{"schemaVersion":3,"id":"SUSE-SU-2026:4585-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update 5.2.1 for Multi-Linux Manager Client Tools\n\nThis update fixes the following issues:\n\ngolang-github-prometheus-prometheus was updated to version 3.13.2:\n\n- Security issues:\n\n  * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608)\n  * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102)\n  * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205)\n  * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966)\n  * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856)\n  * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206)\n  * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207)\n  * CVE-2025-61686: Fixed unauthorized file access and path traversal in react-router storage (bsc#1270711)\n  * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528)\n  * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538)\n  * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534)\n  * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221)\n  * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency\n  * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit\n\n- Bug fixes and changes:\n\n  * Fixed scrape manager failing to reload properly when SD configuration changes rapidly.\n  * Prevent memory leak in remote-write path when the receiving endpoint is unavailable.\n  * Native Histograms are no longer experimental. They are fully supported for production workloads.\n  * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces.\n  * TSDB compaction speed optimized by improving the block merging algorithm.\n  * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead.\n  * Added new metrics to monitor the health of the rule evaluation engine.\n  * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments\n    to avoid redirects.\n  * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the\n    new longer token format.\n  * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results.\n  * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead\n    of the current working directory.\n  * Support exporting TSDB blocks directly to cloud storage via the admin API.\n  * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of\n    prometheus_wal_watcher_records_read_total.\n  * Significant query performance boost for high-cardinality regex matchers.\n  * Introduce a new UI interface for safely deleting specific time series data directly.\n  * Added dynamic relabeling actions to extract substrings using regex capture groups.\n  * Fixed UI displaying incorrect time ranges after a timezone change.\n  * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0\n\ngrafana was updated to version 12.4.10:\n\n- Security issues:\n\n  * CVE-2026-17183: Fixed exposing data accessible through Grafana's configured datasource credentials (bsc#1275934)\n  * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269841)\n  * CVE-2026-17033: Fixed stored cross-site scripting risks via malicious Alertmanager generator URLs (bsc#1276426)\n  * CVE-2026-73501: Fixed fail-open authentication bypass in kin-openapi default handlers (bsc#1276973)\n  * CVE-2026-19475: Fixed DoS risks in PostgreSQL Datasource by checking timeGroup macros (bsc#1278307)\n  * CVE-2026-14199: Fixed auth bypass or session takeover via Auth Proxy cache key collision (bsc#1278322)\n  * CVE-2026-19197: Fixed access control and authorization checks in dashboard snapshots (bsc#1277025)\n  * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm (bsc#1272008)\n  * CVE-2026-41178: Fixed denial-of-service risks in OpenTelemetry baggage parsing (bsc#1276658)\n  * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274217)\n  * CVE-2026-8595: Fixed stored XSS via malicious dashboard field names in table panels (bsc#1271557)\n  * CVE-2026-42127: Fixed DoS risks in the public dashboard query endpoint (bsc#1268868)\n  * CVE-2026-9029: Fixed arbitrary code execution and script injection in the geomap panel (bsc#1272328)\n  * CVE-2026-33814: Fixed infinite loop in HTTP/2 transport during framesize check (bsc#1265763)\n  * CVE-2026-8609: Fixed pre-authentication denial-of-service risks in OAuth login routes (bsc#1271330)\n  * CVE-2026-1229: Fixed incorrect value calculation in ecc/p384 Package (bsc#1265525, bsc#1262187)\n  * CVE-2025-12141: Fixed information disclosure of secure settings via contact point modification (bsc#1262187)\n  * CVE-2026-21723: Fixed out-of-memory and denial-of-service risks in templates test endpoint (bsc#1272427)\n  * CVE-2026-41606: Fixed denial-of-service risks from nested messages in Apache Thrift parser (bsc#1263330)\n\n- Bug fixes and changes:\n\n  * Dashboards: Fix adhoc and groupby variable datasource on UI import\n  * Dashboards: Fix version dates and user display names in the legacy version history page\n  * Dashboard Import: Labels in v2 schema\n  * Azure Monitor: fix migration for dimension filters\n  * Dashboards: Get annotations and dashboard endpoint performance improvements\n  * DashboardDS: Fix Mixed panels with a time override stuck in permanent loading\n  * Alerting: Add protected fields authorization check to provisioning API\n  * Alerting: Return 403 instead of 500 on contact point provenance mismatch\n  * Jaeger: Handle gzip, deflate, and brotli compressed API responses\n  * Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL\n\nmgr-push was updated to version 5.2.5:\n\n- Removed token based authentication mechanism for package_push (bsc#1230949)\n\nspacecmd was updated to version 5.2.10:\n\n- Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261)\n- Updated translation strings\n\nspacewalk-client-tools was updated to version 5.2.7:\n\n- Updated translation strings\n\nuyuni-tools was updated to version 5.2.17:\n\nSecurity issues fixed:\n\n- CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481)\n\nBug fixes and changes:\n\n- Version 