SUSE-SU-2026:2441-1

CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257902).
rust-shlex: Multiple issues involving quote API (RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27) (bsc#1230032).

References

Affected packages

SUSE:Linux Enterprise Module for Development Tools 15 SP7

rustup

Name: rustup
Purl: pkg:rpm/suse/rustup&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.28.2~0-150600.10.10.1

{
    "binaries":  [
        {
            "rustup":  "1.28.2~0-150600.10.10.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2441-1.json"

SUSE:Linux Enterprise Server 15 SP6-LTSS

rustup

Name: rustup
Purl: pkg:rpm/suse/rustup&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.28.2~0-150600.10.10.1

{
    "binaries":  [
        {
            "rustup":  "1.28.2~0-150600.10.10.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2441-1.json"

SUSE:Linux Enterprise Server for SAP Applications 15 SP6

rustup

Name: rustup
Purl: pkg:rpm/suse/rustup&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.28.2~0-150600.10.10.1

{
    "binaries":  [
        {
            "rustup":  "1.28.2~0-150600.10.10.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2441-1.json"