SUSE-SU-2026:3600-1

Опубликовано: 12 авг. 2026

Источник: suse-cvrf

Описание

Security update for rpm

This update for rpm fixes the following issues:

Security issues fixed:

CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

Other updates and bugfixes:

Fix libelf handle not being closed, resulting in build errors when using a NFS buildroot (bsc#1240054).

Список пакетов

Container bci/bci-minimal:latest

rpm-ndb-4.14.3-150400.59.19.1

Container bci/bci-sle15-kernel-module-devel:latest

rpm-build-4.14.3-150400.59.19.1

Container suse/kiosk/tigervnc-x11vnc:latest

rpm-ndb-4.14.3-150400.59.19.1

Container suse/ltss/sle15.4/sle15:latest

rpm-ndb-4.14.3-150400.59.19.1

Container suse/ltss/sle15.5/sle15:latest

rpm-ndb-4.14.3-150400.59.19.1

Container suse/manager/4.3/proxy-httpd:latest

python3-rpm-4.14.3-150400.59.19.1

Container suse/sle-micro-rancher/5.3:latest

rpm-ndb-4.14.3-150400.59.19.1

Container suse/sle-micro-rancher/5.4:latest

rpm-ndb-4.14.3-150400.59.19.1

Container suse/sle-micro/5.3/toolbox:latest

python3-rpm-4.14.3-150400.59.19.1

rpm-ndb-4.14.3-150400.59.19.1

Container suse/sle-micro/5.4/toolbox:latest

python3-rpm-4.14.3-150400.59.19.1

rpm-ndb-4.14.3-150400.59.19.1

Container suse/sle-micro/5.5/toolbox:latest

python3-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

Container suse/sle-micro/5.5:latest

rpm-4.14.3-150400.59.19.1

Container suse/sle-micro/base-5.5:latest

rpm-4.14.3-150400.59.19.1

Container suse/sle-micro/kvm-5.5:latest

rpm-4.14.3-150400.59.19.1

Container suse/sle-micro/rt-5.5:latest

rpm-4.14.3-150400.59.19.1

Container suse/sle15:latest

rpm-ndb-4.14.3-150400.59.19.1

Container third-party/nvidia/driver:550-sles15.7

rpm-ndb-4.14.3-150400.59.19.1

Container third-party/nvidia/driver:570-sles15.7

rpm-ndb-4.14.3-150400.59.19.1

Container third-party/nvidia/driver:575-sles15.7

rpm-ndb-4.14.3-150400.59.19.1

Container third-party/nvidia/driver:580-sles15.7

rpm-ndb-4.14.3-150400.59.19.1

Container third-party/nvidia/driver:590-sles15.7

rpm-ndb-4.14.3-150400.59.19.1

Container third-party/nvidia/driver:595-sles15.7

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise Micro 5.4

python3-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise Micro 5.5

python3-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

python3-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

rpm-imaevmsign-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Development Tools 15 SP7

rpm-build-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Public Cloud 15 SP4

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Public Cloud 15 SP5

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Public Cloud 15 SP6

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Public Cloud 15 SP7

rpm-ndb-4.14.3-150400.59.19.1

SUSE Linux Enterprise Module for Python 3 15 SP7

python311-rpm-4.14.3-150400.59.19.1

SUSE Linux Enterprise Server 15 SP4-LTSS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise Server 15 SP5-LTSS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise Server 15 SP6-LTSS

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

rpm-imaevmsign-4.14.3-150400.59.19.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

python3-rpm-4.14.3-150400.59.19.1

python311-rpm-4.14.3-150400.59.19.1

rpm-4.14.3-150400.59.19.1

rpm-32bit-4.14.3-150400.59.19.1

rpm-build-4.14.3-150400.59.19.1

rpm-devel-4.14.3-150400.59.19.1

rpm-imaevmsign-4.14.3-150400.59.19.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20263600-1/
Link for SUSE-SU-2026:3600-1
https://lists.suse.com/pipermail/sle-security-updates/2026-August/028278.html
E-Mail link for SUSE-SU-2026:3600-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1240054
SUSE Bug 1240054
https://bugzilla.suse.com/1269584
SUSE Bug 1269584
https://www.suse.com/security/cve/CVE-2026-44605/
SUSE CVE CVE-2026-44605 page

Описание

A flaw was found in the RPM Package Manager (RPM). A local user could be affected by a heap buffer overflow vulnerability when processing a specially crafted NDB database file. This issue arises from an error in how RPM handles certain calculations during file parsing, leading to an incorrect memory allocation. An attacker could leverage this to cause a denial of service, making the system unavailable.

Затронутые продукты

Container bci/bci-minimal:latest:rpm-ndb-4.14.3-150400.59.19.1

Container bci/bci-sle15-kernel-module-devel:latest:rpm-build-4.14.3-150400.59.19.1

Container suse/kiosk/tigervnc-x11vnc:latest:rpm-ndb-4.14.3-150400.59.19.1

Container suse/ltss/sle15.4/sle15:latest:rpm-ndb-4.14.3-150400.59.19.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-44605.html
CVE-2026-44605
https://bugzilla.suse.com/1269584
SUSE Bug 1269584

SUSE-SU-2026:3600-1

Описание

Список пакетов

Container bci/bci-minimal:latest

Container bci/bci-sle15-kernel-module-devel:latest

Container suse/kiosk/tigervnc-x11vnc:latest

Container suse/ltss/sle15.4/sle15:latest

Container suse/ltss/sle15.5/sle15:latest

Container suse/manager/4.3/proxy-httpd:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.3/toolbox:latest

Container suse/sle-micro/5.4/toolbox:latest

Container suse/sle-micro/5.5/toolbox:latest

Container suse/sle-micro/5.5:latest

Container suse/sle-micro/base-5.5:latest

Container suse/sle-micro/kvm-5.5:latest

Container suse/sle-micro/rt-5.5:latest

Container suse/sle15:latest

Container third-party/nvidia/driver:550-sles15.7

Container third-party/nvidia/driver:570-sles15.7

Container third-party/nvidia/driver:575-sles15.7

Container third-party/nvidia/driver:580-sles15.7

Container third-party/nvidia/driver:590-sles15.7

Container third-party/nvidia/driver:595-sles15.7

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Development Tools 15 SP7

SUSE Linux Enterprise Module for Public Cloud 15 SP4

SUSE Linux Enterprise Module for Public Cloud 15 SP5

SUSE Linux Enterprise Module for Public Cloud 15 SP6

SUSE Linux Enterprise Module for Public Cloud 15 SP7

SUSE Linux Enterprise Module for Python 3 15 SP7

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-44605

Описание

Затронутые продукты

Ссылки