5.2.17-0:\n\n  * Bump the default image tag to 5.2.1\n  * Reload systemd daemon before restarting services (bsc#1270033)\n  * Check all supported locations for CA file in rotation check script\n  * Detect and fix legacy service file (bsc#1268755)\n  * Use healthcheck cmd from the image (bsc#1273144)\n\n- Version 5.2.16-0:\n\n  * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398)\n\n- Version 5.2.15-0:\n\n  * Added requirement for at least Podman v4.7.2\n  * Send READY notification to systemd only once healthy (bsc#1263823)\n\n- Version 5.2.14-0:\n\n  * Include the server environment file in the backup (bsc#1268649)\n  * Added mgradm commands for SSL CA and certificate rotation\n\n- Version 5.2.13-0:\n\n  * Check and warn if CA certificate isn't marked as critical\n  * Disable SSL on database during split (bsc#1267980)\n  * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980)\n  * Check backup status only after database is started (bsc#1262492)\n\nvenv-salt-minion:\n\n- Security issues:\n\n  * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094)\n  * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066)\n  * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969)\n  * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581)\n  * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959)\n  * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319)\n  * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654)\n  * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098)\n  * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962)\n  * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821)\n  * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268)\n  * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977)\n  * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788)\n  * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192)\n  * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669)\n  * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442)\n  * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429)\n  * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599)\n  * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722)\n  * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413)\n  * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267)\n  * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285)\n  * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254)\n  * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970)\n  * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989)\n  * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428)\n  * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395)\n  * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396)\n  * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397)\n  * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803)\n  * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400)\n\n- Bug fixes and changes:\n\n  * Updated bundled python module pip to 25.0.1\n  * Updated bundled python module jinja2 to 3.1.6\n  * Updated bundled python module lxml to 6.1.1\n  * Prevent broken Salt Bundle on Ubuntu due regression in 'tar' package from Ubuntu repositories (bsc#1271613)\n  * Remove unused paramiko python module from the bundle.\n  * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286)\n  * Support attrlist in ldap.managed (bsc#1257151)\n  * Use AsyncHTTPClient in salt.utils.http (bsc#1268325)\n  * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822)","dates":{"published":"2026-10-08T08:24:34.000Z","modified":"2026-10-08T19:15:05.011Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"golang-github-prometheus-prometheus&distro=SUSE Multi Linux Manager Tools SLE-15","name":"golang-github-prometheus-prometheus","label":"golang-github-prometheus-prometheus&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/golang-github-prometheus-prometheus&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 3.13.2-150002.3.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.13.2-150002.3.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"grafana&distro=SUSE Multi Linux Manager Tools SLE-15","name":"grafana","label":"grafana&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/grafana&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 12.4.10-150002.4.27.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.4.10-150002.4.27.1","eol":null,"hubHref":null},{"vendor":"suse","product":"mgr-push&distro=SUSE Multi Linux Manager Tools SLE-15","name":"mgr-push","label":"mgr-push&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/mgr-push&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 5.2.5-150002.3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.5-150002.3.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacecmd&distro=SUSE Multi Linux Manager Tools SLE-15","name":"spacecmd","label":"spacecmd&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacecmd&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 5.2.10-150002.3.15.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.10-150002.3.15.1","eol":null,"hubHref":null},{"vendor":"suse","product":"spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools SLE-15","name":"spacewalk-client-tools","label":"spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/spacewalk-client-tools&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 5.2.7-150002.3.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.7-150002.3.12.1","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-15","name":"uyuni-tools","label":"uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 5.2.17-150002.3.20.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.17-150002.3.20.1","eol":null,"hubHref":null},{"vendor":"suse","product":"uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-Micro-5","name":"uyuni-tools","label":"uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-Micro-5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/uyuni-tools&distro=SUSE Multi Linux Manager Tools SLE-Micro-5","purlType":"rpm","versions":[{"text":"< 5.2.17-150002.3.20.