SUSE-SU-2026:3576-1: important: Security update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update

OPENSUSE-SECURITY-UPDATES <[email protected]>
Newsgroups gmane.linux.suse.security.announce
Message-ID <178646789977.365.16053522605801023443@4ec27b7f5325> 
# Security update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update

Announcement ID: SUSE-SU-2026:3576-1  
Release Date: 2026-08-11T11:51:08Z  
Rating: important  
References:

  * bsc#1270182
  * bsc#1270520
  * bsc#1270613
  * bsc#1270707
  * bsc#1270794
  * bsc#1270830
  * bsc#1270939
  * bsc#1270946
  * bsc#1270985
  * bsc#1273910
  * bsc#1273911
  * bsc#1273912

  
Cross-References:

  * CVE-2026-41676
  * CVE-2026-41677
  * CVE-2026-41678
  * CVE-2026-41681
  * CVE-2026-41898
  * CVE-2026-42327
  * CVE-2026-44662
  * CVE-2026-45784

  
CVSS scores:

  * CVE-2026-41676 ( SUSE ):  8.3
    CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-41676 ( SUSE ):  6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
  * CVE-2026-41676 ( NVD ):  7.2
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-41676 ( NVD ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-41677 ( SUSE ):  1.7
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
  * CVE-2026-41677 ( SUSE ):  3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
  * CVE-2026-41677 ( NVD ):  1.7
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-41677 ( NVD ):  9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
  * CVE-2026-41678 ( SUSE ):  8.3
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-41678 ( SUSE ):  7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
  * CVE-2026-41678 ( NVD ):  7.2
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-41678 ( NVD ):  8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2026-41681 ( SUSE ):  8.2
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
  * CVE-2026-41681 ( SUSE ):  5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
  * CVE-2026-41681 ( NVD ):  8.1
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-41681 ( NVD ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-41898 ( SUSE ):  8.3
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N
  * CVE-2026-41898 ( SUSE ):  6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
  * CVE-2026-41898 ( NVD ):  8.3
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-41898 ( NVD ):  5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
  * CVE-2026-42327 ( SUSE ):  8.7
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
  * CVE-2026-42327 ( SUSE ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
  * CVE-2026-42327 ( NVD ):  8.7
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-44662 ( SUSE ):  5.1
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
  * CVE-2026-44662 ( SUSE ):  4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
  * CVE-2026-44662 ( NVD ):  5.1
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-45784 ( SUSE ):  5.1
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
  * CVE-2026-45784 ( SUSE ):  6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
  * CVE-2026-45784 ( NVD ):  5.1
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  * CVE-2026-45784 ( NVD ):  7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

  
Affected Products:

  * openSUSE Leap 15.5
  * SUSE Linux Enterprise High Performance Computing 15 SP5
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
  * SUSE Linux Enterprise Server 15 SP5
  * SUSE Linux Enterprise Server 15 SP5 LTSS
  * SUSE Linux Enterprise Server 15 SP6
  * SUSE Linux Enterprise Server 15 SP6 LTSS
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5
  * SUSE Linux Enterprise Server for SAP Applications 15 SP6

  
  
An update that solves eight vulnerabilities and has four security fixes can now
be installed.

## Description:

This update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update fixes the
following issues:

Security fixes:

  * CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can
    overflow short buffers on OpenSSL 1.1.1 (bsc#1270182).
  * CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when
    returning an oversized length (bsc#1270613).
  * CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in
    `aes::unwrap_key()` (bsc#1270707).
  * CVE-2026-41681: openssl: stack corruption due to `MdCtxRef::digest_final()`
    writing past caller buffer with no length check (bsc#1270794).
  * CVE-2026-41898: openssl: information leak to network peers due to unchecked
    callback-returned length in PSK and cookie generate trampolines
    (bsc#1270830).
  * CVE-2026-42327: openssl: undefined behavior in `X509Ref::ocsp_responders`
    when processing certificates with non-UTF-8 OCSP URLs (bsc#1270520).
  * CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-
    wrap-with-padding (bsc#1270939).
  * CVE-2026-45784: out-of-bounds write in `CipherCtxRef::cipher_update_inplace`
    for AES-KW-PAD ciphers in rust-openssl crate (bsc#1270985).
  * GHSA-4f5j-9xgm-8pvr: arbitrary HTTP or HTTPS URL classified as an Office
    document based on an attacker-controlled file query parameters and forwarded
    to an Electron application (bsc#1273910).
  * GHSA-6cq7-jcwm-cpmr: directory-provided RFC2307 user identifiers accepted
    without exclusion of systemd's dynamic-user range allows for daemon
    impersonation and command execution through the task helper (bsc#1273911).
  * GHSA-6gp8-pp9v-gx45: daemon acts on Hello PIN enrollment requests whose
    identity claims it never cryptographically verifies (bsc#1273912).

