - Various fixes and improvements to fontations font functions.\n - All shaping operations using the ot shaper have become memory\n allocation-free.\n - Glyph extents returned by hb-ot and hb-ft font functions are\n now rounded in stead of flooring/ceiling them, which also\n matches what other font libraries do.\n - Fix “AAT” deleted glyph marks interfering with fallback mark\n positioning.\n - Glyph outlines emboldening have been moved out of hb-ot and\n hb-ft font functions to the HarfBuzz font layer, so that it\n works with any font functions implementation.\n - Fix our fallback C++11 atomics integration, which seems to not\n be widely used.\n - Various testing fixes and improvements.\n - Various subsetting fixes and improvements.\n - Various other fixes and improvements.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-423", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20762-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20762-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620762-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20762-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024824.html" }, { "category": "self", "summary": "SUSE Bug 1256459", "url": "https://bugzilla.suse.com/1256459" }, { "category": "self", "summary": "SUSE CVE CVE-2026-22693 page", "url": "https://www.suse.com/security/cve/CVE-2026-22693/" } ], "title": "Security update for harfbuzz", "tracking": { "current_release_date": "2026-10-05T09:16:21Z", "generator": { "date": "2026-03-20T15:24:11Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20762-1", "initial_release_date": "2026-03-20T15:24:11Z", "revision_history": [ { "date": "2026-03-20T15:24:11Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-20T15:24:11Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-03-20T15:24:11Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:40Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:50Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:46Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:22Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:52Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:59Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-21T08:47:04Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:21Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:54Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:35Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:31Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:30Z", "number": "15", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:21Z", "number": "16", "summary": "unknown changes" } ], "status": "final", "version": "16" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "product": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "product_id": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-gobject0@11.4.5-160000.1.1?arch=aarch64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "product": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "product_id": "libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-subset0@11.4.5-160000.1.1?arch=aarch64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "product": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "product_id": "libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz0@11.4.5-160000.1.1?arch=aarch64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "product": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "product_id": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-HarfBuzz-0_0@11.4.5-160000.1.1?arch=aarch64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "product": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "product_id": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-gobject0@11.4.5-160000.1.1?arch=ppc64le&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "product": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "product_id": "libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-subset0@11.4.5-160000.1.1?arch=ppc64le&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "product": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "product_id": "libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz0@11.4.5-160000.1.1?arch=ppc64le&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "product": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "product_id": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-HarfBuzz-0_0@11.4.5-160000.1.1?arch=ppc64le&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "product": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "product_id": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-gobject0@11.4.5-160000.1.1?arch=s390x&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "product": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "product_id": "libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-subset0@11.4.5-160000.1.1?arch=s390x&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz0-0:11.4.5-160000.1.1.s390x", "product": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.s390x", "product_id": "libharfbuzz0-0:11.4.5-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz0@11.4.5-160000.1.1?arch=s390x&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "product": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "product_id": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-HarfBuzz-0_0@11.4.5-160000.1.1?arch=s390x&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "product": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "product_id": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-gobject0@11.4.5-160000.1.1?arch=x86_64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "product": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "product_id": "libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz-subset0@11.4.5-160000.1.1?arch=x86_64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "product": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "product_id": "libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libharfbuzz0@11.4.5-160000.1.1?arch=x86_64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64", "product": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64", "product_id": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:harfbuzz_project:harfbuzz:11.4.