SUSE-SU-2026:1361-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261361-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1361-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1361-1
Upstream
CVE (7)
Related
CVE (7)
Published
2026-04-15T14:14:00Z
Modified
2026-04-16T08:31:18Z
Summary
Security update for himmelblau
Details

This update for himmelblau fixes the following issues:

Update to version 2.3.9+git0.a9fd29b; (jsc#PED-14511):

  • CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324).
  • CVE-2026-31979: Fix race condition when accessiung /tmp/krb5cc_uid (bsc#1259548).
  • CVE-2026-25727: deps(rust): Bump the all-cargo-updates group with 8 updates (bsc#1257904).
  • CVE-2025-58160: deps(rust): Bump tracing-subscriber in the cargo group (bsc#1249013).
  • CVE-2025-54882: Fix Kerberos credential cache permissions (bsc#1247735).
  • CVE-2025-53013: Fix permitted authentication with invalid Hello PIN (bsc#1245437).
  • CVE-2024-11738: Fix rustls network-reachable panic in Acceptor::accept (bsc#1233949).

Other bug fixes:

  • Fix SELinux module packaging to use standard policy macros (bsc#1258236).
References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP7 / himmelblau

Package

Name
himmelblau
Purl
pkg:rpm/suse/himmelblau&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.3.9+git0.a9fd29b-150700.3.15.1

Ecosystem specific 

{
    "binaries":  [
        {
            "himmelblau":  "2.3.9+git0.a9fd29b-150700.3.15.1",
            "himmelblau-sshd-config":  "2.3.9+git0.a9fd29b-150700.3.15.1",
            "libnss_himmelblau2":  "2.3.9+git0.a9fd29b-150700.3.15.1",
            "pam-himmelblau":  "2.3.9+git0.a9fd29b-150700.3.15.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1361-1.json"