Mehrere Probleme in erlang26 (SUSE)

Дата публикации: 12-08-2026 04:41:16

Основное содержимое страницы с новостью.

--===============5107254704065547917==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

# Security update for erlang26

Announcement ID: SUSE-SU-2026:3579-1
Release Date: 2026-08-11T14:05:55Z
Rating: important
References:

* bsc#1261726
* bsc#1266449
* bsc#1266466
* bsc#1268139
* bsc#1268141
* bsc#1268142
* bsc#1268146
* bsc#1268163
* bsc#1268164
* bsc#1270245
* bsc#1270246
* bsc#1270247
* bsc#1270250
* bsc#1270253
* bsc#1270258
* bsc#1272908
* bsc#1272909
* bsc#1272910
* bsc#1272911
* bsc#1272913
* bsc#1272914
* bsc#1272915

Cross-References:

* CVE-2026-28810
* CVE-2026-42789
* CVE-2026-42790
* CVE-2026-42792
* CVE-2026-47078
* CVE-2026-48855
* CVE-2026-48856
* CVE-2026-48858
* CVE-2026-48860
* CVE-2026-49759
* CVE-2026-49760
* CVE-2026-53422
* CVE-2026-54886
* CVE-2026-54887
* CVE-2026-54891
* CVE-2026-55737
* CVE-2026-55950
* CVE-2026-55952
* CVE-2026-55953
* CVE-2026-58227
* CVE-2026-59250
* CVE-2026-59251

CVSS scores:

* CVE-2026-28810 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-28810 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-28810 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-28810 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-42789 ( SUSE ): 9.1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-42789 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-42789 ( NVD ): 7.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-42789 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
* CVE-2026-42789 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-42790 ( SUSE ): 9.1
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-42790 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-42790 ( NVD ): 7.6

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-42790 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-42790 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
* CVE-2026-42792 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-42792 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-42792 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-42792 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-47078 ( SUSE ): 4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
* CVE-2026-47078 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
* CVE-2026-47078 ( NVD ): 4.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-48855 ( SUSE ): 2.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-48855 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-48856 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-48856 ( NVD ): 7.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-48856 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-48858 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
* CVE-2026-48858 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-48858 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-48860 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
* CVE-2026-48860 ( NVD ): 7.5

CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-48860 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
* CVE-2026-49759 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-49759 ( NVD ): 8.8

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-49759 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-49759 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
* CVE-2026-49760 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-49760 ( NVD ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-49760 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-53422 ( SUSE ): 5.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-53422 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-53422 ( NVD ): 2.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-53422 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-54886 ( SUSE ): 7.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-54886 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-54886 ( NVD ): 5.3

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54886 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-54887 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-54887 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-54887 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54887 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
* CVE-2026-54891 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-54891 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-54891 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-54891 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-55737 ( SUSE ): 5.1
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
* CVE-2026-55737 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
* CVE-2026-55737 ( NVD ): 5.1

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-55737 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-55950 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-55950 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-55950 ( NVD ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-55950 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-55952 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-55952 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-55952 ( NVD ): 8.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-55952 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-55953 ( SUSE ): 9.1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-55953 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-55953 ( NVD ): 9.1

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-55953 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-58227 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-58227 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-58227 ( NVD ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-58227 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-59250 ( SUSE ): 8.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
* CVE-2026-59250 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
* CVE-2026-59250 ( NVD ): 8.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-59251 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
* CVE-2026-59251 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
* CVE-2026-59251 ( NVD ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-59251 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

* openSUSE Leap 15.3
* Server Applications Module 15-SP7
* SUSE Linux Enterprise Real Time 15 SP7
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server 15 SP7
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves 22 vulnerabilities can now be installed.