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/typelib-1_0-HarfBuzz-0_0@11.4.5-160000.1.1?arch=x86_64&upstream=harfbuzz-0:11.4.5-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64" }, "product_reference": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le" }, "product_reference": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x" }, "product_reference": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64" }, "product_reference": "libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64" }, "product_reference": "libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le" }, "product_reference": "libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x" }, "product_reference": "libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64" }, "product_reference": "libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.aarch64" }, "product_reference": "libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.ppc64le" }, "product_reference": "libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.s390x" }, "product_reference": "libharfbuzz0-0:11.4.5-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libharfbuzz0-0:11.4.5-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.x86_64" }, "product_reference": "libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64" }, "product_reference": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le" }, "product_reference": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x" }, "product_reference": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64" }, "product_reference": "typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-22693", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-22693" } ], "notes": [ { "category": "general", "text": "HarfBuzz is a text shaping engine. Prior to version 12.3.0, a null pointer dereference vulnerability exists in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check if hb_malloc returns NULL before using placement new to construct an object at the returned pointer address. When hb_malloc fails to allocate memory (which can occur in low-memory conditions or when using custom allocators that simulate allocation failures), it returns NULL. The code then attempts to call the constructor on this null pointer using placement new syntax, resulting in undefined behavior and a Segmentation Fault. This issue has been patched in version 12.3.0.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-22693", "url": "https://www.suse.com/security/cve/CVE-2026-22693" }, { "category": "external", "summary": "SUSE Bug 1256459 for CVE-2026-22693", "url": "https://bugzilla.suse.com/1256459" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz-gobject0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz-subset0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:libharfbuzz0-0:11.4.5-160000.1.1.x86_64", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.aarch64", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.s390x", "SUSE Linux Micro 6.2:typelib-1_0-HarfBuzz-0_0-0:11.4.5-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T15:24:11Z", "details": "moderate" } ], "title": "CVE-2026-22693" } ] } ``` ## [suse-su-2026:20761-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20761-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for python-tornado6", "title": "Title of the patch" }, { "category": "description", "text": "This update for python-tornado6 fixes the following issues:\n\n- CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553).\n- incomplete validation of cookie attributes allows for injection of user-controlled values in other cookie attributes\n (bsc#1259630).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-420", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20761-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20761-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620761-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20761-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024825.html" }, { "category": "self", "summary": "SUSE Bug 1259553", "url": "https://bugzilla.suse.com/1259553" }, { "category": "self", "summary": "SUSE Bug 1259630", "url": "https://bugzilla.suse.com/1259630" }, { "category": "self", "summary": "SUSE CVE CVE-2026-31958 page", "url": "https://www.suse.com/security/cve/CVE-2026-31958/" } ], "title": "Security update for python-tornado6", "tracking": { "current_release_date": "2026-10-05T09:16:20Z", "generator": { "date": "2026-03-20T10:55:14Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20761-1", "initial_release_date": "2026-03-20T10:55:14Z", "revision_history": [ { "date": "2026-03-20T10:55:14Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-20T10:55:14Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:39Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:49Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:45Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:20Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:51Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:58Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:47:02Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:20Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:53Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:33Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:31Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:28Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:20Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "python313-tornado6-0:6.5-160000.4.1.aarch64", "product": { "name": "python313-tornado6-0:6.5-160000.4.1.aarch64", "product_id": "python313-tornado6-0:6.5-160000.4.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:tornadoweb:tornado:6.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/python313-tornado6@6.5-160000.4.1?arch=aarch64&upstream=python-tornado6-0:6.5-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "python313-tornado6-0:6.5-160000.4.1.ppc64le", "product": { "name": "python313-tornado6-0:6.5-160000.4.1.ppc64le", "product_id": "python313-tornado6-0:6.5-160000.4.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:tornadoweb:tornado:6.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/python313-tornado6@6.5-160000.4.1?arch=ppc64le&upstream=python-tornado6-0:6.5-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python313-tornado6-0:6.5-160000.4.1.s390x", "product": { "name": "python313-tornado6-0:6.5-160000.4.1.s390x", "product_id": "python313-tornado6-0:6.5-160000.4.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:tornadoweb:tornado:6.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/python313-tornado6@6.5-160000.4.1?arch=s390x&upstream=python-tornado6-0:6.5-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "python313-tornado6-0:6.5-160000.4.1.x86_64", "product": { "name": "python313-tornado6-0:6.5-160000.4.1.x86_64", "product_id": "python313-tornado6-0:6.5-160000.4.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:tornadoweb:tornado:6.5:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/python313-tornado6@6.5-160000.4.1?arch=x86_64&upstream=python-tornado6-0:6.5-160000.4.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python313-tornado6-0:6.5-160000.4.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.aarch64" }, "product_reference": "python313-tornado6-0:6.5-160000.4.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tornado6-0:6.5-160000.4.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.ppc64le" }, "product_reference": "python313-tornado6-0:6.5-160000.4.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tornado6-0:6.5-160000.4.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.s390x" }, "product_reference": "python313-tornado6-0:6.5-160000.4.