SUSE-SU-2026:23576-1
Vulnerability from csaf_suse - Published: 2026-08-30 15:28 - Updated: 2026-09-29 17:28Summary
Security update for go1.26-openssl
Severity
Important
Notes
Title of the patch: Security update for go1.26-openssl
Description of the patch: This update for go1.26-openssl fixes the following issues:
Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips.
Security issues fixed:
- CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to denial
of service (bsc#1275034).
- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation
bypass and privilege escalation (bsc#1266609).
- CVE-2026-56853: net/http: first header read timeout not being applied when a server is configured to support
unencrypted HTTP/2 allows for denial of service (bsc#1275028).
- CVE-2026-56858: html/template: wrong JavaScript regexp context tracking after top-level `{` can lead to XSS
(bsc#1275033).
- CVE-2026-56859: encoding/xml: stack exhaustion due to recursion depth guard bypass during decoding operations can
lead to denial of service (bsc#1275026).
- CVE-2026-56860: net/url: quadratic complexity in `resolvePath` when processing backtrack path elements can lead to
denial of service (bsc#1275029).
- CVE-2026-56862: crypto/tls: handshake messages can bypass non-advancing record limit in TLS 1.3, which can lead to
a denial of service (bsc#1275032).
- CVE-2026-56864: x/mod/sumdb: a malicious `GOSUMDB` is capable of serving arbitrary module content not contained
within the transparency log (bsc#1275025).
- CVE-2026-56865: x/mod/sumdb/tlog: a malicious `GOPROXY` is capable of forging sumdb tiles, which allows for bypass of
the `GOSUMDB` check and persistence of attacker-controlled module contents to a local Go module cache (bsc#1275024).
Other updates and bugfixes:
- Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips:
(jsc#SLE-18320).
* Rebase to 1.26.7
* Support `strictfipsruntime` with `no_openssl`
* Fix multiple `no_openssl` build tag issues
- go1.26.7 (released 2026-08-19, boo#1255111):
* go#80927 net/http: `ReadHeaderTimeout` remains active after unencrypted `HTTP/2` handoff
- go1.26.6 (released 2026-08-13):
* includes security fixes to the `go` command, and the `crypto/tls`, `encoding/asn1`, `encoding/xml`,
`html/template`, `net`, `net/http`, and `net/url` packages, as well as bug fixes to the compiler, the linker, the
runtime, and the `crypto/tls` and `os` packages.
* go#79876 cmd/compile: `prove` misscompilation in `slicemask` folding leaves garbage in the upper bits
* go#80099 cmd/compile: internal compiler error invalid heap allocated var without `Heapaddr`
* go#80131 cmd/link: `peCreateExportFile` generates invalid `.def` file when output name has trailing dot (`c-shared`
on Windows)
* go#80365 os: `Root`'s `MkdirAll` can't create paths ending in forward slashes
* go#80367 os: `TestRootMultiReadFile` fails on `netbsd/arm64` after CL 797880
* go#80369 os: `TestRootConsistencyRemoveAll` fails on Plan 9 after CL 797880
* go#80394 runtime: `arm64` found pointer to free object with safe code
* go#80441 runtime: uninitialized register due to wrong ABI in `mach_vm_region_trampoline` leads to `libc` following
garbage stack data as a pointer
* go#80478 cmd/compile: `riscv64` miscompiles struct copy, corrupting a `[]byte` slice field
* go#80499 runtime: js/wasm: "found bad pointer in Go heap" -- link-layout-constant value recorded as a pointer in
the write-barrier buffer
* go#80579 cmd/compile: `regalloc` uses unreliable type data (like `v.Type.IsSigned()`) to choose the restore of
spills
* go#80606 crypto/tls: escape hatch for FIPS 140-3 mode Extended Master Secret enforcement
* go#80609 net, x/net/dns/dnsmessage: panic when parsing invalid `SVCB` record
* go#80615 cmd/compile: `mips64le` misscompile `OffPtr` by a const which doesn't fit 32bits resulting in panic
* go#80617 cmd/compile: `mips`/`mips64`, multiply/divide results spilled from `HI`/`LO` corrupted w/ big stack frames
* go#80619 cmd/compile: `prove` bug causes invalid indirect call
* go#80715 runtime: `fpTracebackPartialExpand` `SIGSEGV` under high panic load
- Update to version 1.26.5 cut from the go1.25-fips-release branch at the revision tagged go1.26.5-2-openssl-fips:
* Limit `openssl` `RandReader` concurrency
Patchnames: SUSE-SLES-16.0-1561
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.4 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
important
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
24 products, the same list as for
CVE-2026-33818
Threats
Impact
important
References
