SUSE-SU-2026:1361-1: himmelblau&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:1361-1 is a vulnerability in himmelblau&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 7 · Downstream 0 · Related 7Timeline
- 15-04-2026PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Security update for himmelblau This update for himmelblau fixes the following issues: Update to version 2.3.9+git0.a9fd29b; (jsc#PED-14511): - CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324). - CVE-2026-31979: Fix race condition when accessiung /tmp/krb5cc_uid (bsc#1259548). - CVE-2026-25727: deps(rust): Bump the `all-cargo-updates` group with 8 updates (bsc#1257904). - CVE-2025-58160: deps(rust): Bump `tracing-subscriber` in the cargo group (bsc#1249013). - CVE-2025-54882: Fix Kerberos credential cache permissions (bsc#1247735). - CVE-2025-53013: Fix permitted authentication with invalid Hello PIN (bsc#1245437). - CVE-2024-11738: Fix `rustls` network-reachable panic in `Acceptor::accept` (bsc#1233949). Other bug fixes: - Fix SELinux module packaging to use standard policy macros (bsc#1258236).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- himmelblau&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 2.3.9+git0.a9fd29b-150700.3.15.1
1 vendor · 1 product