## Description:

This update for erlang26 fixes the following issues:

* CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache
poisoning (bsc#1261726).
* CVE-2026-42789: `public_key` application accepts non-CA certificates as
intermediate issuers and this enables chain forgery (bsc#1266449).
* CVE-2026-42790: Name constraints and `Subject CommonName` fallback in TLS
hostname verification allows for certificate forgery by MITM attacker
(bsc#1266466).
* CVE-2026-42792: permanent `epmd` DoS via connection slot exhaustion due to
improper handling of exceptional conditions (bsc#1272908).
* CVE-2026-47078: relative path traversal in `zip:unzip/zip:extract` via
`check_dir_level` depth-counter bypass (bsc#1272909).
* CVE-2026-48855: SFTP `READLINK` response leaks absolute backend filesystem
path when root is configured (bsc#1268139).
* CVE-2026-48856: `httpc` leaks `Authorization` headers to cross-origin
redirect targets (bsc#1268141).
* CVE-2026-48858: server-side request forgery allows FTP bounce attacks and
SSRF via an unvalidated `PASV` response IP address (bsc#1268142).
* CVE-2026-48860: `ssl` (`inet_tls_dist` module) allows unauthenticated
bypass
of the distribution-over-TLS LAN allowlist (bsc#1268146).
* CVE-2026-49759: unbounded stack buffer overflow in SCTP error cause parsing
in `inet_drv` (bsc#1268163).
* CVE-2026-49760: stack buffer overflow in `ei_s_print_term` at very large
integer (bsc#1268164).
* CVE-2026-53422: SFTP `REALPATH` path-existence oracle allows filesystem
enumeration outside configured root (bsc#1270245).
* CVE-2026-54886: SSH SFTP server denial of service via extended channel data
infinite loop (bsc#1270246).
* CVE-2026-54887: use of default cryptographic key allows predictable DTLS
cookie computation during the startup window (bsc#1270247).
* CVE-2026-54891: plaintext injection towards (D)TLS client during handshake
(bsc#1270250).
* CVE-2026-55737: heap pointer corruption via signed/unsigned mismatch in
`LARGE_TUPLE_EXTP` decoding in `erts` external term format decoder
(bsc#1272910).
* CVE-2026-55950: time-of-check time-of-use race condition allows an
unauthenticated remote attacker to crash all active DTLS sessions on a
listener (bsc#1270253).
* CVE-2026-55952: missing validation allows for DoS of the TLS-1.3 server
when
clients send a malformed `ClientHello` with mismatched PSK identity and
binder list lengths (bsc#1270258).
* CVE-2026-55953: TLS 1.2 and DTLS clients accept unoffered anonymous cipher
suites and allow for server authentication bypass (bsc#1272911).
* CVE-2026-58227: TLS/DTLS denial of service via unbounded recursion on
cross-
signed peer certificate chain (bsc#1272913).
* CVE-2026-59250: `megaco` flex scanner buffer overflow via oversized
property
parm name (bsc#1272914).
* CVE-2026-59251: denial of service via exponential certificate policy tree
growth in path validation (bsc#1272915).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3579=1

* Server Applications Module 15-SP7
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-3579=1

* openSUSE Leap 15.3
zypper in -t patch SUSE-2026-3579=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3579=1

## Package List:

* openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64)
* erlang26-epmd-26.2.1-150300.7.28.1
* erlang26-jinterface-26.2.1-150300.7.28.1
* erlang26-wx-src-26.2.1-150300.7.28.1
* erlang26-dialyzer-src-26.2.1-150300.7.28.1
* erlang26-diameter-src-26.2.1-150300.7.28.1
* erlang26-wx-26.2.1-150300.7.28.1
* erlang26-et-26.2.1-150300.7.28.1
* erlang26-debugger-26.2.1-150300.7.28.1
* erlang26-reltool-src-26.2.1-150300.7.28.1
* erlang26-reltool-26.2.1-150300.7.28.1
* erlang26-debugger-src-26.2.1-150300.7.28.1
* erlang26-dialyzer-debuginfo-26.2.1-150300.7.28.1
* erlang26-debugsource-26.2.1-150300.7.28.1
* erlang26-epmd-debuginfo-26.2.1-150300.7.28.1
* erlang26-doc-26.2.1-150300.7.28.1
* erlang26-diameter-26.2.1-150300.7.28.1
* erlang26-wx-debuginfo-26.2.1-150300.7.28.1
* erlang26-observer-src-26.2.1-150300.7.28.1
* erlang26-src-26.2.1-150300.7.28.1
* erlang26-debuginfo-26.2.1-150300.7.28.1
* erlang26-observer-26.2.1-150300.7.28.1
* erlang26-dialyzer-26.2.1-150300.7.28.1
* erlang26-26.2.1-150300.7.28.1
* erlang26-jinterface-src-26.2.1-150300.7.28.1
* erlang26-et-src-26.2.1-150300.7.28.1
* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* erlang26-debugsource-26.2.1-150300.7.28.1
* erlang26-debuginfo-26.2.1-150300.7.28.1
* erlang26-epmd-debuginfo-26.2.1-150300.7.28.1
* erlang26-epmd-26.2.1-150300.7.28.1
* erlang26-26.2.1-150300.7.28.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* erlang26-debugsource-26.2.1-150300.7.28.1
* erlang26-debuginfo-26.2.1-150300.7.28.1
* erlang26-epmd-debuginfo-26.2.1-150300.7.28.1
* erlang26-epmd-26.2.1-150300.7.28.1
* erlang26-26.2.1-150300.7.28.1
* Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64)
* erlang26-debugsource-26.2.1-150300.7.28.1
* erlang26-debuginfo-26.2.1-150300.7.28.1
* erlang26-epmd-debuginfo-26.2.1-150300.7.28.1
* erlang26-epmd-26.2.1-150300.7.28.1
* erlang26-26.2.1-150300.7.28.1