Other fixes:

  * Version 2.3.14+git0.e23b4c54:

  * fix(nss): avoid locked shadow entries

  * Version 2.3.14:

  * fix(deps): update libhimmelblau lockfile

  * fix(pam): make account denials terminal
  * debian: make the pam_allow_groups denial terminal in the account phase

  * Version 2.3.13:

  * Update cargo vet audits for backport

  * Version 2.3.12+git0.9d56c6f1:

  * Fix cargo-fuzz install in fuzz CI

  * cargo vet
  * Update ldap3_proto to 0.7.1

  * Version 2.3.12:

  * Update cargo vet audits for backport

  * Remove invalid himmelblau.conf example info
  * Fix SSHd configuration load order on Fedora/RHEL systems
  * himmelblau-init-hsm-pin: don't bind the hsm-pin to PCR7
  * qr-greeter: support GNOME Shell 50
  * Update libhimmelblau to latest version
  * deps(rust): bump tonic in the all-cargo-updates group across 1 directory
  * cargo audit

  * Version 2.3.11+git0.c802b25f:

  * Update cargo vet audits for backport

  * Reject auth when token spn local part differs from requested account_id
  * Update libhimmelblau to latest version
  * deps(rust): bump the all-cargo-updates group with 19 updates
  * cargo vet

  * Version 2.3.10:

  * nss/pam: bail out early when SYSTEMD_ACTIVATION_UNIT points to himmelblau

  * selinux: allow unconfined_service_t to search himmelblaud_t dirs
  * idprovider: release providers lock before async alias lookup

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3576=1

  * SUSE Linux Enterprise Server 15 SP6 LTSS  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3576=1

  * SUSE Linux Enterprise Server 15 SP5 LTSS  
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3576=1

  * SUSE Linux Enterprise Server for SAP Applications 15 SP6  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3576=1

  * openSUSE Leap 15.5  
    zypper in -t patch SUSE-2026-3576=1

  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5  
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3576=1

  * SUSE Linux Enterprise Server for SAP Applications 15 SP5  
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3576=1

## Package List:

  * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64
    x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64
    x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
  * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * openSUSE Leap 15.5 (aarch64 x86_64)
    * himmelblau-sso-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-sso-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * pam-himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-debuginfo-2.3.14+git0.e23b4c54-150500.11.12.1
    * libnss_himmelblau2-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-2.3.14+git0.e23b4c54-150500.11.12.1
  * openSUSE Leap 15.5 (noarch)
    * himmelblau-sshd-config-2.3.14+git0.e23b4c54-150500.11.12.1
    * himmelblau-qr-greeter-2.3.14+git0.e23b4c54-150500.11.12.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-41676.html
  * https://www.suse.com/security/cve/CVE-2026-41677.html
  * https://www.suse.com/security/cve/CVE-2026-41678.html
  * https://www.suse.com/security/cve/CVE-2026-41681.html
  * https://www.suse.com/security/cve/CVE-2026-41898.html
  * https://www.suse.com/security/cve/CVE-2026-42327.html
  * https://www.suse.com/security/cve/CVE-2026-44662.html
  * https://www.suse.com/security/cve/CVE-2026-45784.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1270182
  * https://bugzilla.suse.com/show_bug.cgi?id=1270520
  * https://bugzilla.suse.com/show_bug.cgi?id=1270613
  * https://bugzilla.suse.com/show_bug.cgi?id=1270707
  * https://bugzilla.suse.com/show_bug.cgi?id=1270794
  * https://bugzilla.suse.com/show_bug.cgi?id=1270830
  * https://bugzilla.suse.com/show_bug.cgi?id=1270939
  * https://bugzilla.suse.com/show_bug.cgi?id=1270946
  * https://bugzilla.suse.com/show_bug.cgi?id=1270985
  * https://bugzilla.suse.com/show_bug.cgi?id=1273910
  * https://bugzilla.suse.com/show_bug.cgi?id=1273911
  * https://bugzilla.suse.com/show_bug.cgi?id=1273912
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.