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.2.17-150002.3.20.1","eol":null,"hubHref":null},{"vendor":"suse","product":"venv-salt-minion&distro=SUSE Multi Linux Manager Tools SLE-15","name":"venv-salt-minion","label":"venv-salt-minion&distro=SUSE Multi Linux Manager Tools SLE-15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE Multi Linux Manager Tools SLE-15","purlType":"rpm","versions":[{"text":"< 3006.0-150002.5.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3006.0-150002.5.22.1","eol":null,"hubHref":null},{"vendor":"suse","product":"venv-salt-minion&distro=SUSE Multi Linux Manager Tools SLE-Micro-5","name":"venv-salt-minion","label":"venv-salt-minion&distro=SUSE Multi Linux Manager Tools SLE-Micro-5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/venv-salt-minion&distro=SUSE Multi Linux Manager Tools SLE-Micro-5","purlType":"rpm","versions":[{"text":"< 3006.0-150002.5.22.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3006.0-150002.5.22.1","eol":null,"hubHref":null}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264585-1/","label":"www.suse.com/support/update/announcement/2026/suse-su-20264585-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1218722","label":"bugzilla.suse.com/1218722","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1230949","label":"bugzilla.suse.com/1230949","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252286","label":"bugzilla.suse.com/1252286","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1254400","label":"bugzilla.suse.com/1254400","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1257151","label":"bugzilla.suse.com/1257151","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1257599","label":"bugzilla.suse.com/1257599","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1259989","label":"bugzilla.suse.com/1259989","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1261969","label":"bugzilla.suse.com/1261969","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1261970","label":"bugzilla.suse.com/1261970","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262098","label":"bugzilla.suse.com/1262098","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262187","label":"bugzilla.suse.com/1262187","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262319","label":"bugzilla.suse.com/1262319","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262429","label":"bugzilla.suse.com/1262429","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262492","label":"bugzilla.suse.com/1262492","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262654","label":"bugzilla.suse.com/1262654","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1262803","label":"bugzilla.suse.com/1262803","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263254","label":"bugzilla.suse.com/1263254","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263330","label":"bugzilla.suse.com/1263330","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263442","label":"bugzilla.suse.com/1263442","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263822","label":"bugzilla.suse.com/1263822","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1263823","label":"bugzilla.suse.com/1263823","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1264962","label":"bugzilla.suse.com/1264962","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265267","label":"bugzilla.suse.com/1265267","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265268","label":"bugzilla.suse.com/1265268","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265413","label":"bugzilla.suse.com/1265413","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265525","label":"bugzilla.suse.com/1265525","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1265763","label":"bugzilla.suse.com/1265763","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1266481","label":"bugzilla.suse.com/1266481","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1266608","label":"bugzilla.suse.com/1266608","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1266669","label":"bugzilla.suse.com/1266669","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267261","label":"bugzilla.suse.com/1267261","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267528","label":"bugzilla.suse.com/1267528","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267534","label":"bugzilla.suse.com/1267534","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267538","label":"bugzilla.suse.com/1267538","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267581","label":"bugzilla.suse.com/1267581","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267821","label":"bugzilla.suse.com/1267821","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1267980","label":"bugzilla.suse.com/1267980","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268325","label":"bugzilla.suse.com/1268325","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268395","label":"bugzilla.suse.com/1268395","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268396","label":"bugzilla.suse.com/1268396","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268397","label":"bugzilla.suse.com/1268397","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268649","label":"bugzilla.suse.com/1268649","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268755","label":"bugzilla.suse.com/1268755","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268868","label":"bugzilla.suse.com/1268868","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1268977","label":"bugzilla.suse.com/1268977","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269066","label":"bugzilla.suse.com/1269066","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269788","label":"bugzilla.suse.com/1269788","