## References:

--===============5107254704065547917==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

<div class="container">
<h1>Security update for erlang26</h1>

<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:3579-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-08-11T14:05:55Z</td>
</tr>

<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>

</ul>
</td>
</tr>

<tr>
<th>
Cross-References:
</th>
<td>
<ul>

</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">

<li class="list-group-item">
CVE-2026-28810

(

SUSE

):

8.2
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-28810

(

SUSE

):

5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-28810

(

NVD

):

6.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-28810

(

NVD

):

3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-42789

(

SUSE

):

9.1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-42789

(

SUSE

):

7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-42789

(

NVD

):

7.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-42789

(

NVD

):

8.0
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-42789

(

NVD

):

4.8
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-42790

(

SUSE

):

9.1
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-42790

(

SUSE

):

7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-42790

(

NVD

):

7.6
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-42790

(

NVD

):

7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-42790

(

NVD

):

8.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-42792

(

SUSE

):

6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-42792

(

SUSE

):

3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
</li>

<li class="list-group-item">
CVE-2026-42792

(

NVD

):

6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-42792

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-47078

(

SUSE

):

4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L
</li>

<li class="list-group-item">
CVE-2026-47078

(

SUSE

):

5.0
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
</li>

<li class="list-group-item">
CVE-2026-47078

(

NVD

):

4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-48855

(

SUSE

):

2.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-48855

(

SUSE

):

4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-48855

(

NVD

<li class="list-group-item">
CVE-2026-48855

(

NVD

):

6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-48856

(

SUSE

):

6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-48856

(

NVD

):

7.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-48856

(

NVD

):

6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-48858

(

SUSE

):

8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-48858

(

NVD

):

6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-48858

(

NVD

):

6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-48860

(

SUSE

):

8.0
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
</li>

<li class="list-group-item">
CVE-2026-48860

(

NVD

):

7.5
CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-48860

(

NVD

):

6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-49759

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-49759

(

NVD

):

8.8
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-49759

(

NVD

):

8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-49759

(

NVD

):

8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-49760

(

SUSE

):

5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-49760

(

NVD

):

6.9
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-49760

(

NVD

):

5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-53422

(

SUSE

):

5.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-53422

(

SUSE

):

4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-53422

(

NVD

<li class="list-group-item">
CVE-2026-53422

(

NVD

):

4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-54886

(

SUSE

):

7.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-54886

(

SUSE

):

6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-54886

(

NVD

):

5.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-54886

(

NVD

):

4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
</li>

<li class="list-group-item">
CVE-2026-54887

(

SUSE

):

6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-54887

(

SUSE

):

5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
</li>

<li class="list-group-item">
CVE-2026-54887

(

NVD

<li class="list-group-item">
CVE-2026-54887

(

NVD

):

4.8
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-54891

(

SUSE

):

6.3
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-54891

(

SUSE

):

3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-54891

(

NVD

):

6.3
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-54891

(

NVD

):

3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-55737

(

SUSE

):

5.1
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-55737

(

SUSE

):

4.0
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
</li>

<li class="list-group-item">
CVE-2026-55737

(

NVD

):

5.1
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-55737

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-55950

(

SUSE

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-55950

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-55950

(

NVD

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-55950

(

NVD

):

5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-55952

(

SUSE

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-55952

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-55952

(

NVD

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-55952

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-55953

(

SUSE

):

9.1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-55953

(

SUSE

):

7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-55953

(

NVD

):

