SUSE-SU-2026:23321-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-202623321-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23321-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:23321-1
Upstream
CVE (10)
Related
CVE (10)
Published
2026-08-25T06:34:19Z
Modified
2026-09-10T18:23:36Z
Summary
Security update for rmt-server
Details

This update for rmt-server fixes the following issues:

Update to version 3.1 (bsc#1274715).

Security issues fixed:

  • CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass (bsc#1261398).
  • CVE-2026-26962: rack: improper unfolding of folded multipart headers can lead to downstream header injection and response splitting(bsc#1261471).
  • CVE-2026-34763: rack: unescaped regex interpolation of configured root path can lead to root directory disclosure (bsc#1261406).
  • CVE-2026-34230: rack: crafted Accept-Encoding headers can cause a denial of service (bsc#1261388).
  • CVE-2026-34785: rack: prefix matching logic can lead to the exposure of unintended files under the static root (bsc#1261417).
  • CVE-2026-34786: rack: URL-encoded path mismatch can lead to header_rules bypass (bsc#1261426).
  • CVE-2026-34826: rack: missing individual byte range limit checks when parsing HTTP Range headers can lead to excessive resource consumption and a denial of service (bsc#1261436).
  • CVE-2026-34829: rack: multipart parsing without Content-Length header can lead to unbounded chunked file uploads and a denial of service (bsc#1261447).
  • CVE-2026-34230: rack: quadratic complexity when processing of wildcard Accept-Encoding headers can lead to a denial of service (bsc#1261388).
  • CVE-2026-34830: rack: improper sanitization of the X-Accel-Mapping request header can lead to the exposure of unintended files via X-Accel-Redirect (bsc#1261458).
  • CVE-2026-34831: rack: Content-Length header and body byte size mismatch when creating error responses can lead to incorrect HTTP response framing (bsc#1261466).

Other updates and bugfixes:

  • Version 3.1:
    • Remove all errors and warnigs due to new Ruby and Ruby on Rails versions
  • Version 2.28:
    • Set arch to unknown for Rancher based products (jsc#SCC-759)
    • Fix purge for large amount of systems (bsc#1262706)
    • Change data type to MEDIUMTEXT in profiles table (bsc#1268305)
    • Remove proxy_byos column
    • Fix race condition when no system matches (bsc#1268301)
    • Fix race condition for PAYG (bsc#1268149)
    • Fix race condition to update a system (bsc#1268303)
  • Version 2.27:
    • Fix ReDoS vulnerability in Addressable
    • Fixes out-of-bounds read vulnerability in rdiscount
References

Affected packages

SUSE:Linux Enterprise Server 16.0 / rmt-server

Package

Name
rmt-server
Purl
pkg:rpm/suse/rmt-server&distro=SUSE%20Linux%20Enterprise%20Server%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.1.0-160000.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rmt-server":  "3.1.0-160000.1.1",
            "rmt-server-config":  "3.1.0-160000.1.1",
            "rmt-server-pubcloud":  "3.1.0-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23321-1.json"

SUSE:Linux Enterprise Server for SAP applications 16.0 / rmt-server

Package

Name
rmt-server
Purl
pkg:rpm/suse/rmt-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.1.0-160000.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rmt-server":  "3.1.0-160000.1.1",
            "rmt-server-config":  "3.1.0-160000.1.1",
            "rmt-server-pubcloud":  "3.1.0-160000.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23321-1.json"