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "python313-tornado6-0:6.5-160000.4.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.x86_64" }, "product_reference": "python313-tornado6-0:6.5-160000.4.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-31958", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-31958" } ], "notes": [ { "category": "general", "text": "Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsing occurs synchronously on the main thread, this creates the possibility of denial-of-service due to the cost of parsing very large multipart bodies with many parts. This vulnerability is fixed in 6.5.5.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.aarch64", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.ppc64le", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.s390x", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-31958", "url": "https://www.suse.com/security/cve/CVE-2026-31958" }, { "category": "external", "summary": "SUSE Bug 1259552 for CVE-2026-31958", "url": "https://bugzilla.suse.com/1259552" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.aarch64", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.ppc64le", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.s390x", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.aarch64", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.ppc64le", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.s390x", "SUSE Linux Micro 6.2:python313-tornado6-0:6.5-160000.4.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T10:55:14Z", "details": "important" } ], "title": "CVE-2026-31958" } ] } ``` ## [suse-su-2026:20760-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20760-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for curl", "title": "Title of the patch" }, { "category": "description", "text": "This update for curl fixes the following issues:\n\n- CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362).\n- CVE-2026-3783: token leak with redirect and netrc (bsc#1259363).\n- CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259364).\n- CVE-2026-3805: use after free in SMB connection reuse (bsc#1259365).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-418", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20760-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20760-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620760-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20760-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024826.html" }, { "category": "self", "summary": "SUSE Bug 1259362", "url": "https://bugzilla.suse.com/1259362" }, { "category": "self", "summary": "SUSE Bug 1259363", "url": "https://bugzilla.suse.com/1259363" }, { "category": "self", "summary": "SUSE Bug 1259364", "url": "https://bugzilla.suse.com/1259364" }, { "category": "self", "summary": "SUSE Bug 1259365", "url": "https://bugzilla.suse.com/1259365" }, { "category": "self", "summary": "SUSE CVE CVE-2026-1965 page", "url": "https://www.suse.com/security/cve/CVE-2026-1965/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-3783 page", "url": "https://www.suse.com/security/cve/CVE-2026-3783/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-3784 page", "url": "https://www.suse.com/security/cve/CVE-2026-3784/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-3805 page", "url": "https://www.suse.com/security/cve/CVE-2026-3805/" } ], "title": "Security update for curl", "tracking": { "current_release_date": "2026-10-05T09:16:19Z", "generator": { "date": "2026-03-20T09:37:16Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20760-1", "initial_release_date": "2026-03-20T09:37:16Z", "revision_history": [ { "date": "2026-03-20T09:37:16Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-20T09:37:16Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:38Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:48Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-15T16:09:08Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:44Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:19Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:50Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:56Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-21T08:47:01Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:19Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:52Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:32Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:30Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:27Z", "number": "15", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:19Z", "number": "16", "summary": "unknown changes" } ], "status": "final", "version": "16" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "curl-0:8.14.1-160000.5.1.aarch64", "product": { "name": "curl-0:8.14.1-160000.5.1.aarch64", "product_id": "curl-0:8.14.1-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/curl@8.14.1-160000.5.1?arch=aarch64&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libcurl4-0:8.14.1-160000.5.1.aarch64", "product": { "name": "libcurl4-0:8.14.1-160000.5.1.aarch64", "product_id": "libcurl4-0:8.14.1-160000.5.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libcurl4@8.14.1-160000.5.1?arch=aarch64&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "curl-0:8.14.1-160000.5.1.ppc64le", "product": { "name": "curl-0:8.14.1-160000.5.1.ppc64le", "product_id": "curl-0:8.14.1-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/curl@8.14.1-160000.5.1?arch=ppc64le&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libcurl4-0:8.14.1-160000.5.1.ppc64le", "product": { "name": "libcurl4-0:8.14.1-160000.5.1.ppc64le", "product_id": "libcurl4-0:8.14.1-160000.5.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libcurl4@8.14.1-160000.5.1?arch=ppc64le&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "curl-0:8.14.1-160000.5.1.s390x", "product": { "name": "curl-0:8.14.1-160000.5.1.s390x", "product_id": "curl-0:8.14.1-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/curl@8.14.1-160000.5.1?arch=s390x&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libcurl4-0:8.14.1-160000.5.1.s390x", "product": { "name": "libcurl4-0:8.14.1-160000.5.1.s390x", "product_id": "libcurl4-0:8.14.1-160000.5.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libcurl4@8.14.1-160000.5.1?arch=s390x&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "curl-0:8.14.1-160000.5.1.x86_64", "product": { "name": "curl-0:8.14.1-160000.5.1.x86_64", "product_id": "curl-0:8.14.1-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/curl@8.14.1-160000.5.1?arch=x86_64&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } }, { "category": "product_version", "name": "libcurl4-0:8.14.1-160000.5.1.x86_64", "product": { "name": "libcurl4-0:8.14.1-160000.5.1.x86_64", "product_id": "libcurl4-0:8.14.1-160000.5.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:haxx:curl:8.14.1:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/libcurl4@8.14.1-160000.5.1?arch=x86_64&upstream=curl-0:8.14.1-160000.5.