SUSE-SU-2026:2113-1

Details

Description of the patch:

This update for perl-Net-CIDR-Lite fixes the following issues

CVE-2026-45190: improper validation of trailing newlines or non-ASCII digits can lead to IP ACL bypass (bsc#1264710).
CVE-2026-45191: extraneous leading zeros in CIDR mask values can lead to IP ACL bypass (bsc#1264709).
CVE-2026-40198: missing validation for the IPv6 group count can lead to IP ACL bypass (bsc#1262088).
CVE-2026-40199: mishandled IPv4 mapped IPv6 addresses can lead to IP ACL bypass (bsc#1262088).

Affected Packages

perl-Net-CIDR-Lite

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP5-LTSSSUSE Linux Enterprise Module for Development Tools 15 SP7

Fixed in:

0.21-150100.6.8.1

References

ADVISORY

https://bugzilla.suse.com/1262088

ADVISORY

https://bugzilla.suse.com/1264709

ADVISORY

https://bugzilla.suse.com/1264710

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-May/026396.html

ADVISORY