9.1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-55953

(

NVD

):

7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-58227

(

SUSE

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-58227

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-58227

(

NVD

<li class="list-group-item">
CVE-2026-58227

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-59250

(

SUSE

):

8.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-59250

(

SUSE

):

6.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
</li>

<li class="list-group-item">
CVE-2026-59250

(

NVD

):

8.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-59251

(

SUSE

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
</li>

<li class="list-group-item">
CVE-2026-59251

(

SUSE

):

8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-59251

(

NVD

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-59251

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

</ul>
</td>
</tr>

<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">

<li class="list-group-item">openSUSE Leap
15.3</li>

<li class="list-group-item">Server
Applications Module 15-SP7</li>

<li class="list-group-item">SUSE Linux
Enterprise Real Time 15 SP7</li>

<li class="list-group-item">SUSE Linux
Enterprise Server 15 SP6</li>

<li class="list-group-item">SUSE Linux
Enterprise Server 15 SP6 LTSS</li>

<li class="list-group-item">SUSE Linux
Enterprise Server 15 SP7</li>

<li class="list-group-item">SUSE Linux
Enterprise Server for SAP Applications 15 SP6</li>

<li class="list-group-item">SUSE Linux
Enterprise Server for SAP Applications 15 SP7</li>

</ul>
</td>
</tr>
</tbody>
</table>

An update that solves 22 vulnerabilities can now be
installed.

<h2>Description:</h2>

This update for erlang26 fixes the following issues:
<ul>
<li>CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache
poisoning (bsc#1261726).</li>
<li>CVE-2026-42789: <code>public_key</code> application
accepts non-CA certificates as intermediate issuers and this enables chain
forgery (bsc#1266449).</li>
<li>CVE-2026-42790: Name constraints and <code>Subject
CommonName</code> fallback in TLS hostname verification allows for certificate
forgery by MITM attacker (bsc#1266466).</li>
<li>CVE-2026-42792: permanent <code>epmd</code> DoS via
connection slot exhaustion due to improper handling of exceptional
conditions (bsc#1272908).</li>
<li>CVE-2026-47078: relative path traversal in
<code>zip:unzip/zip:extract</code> via <code>check_dir_level</code> depth-counter bypass
(bsc#1272909).</li>
<li>CVE-2026-48855: SFTP <code>READLINK</code> response leaks
absolute backend filesystem path when root is configured (bsc#1268139).</li>
<li>CVE-2026-48856: <code>httpc</code> leaks
<code>Authorization</code> headers to cross-origin redirect targets (bsc#1268141).</li>
<li>CVE-2026-48858: server-side request forgery allows FTP bounce attacks
and SSRF via an unvalidated <code>PASV</code> response IP
address (bsc#1268142).</li>
<li>CVE-2026-48860: <code>ssl</code>
(<code>inet_tls_dist</code> module) allows unauthenticated bypass of the distribution-over-TLS LAN
allowlist (bsc#1268146).</li>
<li>CVE-2026-49759: unbounded stack buffer overflow in SCTP error cause
parsing in <code>inet_drv</code> (bsc#1268163).</li>
<li>CVE-2026-49760: stack buffer overflow in
<code>ei_s_print_term</code> at very large integer (bsc#1268164).</li>
<li>CVE-2026-53422: SFTP <code>REALPATH</code> path-existence
oracle allows filesystem enumeration outside configured root
(bsc#1270245).</li>
<li>CVE-2026-54886: SSH SFTP server denial of service via extended
channel data infinite loop (bsc#1270246).</li>
<li>CVE-2026-54887: use of default cryptographic key allows predictable
DTLS cookie computation during the startup window
(bsc#1270247).</li>
<li>CVE-2026-54891: plaintext injection towards (D)TLS client during
handshake (bsc#1270250).</li>
<li>CVE-2026-55737: heap pointer corruption via signed/unsigned mismatch
in <code>LARGE_TUPLE_EXTP</code> decoding in <code>erts</code>
external term format decoder (bsc#1272910).</li>
<li>CVE-2026-55950: time-of-check time-of-use race condition allows an
unauthenticated remote attacker to crash all active
DTLS sessions on a listener (bsc#1270253).</li>
<li>CVE-2026-55952: missing validation allows for DoS of the TLS-1.3
server when clients send a malformed <code>ClientHello</code>
with mismatched PSK identity and binder list lengths
(bsc#1270258).</li>
<li>CVE-2026-55953: TLS 1.2 and DTLS clients accept unoffered anonymous
cipher suites and allow for server authentication
bypass (bsc#1272911).</li>
<li>CVE-2026-58227: TLS/DTLS denial of service via unbounded recursion on
cross-signed peer certificate chain
(bsc#1272913).</li>
<li>CVE-2026-59250: <code>megaco</code> flex scanner buffer
overflow via oversized property parm name (bsc#1272914).</li>
<li>CVE-2026-59251: denial of service via exponential certificate policy
tree growth in path validation (bsc#1272915).</li>
</ul>

