UnratedFix available
Security update 5.2.1 for Multi-Linux Manager Client Tools
Type: advisorySources: OSV
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react-router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC de
- Products
- golang-github-prometheus-prometheus, grafana, mgr-push, spacecmd, spacewalk-client-tools, uyuni-tools, venv-salt-minion
- Affected versions
- Not specified
- Fixed versions
- 12.4.10-150002.4.27.1, 3.13.2-150002.3.19.1, 3006.0-150002.5.22.1, 5.2.10-150002.3.15.1, 5.2.17-150002.3.20.1, 5.2.5-150002.3.12.1, 5.2.7-150002.3.12.1
- CVEs
- CVE-2023-45289, CVE-2024-22195, CVE-2025-13836, CVE-2025-4673, CVE-2025-61686, CVE-2026-0864, CVE-2026-11940, CVE-2026-11972, CVE-2026-1229, CVE-2026-13346, CVE-2026-14199, CVE-2026-1502, CVE-2026-15308, CVE-2026-1703, CVE-2026-17033, CVE-2026-17183, CVE-2026-19197, CVE-2026-19475, CVE-2026-21723, CVE-2026-2303, CVE-2026-27459, CVE-2026-3219, CVE-2026-3276, CVE-2026-33814, CVE-2026-3446, CVE-2026-3479, CVE-2026-39821, CVE-2026-39882, CVE-2026-40181, CVE-2026-40475, CVE-2026-41066, CVE-2026-41178, CVE-2026-41606, CVE-2026-42127, CVE-2026-42211, CVE-2026-42342, CVE-2026-4360, CVE-2026-44431, CVE-2026-44990, CVE-2026-45409, CVE-2026-4786, CVE-2026-49825, CVE-2026-49853, CVE-2026-49854, CVE-2026-49855, CVE-2026-53606, CVE-2026-56852, CVE-2026-6019, CVE-2026-6100, CVE-2026-6357, CVE-2026-7210, CVE-2026-73501, CVE-2026-7774, CVE-2026-8328, CVE-2026-8595, CVE-2026-8609, CVE-2026-8643, CVE-2026-9029
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 10:03 UTC · Revision 1
Source evidence
Security update 5.2.1 for Multi-Linux Manager Client Tools
core-osv · Original sourcePublished 8 Oct 2026, 08:24 UTC
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react-router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC de
osv:SUSE-SU-2026:4585-1
golang-github-prometheus-prometheus
Fixed versions: 3.13.2-150002.3.19.1
grafana
Fixed versions: 12.4.10-150002.4.27.1
mgr-push
Fixed versions: 5.2.5-150002.3.12.1
spacecmd
Fixed versions: 5.2.10-150002.3.15.1
spacewalk-client-tools
Fixed versions: 5.2.7-150002.3.12.1
uyuni-tools
Fixed versions: 5.2.17-150002.3.20.1
venv-salt-minion
Fixed versions: 3006.0-150002.5.22.1
uyuni-tools
Fixed versions: 5.2.17-150002.3.20.1
venv-salt-minion
Fixed versions: 3006.0-150002.5.22.1
Complete source record
{
"id": "c425455bbbff08ae4d35e5b8ce56caebb7c97c6a14747759fbc920d2b96ad818",
"url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A4585-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Security update 5.2.1 for Multi-Linux Manager Client Tools",
"summary": "This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react-router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC de",
"evidence": "osv:SUSE-SU-2026:4585-1",
"products": [
{
"name": {
"value": "golang-github-prometheus-prometheus",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.13.2-150002.3.19.1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "grafana",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "12.4.10-150002.4.27.1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "mgr-push",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.2.5-150002.3.12.1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "spacecmd",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.2.10-150002.3.15.1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "spacewalk-client-tools",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