41 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for go1.26-openssl",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for go1.26-openssl fixes the following issues:\n\nUpdate to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips.\n\nSecurity issues fixed:\n\n- CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to denial\n of service (bsc#1275034).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n bypass and privilege escalation (bsc#1266609).\n- CVE-2026-56853: net/http: first header read timeout not being applied when a server is configured to support\n unencrypted HTTP/2 allows for denial of service (bsc#1275028).\n- CVE-2026-56858: html/template: wrong JavaScript regexp context tracking after top-level `{` can lead to XSS\n (bsc#1275033).\n- CVE-2026-56859: encoding/xml: stack exhaustion due to recursion depth guard bypass during decoding operations can\n lead to denial of service (bsc#1275026).\n- CVE-2026-56860: net/url: quadratic complexity in `resolvePath` when processing backtrack path elements can lead to\n denial of service (bsc#1275029).\n- CVE-2026-56862: crypto/tls: handshake messages can bypass non-advancing record limit in TLS 1.3, which can lead to\n a denial of service (bsc#1275032).\n- CVE-2026-56864: x/mod/sumdb: a malicious `GOSUMDB` is capable of serving arbitrary module content not contained\n within the transparency log (bsc#1275025).\n- CVE-2026-56865: x/mod/sumdb/tlog: a malicious `GOPROXY` is capable of forging sumdb tiles, which allows for bypass of\n the `GOSUMDB` check and persistence of attacker-controlled module contents to a local Go module cache (bsc#1275024).\n\nOther updates and bugfixes:\n\n- Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips:\n (jsc#SLE-18320).\n * Rebase to 1.26.7\n * Support `strictfipsruntime` with `no_openssl`\n * Fix multiple `no_openssl` build tag issues\n- go1.26.7 (released 2026-08-19, boo#1255111):\n * go#80927 net/http: `ReadHeaderTimeout` remains active after unencrypted `HTTP/2` handoff\n- go1.26.6 (released 2026-08-13):\n * includes security fixes to the `go` command, and the `crypto/tls`, `encoding/asn1`, `encoding/xml`,\n `html/template`, `net`, `net/http`, and `net/url` packages, as well as bug fixes to the compiler, the linker, the\n runtime, and the `crypto/tls` and `os` packages.\n * go#79876 cmd/compile: `prove` misscompilation in `slicemask` folding leaves garbage in the upper bits\n * go#80099 cmd/compile: internal compiler error invalid heap allocated var without `Heapaddr`\n * go#80131 cmd/link: `peCreateExportFile` generates invalid `.def` file when output name has trailing dot (`c-shared`\n on Windows)\n * go#80365 os: `Root`\u0027s `MkdirAll` can\u0027t create paths ending in forward slashes\n * go#80367 os: `TestRootMultiReadFile` fails on `netbsd/arm64` after CL 797880\n * go#80369 os: `TestRootConsistencyRemoveAll` fails on Plan 9 after CL 797880\n * go#80394 runtime: `arm64` found pointer to free object with safe code\n * go#80441 runtime: uninitialized register due to wrong ABI in `mach_vm_region_trampoline` leads to `libc` following\n garbage stack data as a pointer\n * go#80478 cmd/compile: `riscv64` miscompiles struct copy, corrupting a `[]byte` slice field\n * go#80499 runtime: js/wasm: \"found bad pointer in Go heap\" -- link-layout-constant value recorded as a pointer in\n the write-barrier buffer\n * go#80579 cmd/compile: `regalloc` uses unreliable type data (like `v.Type.IsSigned()`) to choose the restore of\n spills\n * go#80606 crypto/tls: escape hatch for FIPS 140-3 mode Extended Master Secret enforcement\n * go#80609 net, x/net/dns/dnsmessage: panic when parsing invalid `SVCB` record\n * go#80615 cmd/compile: `mips64le` misscompile `OffPtr` by a const which doesn\u0027t fit 32bits resulting in panic\n * go#80617 cmd/compile: `mips`/`mips64`, multiply/divide results spilled from `HI`/`LO` corrupted w/ big stack frames\n * go#80619 cmd/compile: `prove` bug causes invalid indirect call\n * go#80715 runtime: `fpTracebackPartialExpand` `SIGSEGV` under high panic load\n- Update to version 1.26.5 cut from the go1.25-fips-release branch at the revision tagged go1.26.5-2-openssl-fips:\n * Limit `openssl` `RandReader` concurrency\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-1561",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23576-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:23576-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623576-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:23576-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-September/029103.html"
},
{
"category": "self",
"summary": "SUSE Bug 1255111",
"url": "https://bugzilla.suse.com/1255111"
},
{
"category": "self",
"summary": "SUSE Bug 1266609",
"url": "https://bugzilla.suse.com/1266609"
},
{
"category": "self",
"summary": "SUSE Bug 1275024",