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "curl-0:8.14.1-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64" }, "product_reference": "curl-0:8.14.1-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:8.14.1-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le" }, "product_reference": "curl-0:8.14.1-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:8.14.1-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x" }, "product_reference": "curl-0:8.14.1-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "curl-0:8.14.1-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64" }, "product_reference": "curl-0:8.14.1-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:8.14.1-160000.5.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64" }, "product_reference": "libcurl4-0:8.14.1-160000.5.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:8.14.1-160000.5.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le" }, "product_reference": "libcurl4-0:8.14.1-160000.5.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:8.14.1-160000.5.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x" }, "product_reference": "libcurl4-0:8.14.1-160000.5.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libcurl4-0:8.14.1-160000.5.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" }, "product_reference": "libcurl4-0:8.14.1-160000.5.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-1965", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-1965" } ], "notes": [ { "category": "general", "text": "libcurl can in some circumstances reuse the wrong connection when asked to do\nan Negotiate-authenticated HTTP or HTTPS request.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criterion must first be met. Due to a\nlogical error in the code, a request that was issued by an application could\nwrongfully reuse an existing connection to the same server that was\nauthenticated using different credentials. One underlying reason being that\nNegotiate sometimes authenticates *connections* and not *requests*, contrary\nto how HTTP is designed to work.\n\nAn application that allows Negotiate authentication to a server (that responds\nwanting Negotiate) with `user1:password1` and then does another operation to\nthe same server also using Negotiate but with `user2:password2` (while the\nprevious connection is still alive) - the second request wrongly reused the\nsame connection and since it then sees that the Negotiate negotiation is\nalready made, it sends the request over that connection thinking it uses\nthe user2 credentials when it is in fact still using the connection\nauthenticated for user1...\n\nThe set of authentication methods to use is set with `CURLOPT_HTTPAUTH`.\n\nApplications can disable libcurl's reuse of connections and thus mitigate this\nproblem, by using one of the following libcurl options to alter how\nconnections are or are not reused: `CURLOPT_FRESH_CONNECT`,\n`CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the\ncurl_multi API).", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-1965", "url": "https://www.suse.com/security/cve/CVE-2026-1965" }, { "category": "external", "summary": "SUSE Bug 1259362 for CVE-2026-1965", "url": "https://bugzilla.suse.com/1259362" }, { "category": "external", "summary": "SUSE Bug 1262632 for CVE-2026-1965", "url": "https://bugzilla.suse.com/1262632" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T09:37:16Z", "details": "important" } ], "title": "CVE-2026-1965" }, { "cve": "CVE-2026-3783", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-3783" } ], "notes": [ { "category": "general", "text": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer\nperforms a redirect to a second URL, curl could leak that token to the second\nhostname under some circumstances.\n\nIf the hostname that the first request is redirected to has information in the\nused .netrc file, with either of the `machine` or `default` keywords, curl\nwould pass on the bearer token set for the first host also to the second one.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-3783", "url": "https://www.suse.com/security/cve/CVE-2026-3783" }, { "category": "external", "summary": "SUSE Bug 1259363 for CVE-2026-3783", "url": "https://bugzilla.suse.com/1259363" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T09:37:16Z", "details": "moderate" } ], "title": "CVE-2026-3783" }, { "cve": "CVE-2026-3784", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-3784" } ], "notes": [ { "category": "general", "text": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a\nserver, even if the new request uses different credentials for the HTTP proxy.\nThe proper behavior is to create or use a separate connection.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-3784", "url": "https://www.suse.com/security/cve/CVE-2026-3784" }, { "category": "external", "summary": "SUSE Bug 1259364 for CVE-2026-3784", "url": "https://bugzilla.suse.com/1259364" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T09:37:16Z", "details": "moderate" } ], "title": "CVE-2026-3784" }, { "cve": "CVE-2026-3805", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-3805" } ], "notes": [ { "category": "general", "text": "When doing a second SMB request to the same host again, curl would wrongly use\na data pointer pointing into already freed memory.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-3805", "url": "https://www.suse.com/security/cve/CVE-2026-3805" }, { "category": "external", "summary": "SUSE Bug 1259365 for CVE-2026-3805", "url": "https://bugzilla.suse.com/1259365" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 2.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:curl-0:8.14.1-160000.5.1.x86_64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.aarch64", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.ppc64le", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.s390x", "SUSE Linux Micro 6.2:libcurl4-0:8.14.1-160000.5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T09:37:16Z", "details": "moderate" } ], "title": "CVE-2026-3805" } ] } ``` ## [suse-su-2026:20759-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20759-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for vim", "title": "Title of the patch" }, { "category": "description", "text": "This update for vim fixes the following issues:\n\n- Update Vim to version 9.2.0110 that includes security fixes for:\n* CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).\n* CVE-2026-26269: stack buffer overflow in Vim's NetBeans integration when processing the specialKeys command (bsc#1258229).\n* CVE-2025-53906: path traversal in Vim's zip.vim plugin (bsc#1246602).\n\n- Other changes:\n* Add wayland-client to BuildRequires and enable Wayland support.\n* Add Wayland include path to CFLAGS to fix clipboard compilation.\n* Package new Swedish (sv) man pages and clean up duplicate encodings (sv.ISO8859-1 and sv.UTF-8).