<h2>Patch Instructions:</h2>

To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper
patch".

Alternatively you can run the command listed for your product:

<ul class="list-group">

<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP6 LTSS

<code>zypper in -t patch
SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3579=1</code>

</li>

<li class="list-group-item">
Server Applications Module 15-SP7

<code>zypper in -t patch
SUSE-SLE-Module-Server-Applications-15-SP7-2026-3579=1</code>

</li>

<li class="list-group-item">
openSUSE Leap 15.3

<code>zypper in -t patch
SUSE-2026-3579=1</code>

</li>

<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP6

<code>zypper in -t patch
SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3579=1</code>

</li>

</ul>

<h2>Package List:</h2>
<ul>

<li>
openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64)
<ul>

<li>erlang26-epmd-26.2.1-150300.7.28.1</li>

<li>erlang26-jinterface-26.2.1-150300.7.28.1</li>

<li>erlang26-wx-src-26.2.1-150300.7.28.1</li>

<li>erlang26-dialyzer-src-26.2.1-150300.7.28.1</li>

<li>erlang26-diameter-src-26.2.1-150300.7.28.1</li>

<li>erlang26-wx-26.2.1-150300.7.28.1</li>

<li>erlang26-et-26.2.1-150300.7.28.1</li>

<li>erlang26-debugger-26.2.1-150300.7.28.1</li>

<li>erlang26-reltool-src-26.2.1-150300.7.28.1</li>

<li>erlang26-reltool-26.2.1-150300.7.28.1</li>

<li>erlang26-debugger-src-26.2.1-150300.7.28.1</li>

<li>erlang26-dialyzer-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-debugsource-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-doc-26.2.1-150300.7.28.1</li>

<li>erlang26-diameter-26.2.1-150300.7.28.1</li>

<li>erlang26-wx-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-observer-src-26.2.1-150300.7.28.1</li>

<li>erlang26-src-26.2.1-150300.7.28.1</li>

<li>erlang26-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-observer-26.2.1-150300.7.28.1</li>

<li>erlang26-dialyzer-26.2.1-150300.7.28.1</li>

<li>erlang26-26.2.1-150300.7.28.1</li>

<li>erlang26-jinterface-src-26.2.1-150300.7.28.1</li>

<li>erlang26-et-src-26.2.1-150300.7.28.1</li>

</ul>
</li>

<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6
(ppc64le x86_64)
<ul>

<li>erlang26-debugsource-26.2.1-150300.7.28.1</li>

<li>erlang26-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-26.2.1-150300.7.28.1</li>

<li>erlang26-26.2.1-150300.7.28.1</li>

</ul>
</li>

<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le
s390x x86_64)
<ul>

<li>erlang26-debugsource-26.2.1-150300.7.28.1</li>

<li>erlang26-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-26.2.1-150300.7.28.1</li>

<li>erlang26-26.2.1-150300.7.28.1</li>

</ul>
</li>

<li>
Server Applications Module 15-SP7 (aarch64 ppc64le s390x
x86_64)
<ul>

<li>erlang26-debugsource-26.2.1-150300.7.28.1</li>

<li>erlang26-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-debuginfo-26.2.1-150300.7.28.1</li>