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269841","label":"bugzilla.suse.com/1269841","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269856","label":"bugzilla.suse.com/1269856","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269959","label":"bugzilla.suse.com/1269959","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1269966","label":"bugzilla.suse.com/1269966","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1270033","label":"bugzilla.suse.com/1270033","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1270285","label":"bugzilla.suse.com/1270285","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1270398","label":"bugzilla.suse.com/1270398","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1270399","label":"bugzilla.suse.com/1270399","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1270711","label":"bugzilla.suse.com/1270711","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271192","label":"bugzilla.suse.com/1271192","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271330","label":"bugzilla.suse.com/1271330","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271428","label":"bugzilla.suse.com/1271428","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271557","label":"bugzilla.suse.com/1271557","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1271613","label":"bugzilla.suse.com/1271613","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1272008","label":"bugzilla.suse.com/1272008","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1272102","label":"bugzilla.suse.com/1272102","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1272328","label":"bugzilla.suse.com/1272328","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1272427","label":"bugzilla.suse.com/1272427","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1273094","label":"bugzilla.suse.com/1273094","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1273144","label":"bugzilla.suse.com/1273144","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1274217","label":"bugzilla.suse.com/1274217","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1274221","label":"bugzilla.suse.com/1274221","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275205","label":"bugzilla.suse.com/1275205","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275206","label":"bugzilla.suse.com/1275206","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275207","label":"bugzilla.suse.com/1275207","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1275934","label":"bugzilla.suse.com/1275934","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276426","label":"bugzilla.suse.com/1276426","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276658","label":"bugzilla.suse.com/1276658","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1276973","label":"bugzilla.suse.com/1276973","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1277025","label":"bugzilla.suse.com/1277025","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1278307","label":"bugzilla.suse.com/1278307","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1278322","label":"bugzilla.suse.com/1278322","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45289","label":"www.suse.com/security/cve/CVE-2023-45289","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22195","label":"www.suse.com/security/cve/CVE-2024-22195","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-13836","label":"www.suse.com/security/cve/CVE-2025-13836","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4673","label":"www.suse.com/security/cve/CVE-2025-4673","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61686","label":"www.suse.com/security/cve/CVE-2025-61686","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-0864","label":"www.suse.com/security/cve/CVE-2026-0864","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11940","label":"www.suse.com/security/cve/CVE-2026-11940","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-11972","label":"www.suse.com/security/cve/CVE-2026-11972","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1229","label":"www.suse.com/security/cve/CVE-2026-1229","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13346","label":"www.suse.com/security/cve/CVE-2026-13346","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-14199","label":"www.suse.com/security/cve/CVE-2026-14199","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1502","label":"www.suse.com/security/cve/CVE-2026-1502","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15308","label":"www.suse.com/security/cve/CVE-2026-15308","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-1703","label":"www.suse.com/security/cve/CVE-2026-1703","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17033","label":"www.suse.com/security/cve/CVE-2026-17033","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-17183","label":"www.suse.com/security/cve/CVE-2026-17183","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19197","label":"www.suse.com/security/cve/CVE-2026-19197","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-19475","label":"www.suse.com/security/cve/CVE-2026-19475","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-21723","label":"www.suse.com/security/cve/CVE-2026-21723","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-2303","label":"www.suse.com/security/cve/CVE-2026-2303","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-27459","label":"www.suse.com/security/cve/CVE-2026-27459","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3219","label":"www.suse.com/security/cve/CVE-2026-3219","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3276","label":"www.suse.com/security/cve/CVE-2026-3276","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33814","label":"www.suse.com/security/cve/CVE-2026-33814","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3446","label":"www.suse.com/security/cve/CVE-2026-