.2.7-150002.3.12.1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "uyuni-tools",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.2.17-150002.3.20.1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "venv-salt-minion",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3006.0-150002.5.22.1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "uyuni-tools",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.2.17-150002.3.20.1",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "venv-salt-minion",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3006.0-150002.5.22.1",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "SUSE-SU-2026:4585-1",
"aliases": [
"SUSE-SU-2026:4585-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.13.2-150002.3.19.1"
}
]
}
],
"package": {
"name": "golang-github-prometheus-prometheus",
"purl": "pkg:rpm/suse/golang-github-prometheus-prometheus&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "12.4.10-150002.4.27.1"
}
]
}
],
"package": {
"name": "grafana",
"purl": "pkg:rpm/suse/grafana&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.2.5-150002.3.12.1"
}
]
}
],
"package": {
"name": "mgr-push",
"purl": "pkg:rpm/suse/mgr-push&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.2.10-150002.3.15.1"
}
]
}
],
"package": {
"name": "spacecmd",
"purl": "pkg:rpm/suse/spacecmd&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.2.7-150002.3.12.1"
}
]
}
],
"package": {
"name": "spacewalk-client-tools",
"purl": "pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.2.17-150002.3.20.1"
}
]
}
],
"package": {
"name": "uyuni-tools",
"purl": "pkg:rpm/suse/uyuni-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-150002.5.22.1"
}
]
}
],
"package": {
"name": "venv-salt-minion",
"purl": "pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-15",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-15"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"grafana": "12.4.10-150002.4.27.1",
"mgr-push": "5.2.5-150002.3.12.1",
"spacecmd": "5.2.10-150002.3.15.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"python3-mgr-push": "5.2.5-150002.3.12.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1",
"spacewalk-client-tools": "5.2.7-150002.3.12.1",
"firewalld-prometheus-config": "0.2-150002.3.19.1",
"python3-spacewalk-client-tools": "5.2.7-150002.3.12.1",
"golang-github-prometheus-prometheus": "3.13.2-150002.3.19.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.2.17-150002.3.20.1"
}
]
}
],
"package": {
"name": "uyuni-tools",
"purl": "pkg:rpm/suse/uyuni-tools&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-Micro-5",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-Micro-5"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3006.0-150002.5.22.1"
}
]
}
],
"package": {
"name": "venv-salt-minion",
"purl": "pkg:rpm/suse/venv-salt-minion&distro=SUSE%20Multi%20Linux%20Manager%20Tools%20SLE-Micro-5",
"ecosystem": "SUSE:Multi Linux Manager Tools SLE-Micro-5"
},
"database_specific": {
"source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4585-1.json"
},
"ecosystem_specific": {
"binaries": [
{
"mgrctl": "5.2.17-150002.3.20.1",
"mgrctl-lang": "5.2.17-150002.3.20.1",
"venv-salt-minion": "3006.0-150002.5.22.1",
"mgrctl-zsh-completion": "5.2.17-150002.3.20.1",
"mgrctl-bash-completion": "5.2.17-150002.3.20.1"
}
]
}
}
],
"modified": "2026-10-08T19:15:05.011279037Z",
"provider": "osv",
"upstream": [
"CVE-2023-45289",
"CVE-2024-22195",