"url": "https://bugzilla.suse.com/1275024"
},
{
"category": "self",
"summary": "SUSE Bug 1275025",
"url": "https://bugzilla.suse.com/1275025"
},
{
"category": "self",
"summary": "SUSE Bug 1275026",
"url": "https://bugzilla.suse.com/1275026"
},
{
"category": "self",
"summary": "SUSE Bug 1275028",
"url": "https://bugzilla.suse.com/1275028"
},
{
"category": "self",
"summary": "SUSE Bug 1275029",
"url": "https://bugzilla.suse.com/1275029"
},
{
"category": "self",
"summary": "SUSE Bug 1275032",
"url": "https://bugzilla.suse.com/1275032"
},
{
"category": "self",
"summary": "SUSE Bug 1275033",
"url": "https://bugzilla.suse.com/1275033"
},
{
"category": "self",
"summary": "SUSE Bug 1275034",
"url": "https://bugzilla.suse.com/1275034"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33818 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56853 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56853/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56858 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56859 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56859/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56860 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56860/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56862 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56862/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56865 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56865/"
}
],
"title": "Security update for go1.26-openssl",
"tracking": {
"current_release_date": "2026-09-29T17:28:02Z",
"generator": {
"date": "2026-08-30T15:28:34Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:23576-1",
"initial_release_date": "2026-08-30T15:28:34Z",
"revision_history": [
{
"date": "2026-08-30T15:28:34Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-29T17:28:02Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"product": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"product_id": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl@1.26.7-160000.1.1?arch=aarch64\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"product": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"product_id": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-doc@1.26.7-160000.1.1?arch=aarch64\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"product": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"product_id": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-race@1.26.7-160000.1.1?arch=aarch64\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"product": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"product_id": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl@1.26.7-160000.1.1?arch=ppc64le\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"product": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"product_id": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-doc@1.26.7-160000.1.1?arch=ppc64le\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"product": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"product_id": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-race@1.26.7-160000.1.1?arch=ppc64le\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"product": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"product_id": "go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl@1.26.7-160000.1.1?arch=s390x\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"product": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"product_id": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-doc@1.26.7-160000.1.1?arch=s390x\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"product": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"product_id": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-race@1.26.7-160000.1.1?arch=s390x\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"product": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"product_id": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl@1.26.7-160000.1.1?arch=x86_64\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"product": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"product_id": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-doc@1.26.7-160000.1.1?arch=x86_64\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"product": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"product_id": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:golang:go:1.26.7:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/go1.26-openssl-race@1.26.7-160000.1.1?arch=x86_64\u0026upstream=go1.26-openssl-0:1.26.7-160000.1.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64"
},
"product_reference": "go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64"