<li>erlang26-epmd-26.2.1-150300.7.28.1</li>

<li>erlang26-26.2.1-150300.7.28.1</li>

</ul>
</li>

</ul>

<h2>References:</h2>
<ul>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-28810.html">https://www.suse.com/security/cve/CVE-2026-28810.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-42789.html">https://www.suse.com/security/cve/CVE-2026-42789.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-42790.html">https://www.suse.com/security/cve/CVE-2026-42790.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-42792.html">https://www.suse.com/security/cve/CVE-2026-42792.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-47078.html">https://www.suse.com/security/cve/CVE-2026-47078.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-48855.html">https://www.suse.com/security/cve/CVE-2026-48855.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-48856.html">https://www.suse.com/security/cve/CVE-2026-48856.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-48858.html">https://www.suse.com/security/cve/CVE-2026-48858.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-48860.html">https://www.suse.com/security/cve/CVE-2026-48860.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-49759.html">https://www.suse.com/security/cve/CVE-2026-49759.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-49760.html">https://www.suse.com/security/cve/CVE-2026-49760.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-53422.html">https://www.suse.com/security/cve/CVE-2026-53422.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-54886.html">https://www.suse.com/security/cve/CVE-2026-54886.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-54887.html">https://www.suse.com/security/cve/CVE-2026-54887.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-54891.html">https://www.suse.com/security/cve/CVE-2026-54891.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-55737.html">https://www.suse.com/security/cve/CVE-2026-55737.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-55950.html">https://www.suse.com/security/cve/CVE-2026-55950.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-55952.html">https://www.suse.com/security/cve/CVE-2026-55952.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-55953.html">https://www.suse.com/security/cve/CVE-2026-55953.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-58227.html">https://www.suse.com/security/cve/CVE-2026-58227.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-59250.html">https://www.suse.com/security/cve/CVE-2026-59250.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-59251.html">https://www.suse.com/security/cve/CVE-2026-59251.html</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1261726">https://bugzilla.suse.com/show_bug.cgi?id=1261726</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1266449">https://bugzilla.suse.com/show_bug.cgi?id=1266449</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1266466">https://bugzilla.suse.com/show_bug.cgi?id=1266466</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268139">https://bugzilla.suse.com/show_bug.cgi?id=1268139</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268141">https://bugzilla.suse.com/show_bug.cgi?id=1268141</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268142">https://bugzilla.suse.com/show_bug.cgi?id=1268142</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268146">https://bugzilla.suse.com/show_bug.cgi?id=1268146</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268163">https://bugzilla.suse.com/show_bug.cgi?id=1268163</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268164">https://bugzilla.suse.com/show_bug.cgi?id=1268164</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270245">https://bugzilla.suse.com/show_bug.cgi?id=1270245</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270246">https://bugzilla.suse.com/show_bug.cgi?id=1270246</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270247">https://bugzilla.suse.com/show_bug.cgi?id=1270247</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270250">https://bugzilla.suse.com/show_bug.cgi?id=1270250</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270253">https://bugzilla.suse.com/show_bug.cgi?id=1270253</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1270258">https://bugzilla.suse.com/show_bug.cgi?id=1270258</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272908">https://bugzilla.suse.com/show_bug.cgi?id=1272908</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272909">https://bugzilla.suse.com/show_bug.cgi?id=1272909</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272910">https://bugzilla.suse.com/show_bug.cgi?id=1272910</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272911">https://bugzilla.suse.com/show_bug.cgi?id=1272911</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272913">https://bugzilla.suse.com/show_bug.cgi?id=1272913</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272914">https://bugzilla.suse.com/show_bug.cgi?id=1272914</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1272915">https://bugzilla.suse.com/show_bug.cgi?id=1272915</a>
</li>

</ul>

</div>

--===============5107254704065547917==--

Схожие новости

#	Наименование новости	Информативность	Дата публикации
1	Mehrere Probleme in pcp (SUSE)	10	13-08-2026
2	Mehrere Probleme in unbound (SUSE)	10	12-08-2026
3	Mehrere Probleme in gawk (SUSE)	10	11-08-2026
4	Mehrere Probleme in libarchive (SUSE)	10	12-08-2026
5	Mehrere Probleme in libssh2_org (SUSE)	10	12-08-2026
6	Mehrere Probleme in libssh (SUSE)	10	30-07-2026
7	Mehrere Probleme in libssh (SUSE)	10	30-07-2026
8	Mehrere Probleme in nginx (SUSE)	10	30-07-2026
9	Mehrere Probleme in bind (SUSE)	10	11-08-2026
10	Mehrere Probleme in libkrun (SUSE)	10	11-08-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 10. Источник: www.pro-linux.de.

Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

Mehrere Probleme in erlang26 (SUSE)

Дата публикации: 12-08-2026 04:41:16

Основное содержимое страницы с новостью.

Схожие новости