"CVE-2025-13836",
"CVE-2025-4673",
"CVE-2025-61686",
"CVE-2026-0864",
"CVE-2026-11940",
"CVE-2026-11972",
"CVE-2026-1229",
"CVE-2026-13346",
"CVE-2026-14199",
"CVE-2026-1502",
"CVE-2026-15308",
"CVE-2026-1703",
"CVE-2026-17033",
"CVE-2026-17183",
"CVE-2026-19197",
"CVE-2026-19475",
"CVE-2026-21723",
"CVE-2026-2303",
"CVE-2026-27459",
"CVE-2026-3219",
"CVE-2026-3276",
"CVE-2026-33814",
"CVE-2026-3446",
"CVE-2026-3479",
"CVE-2026-39821",
"CVE-2026-39882",
"CVE-2026-40181",
"CVE-2026-40475",
"CVE-2026-41066",
"CVE-2026-41178",
"CVE-2026-41606",
"CVE-2026-42127",
"CVE-2026-42211",
"CVE-2026-42342",
"CVE-2026-4360",
"CVE-2026-44431",
"CVE-2026-44990",
"CVE-2026-45409",
"CVE-2026-4786",
"CVE-2026-49825",
"CVE-2026-49853",
"CVE-2026-49854",
"CVE-2026-49855",
"CVE-2026-53606",
"CVE-2026-56852",
"CVE-2026-6019",
"CVE-2026-6100",
"CVE-2026-6357",
"CVE-2026-7210",
"CVE-2026-73501",
"CVE-2026-7774",
"CVE-2026-8328",
"CVE-2026-8595",
"CVE-2026-8609",
"CVE-2026-8643",
"CVE-2026-9029"
],
"references": [
"https://www.suse.com/support/update/announcement/2026/suse-su-20264585-1/",
"https://bugzilla.suse.com/1218722",
"https://bugzilla.suse.com/1230949",
"https://bugzilla.suse.com/1252286",
"https://bugzilla.suse.com/1254400",
"https://bugzilla.suse.com/1257151",
"https://bugzilla.suse.com/1257599",
"https://bugzilla.suse.com/1259989",
"https://bugzilla.suse.com/1261969",
"https://bugzilla.suse.com/1261970",
"https://bugzilla.suse.com/1262098",
"https://bugzilla.suse.com/1262187",
"https://bugzilla.suse.com/1262319",
"https://bugzilla.suse.com/1262429",
"https://bugzilla.suse.com/1262492",
"https://bugzilla.suse.com/1262654",
"https://bugzilla.suse.com/1262803",
"https://bugzilla.suse.com/1263254",
"https://bugzilla.suse.com/1263330",
"https://bugzilla.suse.com/1263442",
"https://bugzilla.suse.com/1263822",
"https://bugzilla.suse.com/1263823",
"https://bugzilla.suse.com/1264962",
"https://bugzilla.suse.com/1265267",
"https://bugzilla.suse.com/1265268",
"https://bugzilla.suse.com/1265413",
"https://bugzilla.suse.com/1265525",
"https://bugzilla.suse.com/1265763",
"https://bugzilla.suse.com/1266481",
"https://bugzilla.suse.com/1266608",
"https://bugzilla.suse.com/1266669",
"https://bugzilla.suse.com/1267261",
"https://bugzilla.suse.com/1267528",
"https://bugzilla.suse.com/1267534",
"https://bugzilla.suse.com/1267538",
"https://bugzilla.suse.com/1267581",
"https://bugzilla.suse.com/1267821",
"https://bugzilla.suse.com/1267980",
"https://bugzilla.suse.com/1268325",
"https://bugzilla.suse.com/1268395",
"https://bugzilla.suse.com/1268396",
"https://bugzilla.suse.com/1268397",
"https://bugzilla.suse.com/1268649",
"https://bugzilla.suse.com/1268755",
"https://bugzilla.suse.com/1268868",
"https://bugzilla.suse.com/1268977",
"https://bugzilla.suse.com/1269066",
"https://bugzilla.suse.com/1269788",
"https://bugzilla.suse.com/1269841",
"https://bugzilla.suse.com/1269856",
"https://bugzilla.suse.com/1269959",
"https://bugzilla.suse.com/1269966",
"https://bugzilla.suse.com/1270033",
"https://bugzilla.suse.com/1270285",
"https://bugzilla.suse.com/1270398",
"https://bugzilla.suse.com/1270399",
"https://bugzilla.suse.com/1270711",
"https://bugzilla.suse.com/1271192",
"https://bugzilla.suse.com/1271330",
"https://bugzilla.suse.com/1271428",
"https://bugzilla.suse.com/1271557",
"https://bugzilla.suse.com/1271613",
"https://bugzilla.suse.com/1272008",
"https://bugzilla.suse.com/1272102",
"https://bugzilla.suse.com/1272328",
