SUSE-SU-2026:2116-1

Details

Description of the patch:

This update for csync2 fixes the following issue

CVE-2026-41051: uses insecure temporary directories when compiled with C99 or later (bsc#1262472).

Affected Packages

csync2

SUSE Linux Enterprise High Availability Extension 15 SP4SUSE Linux Enterprise High Availability Extension 15 SP5SUSE Linux Enterprise High Availability Extension 15 SP6SUSE Linux Enterprise High Availability Extension 15 SP7

Fixed in:

2.0+git.1600444747.83b3644-150300.3.6.1

References

ADVISORY

https://bugzilla.suse.com/1262472

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2026-May/026393.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-41051/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262116-1/