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-417", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20759-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20759-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620759-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20759-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024827.html" }, { "category": "self", "summary": "SUSE Bug 1246602", "url": "https://bugzilla.suse.com/1246602" }, { "category": "self", "summary": "SUSE Bug 1258229", "url": "https://bugzilla.suse.com/1258229" }, { "category": "self", "summary": "SUSE Bug 1259051", "url": "https://bugzilla.suse.com/1259051" }, { "category": "self", "summary": "SUSE CVE CVE-2025-53906 page", "url": "https://www.suse.com/security/cve/CVE-2025-53906/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-26269 page", "url": "https://www.suse.com/security/cve/CVE-2026-26269/" }, { "category": "self", "summary": "SUSE CVE CVE-2026-28417 page", "url": "https://www.suse.com/security/cve/CVE-2026-28417/" } ], "title": "Security update for vim", "tracking": { "current_release_date": "2026-10-05T09:16:18Z", "generator": { "date": "2026-03-20T03:15:49Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20759-1", "initial_release_date": "2026-03-20T03:15:49Z", "revision_history": [ { "date": "2026-03-20T03:15:49Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-20T03:15:49Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:37Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:47Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:41Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:17Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:48Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:55Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:46:59Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:18Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:51Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:31Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:29Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:26Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:18Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "vim-small-0:9.2.0110-160000.1.1.aarch64", "product": { "name": "vim-small-0:9.2.0110-160000.1.1.aarch64", "product_id": "vim-small-0:9.2.0110-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:vim:vim:9.2.0110:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/vim-small@9.2.0110-160000.1.1?arch=aarch64&upstream=vim-0:9.2.0110-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "vim-data-common-0:9.2.0110-160000.1.1.noarch", "product": { "name": "vim-data-common-0:9.2.0110-160000.1.1.noarch", "product_id": "vim-data-common-0:9.2.0110-160000.1.1.noarch", "product_identification_helper": { "cpe": "cpe:2.3:a:vim:vim:9.2.0110:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/vim-data-common@9.2.0110-160000.1.1?arch=noarch&upstream=vim-0:9.2.0110-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "vim-small-0:9.2.0110-160000.1.1.ppc64le", "product": { "name": "vim-small-0:9.2.0110-160000.1.1.ppc64le", "product_id": "vim-small-0:9.2.0110-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:vim:vim:9.2.0110:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/vim-small@9.2.0110-160000.1.1?arch=ppc64le&upstream=vim-0:9.2.0110-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "vim-small-0:9.2.0110-160000.1.1.s390x", "product": { "name": "vim-small-0:9.2.0110-160000.1.1.s390x", "product_id": "vim-small-0:9.2.0110-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:vim:vim:9.2.0110:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/vim-small@9.2.0110-160000.1.1?arch=s390x&upstream=vim-0:9.2.0110-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "vim-small-0:9.2.0110-160000.1.1.x86_64", "product": { "name": "vim-small-0:9.2.0110-160000.1.1.x86_64", "product_id": "vim-small-0:9.2.0110-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:vim:vim:9.2.0110:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/vim-small@9.2.0110-160000.1.1?arch=x86_64&upstream=vim-0:9.2.0110-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "vim-data-common-0:9.2.0110-160000.1.1.noarch as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch" }, "product_reference": "vim-data-common-0:9.2.0110-160000.1.1.noarch", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "vim-small-0:9.2.0110-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64" }, "product_reference": "vim-small-0:9.2.0110-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "vim-small-0:9.2.0110-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le" }, "product_reference": "vim-small-0:9.2.0110-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "vim-small-0:9.2.0110-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x" }, "product_reference": "vim-small-0:9.2.0110-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "vim-small-0:9.2.0110-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" }, "product_reference": "vim-small-0:9.2.0110-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-53906", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-53906" } ], "notes": [ { "category": "general", "text": "Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successfully exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive. The victim must edit such a file using Vim which will reveal the filename and the file content, a careful user may suspect some strange things going on. Successful exploitation could results in the ability to execute arbitrary commands on the underlying operating system. Version 9.1.1551 contains a patch for the vulnerability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-53906", "url": "https://www.suse.com/security/cve/CVE-2025-53906" }, { "category": "external", "summary": "SUSE Bug 1246602 for CVE-2025-53906", "url": "https://bugzilla.suse.com/1246602" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T03:15:49Z", "details": "moderate" } ], "title": "CVE-2025-53906" }, { "cve": "CVE-2026-26269", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-26269" } ], "notes": [ { "category": "general", "text": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-26269", "url": "https://www.suse.com/security/cve/CVE-2026-26269" }, { "category": "external", "summary": "SUSE Bug 1258229 for CVE-2026-26269", "url": "https://bugzilla.suse.com/1258229" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T03:15:49Z", "details": "moderate" } ], "title": "CVE-2026-26269" }, { "cve": "CVE-2026-28417", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2026-28417" } ], "notes": [ { "category": "general", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2026-28417", "url": "https://www.suse.com/security/cve/CVE-2026-28417" }, { "category": "external", "summary": "SUSE Bug 1259051 for CVE-2026-28417", "url": "https://bugzilla.suse.com/1259051" }, { "category": "external", "summary": "SUSE Bug 1262591 for CVE-2026-28417", "url": "https://bugzilla.suse.com/1262591" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:vim-data-common-0:9.2.0110-160000.1.1.noarch", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.aarch64", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.s390x", "SUSE Linux Micro 6.2:vim-small-0:9.2.0110-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-20T03:15:49Z", "details": "moderate" } ], "title": "CVE-2026-28417" } ] } ``` ## [suse-su-2026:20758-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20758-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for ucode-intel", "title": "Title of the patch" }, { "category": "description", "text": "This update for ucode-intel fixes the following issues:\n\n- Intel CPU Microcode was updated to the 20260210 release (bsc#1258046):\n\n - CVE-2024-24853: Updated fix for incorrect behavior order in transition\n between executive monitor and SMI transfer monitor (STM) in some Intel(R)\n Processor may allow a privileged user to potentially enable escalation\n of privilege via local access (bsc#1229129).