"https://bugzilla.suse.com/1272427",
"https://bugzilla.suse.com/1273094",
"https://bugzilla.suse.com/1273144",
"https://bugzilla.suse.com/1274217",
"https://bugzilla.suse.com/1274221",
"https://bugzilla.suse.com/1275205",
"https://bugzilla.suse.com/1275206",
"https://bugzilla.suse.com/1275207",
"https://bugzilla.suse.com/1275934",
"https://bugzilla.suse.com/1276426",
"https://bugzilla.suse.com/1276658",
"https://bugzilla.suse.com/1276973",
"https://bugzilla.suse.com/1277025",
"https://bugzilla.suse.com/1278307",
"https://bugzilla.suse.com/1278322",
"https://www.suse.com/security/cve/CVE-2023-45289",
"https://www.suse.com/security/cve/CVE-2024-22195",
"https://www.suse.com/security/cve/CVE-2025-13836",
"https://www.suse.com/security/cve/CVE-2025-4673",
"https://www.suse.com/security/cve/CVE-2025-61686",
"https://www.suse.com/security/cve/CVE-2026-0864",
"https://www.suse.com/security/cve/CVE-2026-11940",
"https://www.suse.com/security/cve/CVE-2026-11972",
"https://www.suse.com/security/cve/CVE-2026-1229",
"https://www.suse.com/security/cve/CVE-2026-13346",
"https://www.suse.com/security/cve/CVE-2026-14199",
"https://www.suse.com/security/cve/CVE-2026-1502",
"https://www.suse.com/security/cve/CVE-2026-15308",
"https://www.suse.com/security/cve/CVE-2026-1703",
"https://www.suse.com/security/cve/CVE-2026-17033",
"https://www.suse.com/security/cve/CVE-2026-17183",
"https://www.suse.com/security/cve/CVE-2026-19197",
"https://www.suse.com/security/cve/CVE-2026-19475",
"https://www.suse.com/security/cve/CVE-2026-21723",
"https://www.suse.com/security/cve/CVE-2026-2303",
"https://www.suse.com/security/cve/CVE-2026-27459",
"https://www.suse.com/security/cve/CVE-2026-3219",
"https://www.suse.com/security/cve/CVE-2026-3276",
"https://www.suse.com/security/cve/CVE-2026-33814",
"https://www.suse.com/security/cve/CVE-2026-3446",
"https://www.suse.com/security/cve/CVE-2026-3479",
"https://www.suse.com/security/cve/CVE-2026-39821",
"https://www.suse.com/security/cve/CVE-2026-39882",
"https://www.suse.com/security/cve/CVE-2026-40181",
"https://www.suse.com/security/cve/CVE-2026-40475",
"https://www.suse.com/security/cve/CVE-2026-41066",
"https://www.suse.com/security/cve/CVE-2026-41178",
"https://www.suse.com/security/cve/CVE-2026-41606",
"https://www.suse.com/security/cve/CVE-2026-42127",
"https://www.suse.com/security/cve/CVE-2026-42211",
"https://www.suse.com/security/cve/CVE-2026-42342",
"https://www.suse.com/security/cve/CVE-2026-4360",
"https://www.suse.com/security/cve/CVE-2026-44431",
"https://www.suse.com/security/cve/CVE-2026-44990",
"https://www.suse.com/security/cve/CVE-2026-45409",
"https://www.suse.com/security/cve/CVE-2026-4786",
"https://www.suse.com/security/cve/CVE-2026-49825",
"https://www.suse.com/security/cve/CVE-2026-49853",
"https://www.suse.com/security/cve/CVE-2026-49854",
"https://www.suse.com/security/cve/CVE-2026-49855",
"https://www.suse.com/security/cve/CVE-2026-53606",
"https://www.suse.com/security/cve/CVE-2026-56852",
"https://www.suse.com/security/cve/CVE-2026-6019",
"https://www.suse.com/security/cve/CVE-2026-6100",
"https://www.suse.com/security/cve/CVE-2026-6357",
"https://www.suse.com/security/cve/CVE-2026-7210",
"https://www.suse.com/security/cve/CVE-2026-73501",
"https://www.suse.com/security/cve/CVE-2026-7774",
"https://www.suse.com/security/cve/CVE-2026-8328",
"https://www.suse.com/security/cve/CVE-2026-8595",
"https://www.suse.com/security/cve/CVE-2026-8609",