3446","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3479","label":"www.suse.com/security/cve/CVE-2026-3479","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39821","label":"www.suse.com/security/cve/CVE-2026-39821","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-39882","label":"www.suse.com/security/cve/CVE-2026-39882","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40181","label":"www.suse.com/security/cve/CVE-2026-40181","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40475","label":"www.suse.com/security/cve/CVE-2026-40475","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41066","label":"www.suse.com/security/cve/CVE-2026-41066","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41178","label":"www.suse.com/security/cve/CVE-2026-41178","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-41606","label":"www.suse.com/security/cve/CVE-2026-41606","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42127","label":"www.suse.com/security/cve/CVE-2026-42127","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42211","label":"www.suse.com/security/cve/CVE-2026-42211","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42342","label":"www.suse.com/security/cve/CVE-2026-42342","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4360","label":"www.suse.com/security/cve/CVE-2026-4360","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44431","label":"www.suse.com/security/cve/CVE-2026-44431","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44990","label":"www.suse.com/security/cve/CVE-2026-44990","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45409","label":"www.suse.com/security/cve/CVE-2026-45409","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4786","label":"www.suse.com/security/cve/CVE-2026-4786","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49825","label":"www.suse.com/security/cve/CVE-2026-49825","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49853","label":"www.suse.com/security/cve/CVE-2026-49853","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49854","label":"www.suse.com/security/cve/CVE-2026-49854","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49855","label":"www.suse.com/security/cve/CVE-2026-49855","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53606","label":"www.suse.com/security/cve/CVE-2026-53606","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56852","label":"www.suse.com/security/cve/CVE-2026-56852","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6019","label":"www.suse.com/security/cve/CVE-2026-6019","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6100","label":"www.suse.com/security/cve/CVE-2026-6100","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6357","label":"www.suse.com/security/cve/CVE-2026-6357","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7210","label":"www.suse.com/security/cve/CVE-2026-7210","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-73501","label":"www.suse.com/security/cve/CVE-2026-73501","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-7774","label":"www.suse.com/security/cve/CVE-2026-7774","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8328","label":"www.suse.com/security/cve/CVE-2026-8328","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8595","label":"www.suse.com/security/cve/CVE-2026-8595","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8609","label":"www.suse.com/security/cve/CVE-2026-8609","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-8643","label":"www.suse.com/security/cve/CVE-2026-8643","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2026-9029","label":"www.suse.com/security/cve/CVE-2026-9029","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2023-45289","CVE-2024-22195","CVE-2025-13836","CVE-2025-4673","CVE-2025-61686","CVE-2026-0864","CVE-2026-11940","CVE-2026-11972","CVE-2026-1229","CVE-2026-13346","CVE-2026-14199","CVE-2026-1502","CVE-2026-15308","CVE-2026-1703","CVE-2026-17033","CVE-2026-17183","CVE-2026-19197","CVE-2026-19475","CVE-2026-21723","CVE-2026-2303","CVE-2026-27459","CVE-2026-3219","CVE-2026-3276","CVE-2026-33814","CVE-2026-3446","CVE-2026-3479","CVE-2026-39821","CVE-2026-39882","CVE-2026-40181","CVE-2026-40475","CVE-2026-41066","CVE-2026-41178","CVE-2026-41606","CVE-2026-42127","CVE-2026-42211","CVE-2026-42342","CVE-2026-4360","CVE-2026-44431","CVE-2026-44990","CVE-2026-45409","CVE-2026-4786","CVE-2026-49825","CVE-2026-49853","CVE-2026-49854","CVE-2026-49855","CVE-2026-53606","CVE-2026-56852","CVE-2026-6019","CVE-2026-6100","CVE-2026-6357","CVE-2026-7210","CVE-2026-73501","CVE-2026-7774","CVE-2026-8328","CVE-2026-8595","CVE-2026-8609","CVE-2026-8643","CVE-2026-9029"],"downstream":[],"duplicates":[],"related":["CVE-2023-45289","CVE-2024-22195","CVE-2025-13836","CVE-2025-4673","CVE-2025-61686","CVE-2026-0864","CVE-2026-11940","CVE-2026-11972","CVE-2026-1229","CVE-2026-13346","CVE-2026-14199","CVE-2026-1502","CVE-2026-15308","CVE-2026-1703","CVE-2026-17033","CVE-2026-17183","CVE-2026-19197","CVE-2026-19475","CVE-2026-21723","CVE-2026-2303","CVE-2026-27459","CVE-2026-3219","CVE-2026-3276","CVE-2026-33814","CVE-2026-3446","CVE-2026-3479","CVE-2026-39821","CVE-2026-39882","CVE-2026-40181","CVE-2026-40475","CVE-2026-41066","CVE-2026-41178","CVE-2026-41606","CVE-2026-42127","CVE-2026-42211","CVE-2026-42342","CVE-2026-4360","CVE-2026-44431","CVE-2026-44990","CVE-2026-45409","CVE-2026-4786","CVE-2026-49825","CVE-2026-49853","CVE-2026-49854","CVE-2026-49855","CVE-2026-53606","CVE-2026-56852","CVE-2026-6019","CVE-2026-6100","CVE-2026-6357","CVE-2026-7210","CVE-2026-73501","CVE-2026-7774","CVE-2026-8328","CVE-2026-8595","CVE-2026-8609","CVE-2026-8643","CVE-2026-9029"]},"timeline":[{"kind":"published","date":"2026-10-08T08:24:34.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-08T19:15:05.011Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T16:48:20.643Z","stale":false,"partial":false}}