\n\n - CVE-2025-31648: Improper handling of values in the\n microcode flow for some Intel Processor Family may allow\n an escalation of privilege (bsc#1258046).\n\n- Intel CPU Microcode was updated to the 20251111 release (bsc#1253319):\n\n - Update for functional issues.\n\n- switch the supplements to use supplements + kernel to allow\n moving a installation to Intel hardware (bsc#1249138)\n\n- Intel CPU Microcode was updated to the 20241029 release (bsc#1230400):\n\n - Update for functional issues.\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-415", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20758-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20758-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620758-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20758-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024828.html" }, { "category": "self", "summary": "SUSE Bug 1229129", "url": "https://bugzilla.suse.com/1229129" }, { "category": "self", "summary": "SUSE Bug 1230400", "url": "https://bugzilla.suse.com/1230400" }, { "category": "self", "summary": "SUSE Bug 1249138", "url": "https://bugzilla.suse.com/1249138" }, { "category": "self", "summary": "SUSE Bug 1253319", "url": "https://bugzilla.suse.com/1253319" }, { "category": "self", "summary": "SUSE Bug 1258046", "url": "https://bugzilla.suse.com/1258046" }, { "category": "self", "summary": "SUSE CVE CVE-2024-24853 page", "url": "https://www.suse.com/security/cve/CVE-2024-24853/" }, { "category": "self", "summary": "SUSE CVE CVE-2025-31648 page", "url": "https://www.suse.com/security/cve/CVE-2025-31648/" } ], "title": "Security update for ucode-intel", "tracking": { "current_release_date": "2026-10-05T09:16:17Z", "generator": { "date": "2026-03-19T09:31:38Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20758-1", "initial_release_date": "2026-03-19T09:31:38Z", "revision_history": [ { "date": "2026-03-19T09:31:38Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-19T09:31:38Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:36Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:46Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:39Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:16Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:47Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:54Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:46:57Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:17Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:50Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:30Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:28Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:25Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:17Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "ucode-intel-0:20260210-160000.1.1.x86_64", "product": { "name": "ucode-intel-0:20260210-160000.1.1.x86_64", "product_id": "ucode-intel-0:20260210-160000.1.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/ucode-intel@20260210-160000.1.1?arch=x86_64&upstream=ucode-intel-0:20260210-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "ucode-intel-0:20260210-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" }, "product_reference": "ucode-intel-0:20260210-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-24853", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-24853" } ], "notes": [ { "category": "general", "text": "Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-24853", "url": "https://www.suse.com/security/cve/CVE-2024-24853" }, { "category": "external", "summary": "SUSE Bug 1229129 for CVE-2024-24853", "url": "https://bugzilla.suse.com/1229129" }, { "category": "external", "summary": "SUSE Bug 1230491 for CVE-2024-24853", "url": "https://bugzilla.suse.com/1230491" }, { "category": "external", "summary": "SUSE Bug 1258046 for CVE-2024-24853", "url": "https://bugzilla.suse.com/1258046" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-19T09:31:38Z", "details": "important" } ], "title": "CVE-2024-24853" }, { "cve": "CVE-2025-31648", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-31648" } ], "notes": [ { "category": "general", "text": "Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-31648", "url": "https://www.suse.com/security/cve/CVE-2025-31648" }, { "category": "external", "summary": "SUSE Bug 1258046 for CVE-2025-31648", "url": "https://bugzilla.suse.com/1258046" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.9, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:ucode-intel-0:20260210-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-19T09:31:38Z", "details": "moderate" } ], "title": "CVE-2025-31648" } ] } ``` ## [suse-su-2026:20756-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20756-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for libsodium", "title": "Title of the patch" }, { "category": "description", "text": "This update for libsodium fixes the following issues:\n\n- CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-413", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20756-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20756-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620756-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20756-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024829.html" }, { "category": "self", "summary": "SUSE Bug 1256070", "url": "https://bugzilla.suse.com/1256070" }, { "category": "self", "summary": "SUSE CVE CVE-2025-15444 page", "url": "https://www.suse.com/security/cve/CVE-2025-15444/" } ], "title": "Security update for libsodium", "tracking": { "current_release_date": "2026-10-05T09:16:16Z", "generator": { "date": "2026-03-19T08:17:20Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20756-1", "initial_release_date": "2026-03-19T08:17:20Z", "revision_history": [ { "date": "2026-03-19T08:17:20Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-19T08:17:20Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:35Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:44Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:38Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:15Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:46Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:53Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:46:56Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:17Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:49Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:29Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:27Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:23Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:16Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libsodium26-0:1.0.20-160000.3.1.aarch64", "product": { "name": "libsodium26-0:1.0.20-160000.3.1.aarch64", "product_id": "libsodium26-0:1.0.20-160000.3.1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/suse/libsodium26@1.0.20-160000.3.1?arch=aarch64&upstream=libsodium-0:1.0.20-160000.3.