"https://www.suse.com/security/cve/CVE-2026-8643",
"https://www.suse.com/security/cve/CVE-2026-9029"
]
},
"related_cves": [
{
"value": "CVE-2023-45289",
"evidence": "/upstream"
},
{
"value": "CVE-2024-22195",
"evidence": "/upstream"
},
{
"value": "CVE-2025-13836",
"evidence": "/upstream"
},
{
"value": "CVE-2025-4673",
"evidence": "/upstream"
},
{
"value": "CVE-2025-61686",
"evidence": "/upstream"
},
{
"value": "CVE-2026-0864",
"evidence": "/upstream"
},
{
"value": "CVE-2026-11940",
"evidence": "/upstream"
},
{
"value": "CVE-2026-11972",
"evidence": "/upstream"
},
{
"value": "CVE-2026-1229",
"evidence": "/upstream"
},
{
"value": "CVE-2026-13346",
"evidence": "/upstream"
},
{
"value": "CVE-2026-14199",
"evidence": "/upstream"
},
{
"value": "CVE-2026-1502",
"evidence": "/upstream"
},
{
"value": "CVE-2026-15308",
"evidence": "/upstream"
},
{
"value": "CVE-2026-1703",
"evidence": "/upstream"
},
{
"value": "CVE-2026-17033",
"evidence": "/upstream"
},
{
"value": "CVE-2026-17183",
"evidence": "/upstream"
},
{
"value": "CVE-2026-19197",
"evidence": "/upstream"
},
{
"value": "CVE-2026-19475",
"evidence": "/upstream"
},
{
"value": "CVE-2026-21723",
"evidence": "/upstream"
},
{
"value": "CVE-2026-2303",
"evidence": "/upstream"
},
{
"value": "CVE-2026-27459",
"evidence": "/upstream"
},
{
"value": "CVE-2026-3219",
"evidence": "/upstream"
},
{
"value": "CVE-2026-3276",
"evidence": "/upstream"
},
{
"value": "CVE-2026-33814",
"evidence": "/upstream"
},
{
"value": "CVE-2026-3446",
"evidence": "/upstream"
},
{
"value": "CVE-2026-3479",
"evidence": "/upstream"
},
{
"value": "CVE-2026-39821",
"evidence": "/upstream"
},
{
"value": "CVE-2026-39882",
"evidence": "/upstream"
},
{
"value": "CVE-2026-40181",
"evidence": "/upstream"
},
{
"value": "CVE-2026-40475",
"evidence": "/upstream"
},
{
"value": "CVE-2026-41066",
"evidence": "/upstream"
},
{
"value": "CVE-2026-41178",
"evidence": "/upstream"
},
{
"value": "CVE-2026-41606",
"evidence": "/upstream"
},
{
"value": "CVE-2026-42127",
"evidence": "/upstream"
},
{
"value": "CVE-2026-42211",
"evidence": "/upstream"
},
{
"value": "CVE-2026-42342",
"evidence": "/upstream"
},
{
"value": "CVE-2026-4360",
"evidence": "/upstream"
},
{
"value": "CVE-2026-44431",
"evidence": "/upstream"
},
{
"value": "CVE-2026-44990",
"evidence": "/upstream"
},
{
"value": "CVE-2026-45409",
"evidence": "/upstream"
},
{
"value": "CVE-2026-4786",
"evidence": "/upstream"
},
{
"value": "CVE-2026-49825",
"evidence": "/upstream"
},
{
"value": "CVE-2026-49853",
"evidence": "/upstream"
},
{
"value": "CVE-2026-49854",
"evidence": "/upstream"
},
{
"value": "CVE-2026-49855",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53606",
"evidence": "/upstream"
},
{
"value": "CVE-2026-56852",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6019",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6100",
"evidence": "/upstream"
},
{
"value": "CVE-2026-6357",
"evidence": "/upstream"
},
{
"value": "CVE-2026-7210",
"evidence": "/upstream"
},
{
"value": "CVE-2026-73501",
"evidence": "/upstream"
},
{
"value": "CVE-2026-7774",
"evidence": "/upstream"
},
{
"value": "CVE-2026-8328",
"evidence": "/upstream"
},
{
"value": "CVE-2026-8595",
"evidence": "/upstream"
},
{
"value": "CVE-2026-8609",
"evidence": "/upstream"
},
{
"value": "CVE-2026-8643",
"evidence": "/upstream"
},
{
"value": "CVE-2026-9029",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 104490,
"published_at": "2026-10-08T08:24:34+00:00"
}