SUSE-SU-2026:4308-1: apptainer&distro=SUSE Linux Enterprise Module for HPC 15 SP7 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 23-09-2026Last modified 24-09-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:4308-1 is a vulnerability in apptainer&distro=SUSE Linux Enterprise Module for HPC 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6
CVE-2026-56854CVE-2026-56855CVE-2026-78662CVE-2026-84303CVE-2026-84304CVE-2026-84445

Timeline

  1. 23-09-2026
    PublishedVulnerability first disclosed.
  2. 24-09-2026
    Last modifiedVulnerability information updated.

Description

Security update for apptainer This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278666). - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1278666). - CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1278666). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279333). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279236). - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279033).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse3 products
  • apptainer&distro=SUSE Linux Enterprise Module for HPC 15 SP7< 1.5.3-150600.4.43.1
  • apptainer&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 1.5.3-150600.4.43.1
  • apptainer&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 1.5.3-150600.4.43.1

1 vendor · 3 products

References

11 links
Show all 11 references