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libsodium26-0:1.0.20-160000.3.1.ppc64le", "product": { "name": "libsodium26-0:1.0.20-160000.3.1.ppc64le", "product_id": "libsodium26-0:1.0.20-160000.3.1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/suse/libsodium26@1.0.20-160000.3.1?arch=ppc64le&upstream=libsodium-0:1.0.20-160000.3.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libsodium26-0:1.0.20-160000.3.1.s390x", "product": { "name": "libsodium26-0:1.0.20-160000.3.1.s390x", "product_id": "libsodium26-0:1.0.20-160000.3.1.s390x", "product_identification_helper": { "purl": "pkg:rpm/suse/libsodium26@1.0.20-160000.3.1?arch=s390x&upstream=libsodium-0:1.0.20-160000.3.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libsodium26-0:1.0.20-160000.3.1.x86_64", "product": { "name": "libsodium26-0:1.0.20-160000.3.1.x86_64", "product_id": "libsodium26-0:1.0.20-160000.3.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/suse/libsodium26@1.0.20-160000.3.1?arch=x86_64&upstream=libsodium-0:1.0.20-160000.3.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libsodium26-0:1.0.20-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.aarch64" }, "product_reference": "libsodium26-0:1.0.20-160000.3.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libsodium26-0:1.0.20-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.ppc64le" }, "product_reference": "libsodium26-0:1.0.20-160000.3.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libsodium26-0:1.0.20-160000.3.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.s390x" }, "product_reference": "libsodium26-0:1.0.20-160000.3.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "libsodium26-0:1.0.20-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.x86_64" }, "product_reference": "libsodium26-0:1.0.20-160000.3.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-15444", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2025-15444" } ], "notes": [ { "category": "general", "text": "Crypt::Sodium::XS module versions prior to 0.000042, for Perl, include a vulnerable version of libsodium\n\nlibsodium <= 1.0.20 or a version of libsodium released before December 30, 2025 contains a vulnerability documented as CVE-2025-69277 https://www.cve.org/CVERecord?id=CVE-2025-69277 .\n\nThe libsodium vulnerability states:\n\nIn atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.\n\n0.000042 includes a version of libsodium updated to 1.0.20-stable, released January 3, 2026, which includes a fix for the vulnerability.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.aarch64", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.ppc64le", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.s390x", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2025-15444", "url": "https://www.suse.com/security/cve/CVE-2025-15444" }, { "category": "external", "summary": "SUSE Bug 1256070 for CVE-2025-15444", "url": "https://bugzilla.suse.com/1256070" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.aarch64", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.ppc64le", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.s390x", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.aarch64", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.ppc64le", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.s390x", "SUSE Linux Micro 6.2:libsodium26-0:1.0.20-160000.3.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-19T08:17:20Z", "details": "moderate" } ], "title": "CVE-2025-15444" } ] } ``` ## [suse-su-2026:20755-1](https://vulnerability.circl.lu/vuln/suse-su-2026%3A20755-1) ```json { "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for librsvg", "title": "Title of the patch" }, { "category": "description", "text": "This update for librsvg fixes the following issues:\n\nUpdate to version 2.60.2:\n\n- CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867).\n- CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).\n", "title": "Description of the patch" }, { "category": "details", "text": "SUSE-SL-Micro-6.2-410", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20755-1.json" }, { "category": "self", "summary": "URL for SUSE-SU-2026:20755-1", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620755-1/" }, { "category": "self", "summary": "E-Mail link for SUSE-SU-2026:20755-1", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024830.html" }, { "category": "self", "summary": "SUSE Bug 1229376", "url": "https://bugzilla.suse.com/1229376" }, { "category": "self", "summary": "SUSE Bug 1229950", "url": "https://bugzilla.suse.com/1229950" }, { "category": "self", "summary": "SUSE Bug 1243867", "url": "https://bugzilla.suse.com/1243867" }, { "category": "self", "summary": "SUSE CVE CVE-2024-12224 page", "url": "https://www.suse.com/security/cve/CVE-2024-12224/" }, { "category": "self", "summary": "SUSE CVE CVE-2024-43806 page", "url": "https://www.suse.com/security/cve/CVE-2024-43806/" } ], "title": "Security update for librsvg", "tracking": { "current_release_date": "2026-10-05T09:16:15Z", "generator": { "date": "2026-03-19T08:09:57Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "SUSE-SU-2026:20755-1", "initial_release_date": "2026-03-19T08:09:57Z", "revision_history": [ { "date": "2026-03-19T08:09:57Z", "number": "1", "summary": "Current version" }, { "date": "2026-03-19T08:09:57Z", "number": "2", "summary": "unknown changes" }, { "date": "2026-09-15T08:56:34Z", "number": "3", "summary": "unknown changes" }, { "date": "2026-09-15T09:25:43Z", "number": "4", "summary": "unknown changes" }, { "date": "2026-09-16T18:44:37Z", "number": "5", "summary": "unknown changes" }, { "date": "2026-09-16T19:35:14Z", "number": "6", "summary": "unknown changes" }, { "date": "2026-09-17T15:31:45Z", "number": "7", "summary": "unknown changes" }, { "date": "2026-09-20T18:36:51Z", "number": "8", "summary": "unknown changes" }, { "date": "2026-09-21T08:46:55Z", "number": "9", "summary": "unknown changes" }, { "date": "2026-09-22T12:28:16Z", "number": "10", "summary": "unknown changes" }, { "date": "2026-09-22T16:07:48Z", "number": "11", "summary": "unknown