},
"product_reference": "go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
},
"product_reference": "go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33818"
}
],
"notes": [
{
"category": "general",
"text": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33818",
"url": "https://www.suse.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "SUSE Bug 1275034 for CVE-2026-33818",
"url": "https://bugzilla.suse.com/1275034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "important"
}
],
"title": "CVE-2026-33818"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-56853",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56853"
}
],
"notes": [
{
"category": "general",
"text": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56853",
"url": "https://www.suse.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "SUSE Bug 1275028 for CVE-2026-56853",
"url": "https://bugzilla.suse.com/1275028"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "important"
}
],
"title": "CVE-2026-56853"
},
{
"cve": "CVE-2026-56858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56858"
}
],
"notes": [
{
"category": "general",
"text": "Previously, pathological inputs could close an unescaped \u0027/\u0027 early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56858",
"url": "https://www.suse.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "SUSE Bug 1275033 for CVE-2026-56858",
"url": "https://bugzilla.suse.com/1275033"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "moderate"
}
],
"title": "CVE-2026-56858"
},
{
"cve": "CVE-2026-56859",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56859"
}
],
"notes": [
{
"category": "general",
"text": "Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56859",
"url": "https://www.suse.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "SUSE Bug 1275026 for CVE-2026-56859",
"url": "https://bugzilla.suse.com/1275026"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "important"
}
],
"title": "CVE-2026-56859"
},
{
"cve": "CVE-2026-56860",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56860"
}
],
"notes": [
{
"category": "general",
"text": "Previously, resolving relative paths containing parent directory (\u0027..\u0027) segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for \u0027..\u0027 segments, eliminating the quadratic time complexity and significantly reducing memory allocations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56860",
"url": "https://www.suse.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "SUSE Bug 1275029 for CVE-2026-56860",
"url": "https://bugzilla.suse.com/1275029"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "moderate"
}
],
"title": "CVE-2026-56860"
},
{
"cve": "CVE-2026-56862",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56862"
}
],
"notes": [
{
"category": "general",
"text": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56862",
"url": "https://www.suse.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "SUSE Bug 1275032 for CVE-2026-56862",
"url": "https://bugzilla.suse.com/1275032"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "important"
}
],
"title": "CVE-2026-56862"
},
{
"cve": "CVE-2026-56864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56864"
}
],
"notes": [
{
"category": "general",
"text": "A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ \u0026\u0026 go mod tidy",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56864",
"url": "https://www.suse.com/security/cve/CVE-2026-56864"
},
{
"category": "external",
"summary": "SUSE Bug 1275025 for CVE-2026-56864",
"url": "https://bugzilla.suse.com/1275025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "moderate"
}
],
"title": "CVE-2026-56864"
},
{
"cve": "CVE-2026-56865",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56865"
}
],
"notes": [
{
"category": "general",
"text": "A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that cannot be detected by evaluating the transparency log. All tiles are now correctly verified against their parents. In order to determine if you have been affected: rm -r go.sum go.work.sum vendor/ \u0026\u0026 go mod tidy",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56865",
"url": "https://www.suse.com/security/cve/CVE-2026-56865"
},
{
"category": "external",
"summary": "SUSE Bug 1275024 for CVE-2026-56865",
"url": "https://bugzilla.suse.com/1275024"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-doc-0:1.26.7-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-openssl-race-0:1.26.7-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-30T15:28:34Z",
"details": "important"
}
],
"title": "CVE-2026-56865"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.