changes" }, { "date": "2026-09-27T11:04:28Z", "number": "12", "summary": "unknown changes" }, { "date": "2026-09-28T07:32:27Z", "number": "13", "summary": "unknown changes" }, { "date": "2026-10-04T11:08:22Z", "number": "14", "summary": "unknown changes" }, { "date": "2026-10-05T09:16:15Z", "number": "15", "summary": "unknown changes" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "product": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "product_id": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/gdk-pixbuf-loader-rsvg@2.60.2-160000.1.1?arch=aarch64&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "product": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "product_id": "librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/librsvg-2-2@2.60.2-160000.1.1?arch=aarch64&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "product": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "product_id": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/gdk-pixbuf-loader-rsvg@2.60.2-160000.1.1?arch=ppc64le&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "product": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "product_id": "librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/librsvg-2-2@2.60.2-160000.1.1?arch=ppc64le&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "product": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "product_id": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/gdk-pixbuf-loader-rsvg@2.60.2-160000.1.1?arch=s390x&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "librsvg-2-2-0:2.60.2-160000.1.1.s390x", "product": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.s390x", "product_id": "librsvg-2-2-0:2.60.2-160000.1.1.s390x", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/librsvg-2-2@2.60.2-160000.1.1?arch=s390x&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "product": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "product_id": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/gdk-pixbuf-loader-rsvg@2.60.2-160000.1.1?arch=x86_64&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } }, { "category": "product_version", "name": "librsvg-2-2-0:2.60.2-160000.1.1.x86_64", "product": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.x86_64", "product_id": "librsvg-2-2-0:2.60.2-160000.1.1.x86_64", "product_identification_helper": { "cpe": "cpe:2.3:a:gnome:librsvg:2.60.2:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/librsvg-2-2@2.60.2-160000.1.1?arch=x86_64&upstream=librsvg-0:2.60.2-160000.1.1.src.rpm" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux Micro 6.2", "product": { "name": "SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:16:16.0:transactional" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64" }, "product_reference": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le" }, "product_reference": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x" }, "product_reference": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64" }, "product_reference": "gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.aarch64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64" }, "product_reference": "librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.ppc64le as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le" }, "product_reference": "librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.s390x as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x" }, "product_reference": "librsvg-2-2-0:2.60.2-160000.1.1.s390x", "relates_to_product_reference": "SUSE Linux Micro 6.2" }, { "category": "default_component_of", "full_product_name": { "name": "librsvg-2-2-0:2.60.2-160000.1.1.x86_64 as component of SUSE Linux Micro 6.2", "product_id": "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" }, "product_reference": "librsvg-2-2-0:2.60.2-160000.1.1.x86_64", "relates_to_product_reference": "SUSE Linux Micro 6.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-12224", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-12224" } ], "notes": [ { "category": "general", "text": "Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-12224", "url": "https://www.suse.com/security/cve/CVE-2024-12224" }, { "category": "external", "summary": "SUSE Bug 1243848 for CVE-2024-12224", "url": "https://bugzilla.suse.com/1243848" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 4.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-19T08:09:57Z", "details": "moderate" } ], "title": "CVE-2024-12224" }, { "cve": "CVE-2024-43806", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2024-43806" } ], "notes": [ { "category": "general", "text": "Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it's possible for the iterator to \"get stuck\" when an IO error is encountered. Combined with a memory over-allocation issue in `rustix::fs::Dir::read_more`, this can cause quick and unbounded memory explosion (gigabytes in a few seconds if used on a hot path) and eventually lead to an OOM crash of the application. The symptoms were initially discovered in https://github.com/imsnif/bandwhich/issues/284. That post has lots of details of our investigation. Full details can be read on the GHSA-c827-hfw6-qwvm repo advisory. If a program tries to access a directory with its file descriptor after the file has been unlinked (or any other action that leaves the `Dir` iterator in the stuck state), and the implementation does not break after seeing an error, it can cause a memory explosion. As an example, Linux's various virtual file systems (e.g. `/proc`, `/sys`) can contain directories that spontaneously pop in and out of existence. Attempting to iterate over them using `rustix::fs::Dir` directly or indirectly (e.g. with the `procfs` crate) can trigger this fault condition if the implementation decides to continue on errors. An attacker knowledgeable about the implementation details of a vulnerable target can therefore try to trigger this fault condition via any one or a combination of several available APIs. If successful, the application host will quickly run out of memory, after which the application will likely be terminated by an OOM killer, leading to denial of service. This issue has been addressed in release versions 0.35.15, 0.36.16, 0.37.25, and 0.38.19. Users are advised to upgrade. There are no known workarounds for this issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2024-43806", "url": "https://www.suse.com/security/cve/CVE-2024-43806" }, { "category": "external", "summary": "SUSE Bug 1229376 for CVE-2024-43806", "url": "https://bugzilla.suse.com/1229376" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:gdk-pixbuf-loader-rsvg-0:2.60.2-160000.1.1.x86_64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.aarch64", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.ppc64le", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.s390x", "SUSE Linux Micro 6.2:librsvg-2-2-0:2.60.2-160000.1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2026-03-19T08:09:57Z", "details": "moderate" } ], "title": "CVE-2024-43806" } ] } ```