{
  "fix": "SUSE-SU-2026:4677-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4677-1",
  "summary": "SUSE-SU-2026:4677-1, released November 7, 2026, fixes 3 CVEs across 38 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 38 packages",
  "released": "2026-11-07T00:41:11Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-7962, high severity",
  "supported": true,
  "cveCount": 3,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.02642,
  "maxCvss": 7.4,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:4677-1",
  "appliesTo": [
    {
      "product": "ant",
      "productUrl": "https://patchblox.com/security/product/linux/ant",
      "release": "sles 15.6",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant",
      "productUrl": "https://patchblox.com/security/product/linux/ant",
      "release": "sles 15.7",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant-antlr",
      "productUrl": "https://patchblox.com/security/product/linux/ant-antlr",
      "release": "sles 15.6",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant-antlr",
      "productUrl": "https://patchblox.com/security/product/linux/ant-antlr",
      "release": "sles 15.7",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant-contrib",
      "productUrl": "https://patchblox.com/security/product/linux/ant-contrib",
      "release": "sles 15.6",
      "fixedVersion": "1.0b3-150200.11.17.1",
      "supported": true
    },
    {
      "product": "ant-contrib",
      "productUrl": "https://patchblox.com/security/product/linux/ant-contrib",
      "release": "sles 15.7",
      "fixedVersion": "1.0b3-150200.11.17.1",
      "supported": true
    },
    {
      "product": "ant-junit",
      "productUrl": "https://patchblox.com/security/product/linux/ant-junit",
      "release": "sles 15.6",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant-junit",
      "productUrl": "https://patchblox.com/security/product/linux/ant-junit",
      "release": "sles 15.7",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant-junit5",
      "productUrl": "https://patchblox.com/security/product/linux/ant-junit5",
      "release": "sles 15.6",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "ant-junit5",
      "productUrl": "https://patchblox.com/security/product/linux/ant-junit5",
      "release": "sles 15.7",
      "fixedVersion": "1.10.18-150200.4.31.3",
      "supported": true
    },
    {
      "product": "antlr",
      "productUrl": "https://patchblox.com/security/product/linux/antlr",
      "release": "sles 15.6",
      "fixedVersion": "2.7.7-150200.18.10.2",
      "supported": true
    },
    {
      "product": "antlr",
      "productUrl": "https://patchblox.com/security/product/linux/antlr",
      "release": "sles 15.7",
      "fixedVersion": "2.7.7-150200.18.10.2",
      "supported": true
    },
    {
      "product": "assertj-core",
      "productUrl": "https://patchblox.com/security/product/linux/assertj-core",
      "release": "sles 15.6",
      "fixedVersion": "3.27.7-150200.5.11.8",
      "supported": true
    },
    {
      "product": "assertj-core",
      "productUrl": "https://patchblox.com/security/product/linux/assertj-core",
      "release": "sles 15.7",
      "fixedVersion": "3.27.7-150200.5.11.8",
      "supported": true
    },
    {
      "product": "bsf",
      "productUrl": "https://patchblox.com/security/product/linux/bsf",
      "release": "sles 15.6",
      "fixedVersion": "2.4.0-150200.13.8.2",
      "supported": true
    },
    {
      "product": "bsf",
      "productUrl": "https://patchblox.com/security/product/linux/bsf",
      "release": "sles 15.7",
      "fixedVersion": "2.4.0-150200.13.8.2",
      "supported": true
    },
    {
      "product": "byte-buddy",
      "productUrl": "https://patchblox.com/security/product/linux/byte-buddy",
      "release": "sles 15.6",
      "fixedVersion": "1.18.8-150200.5.13.2",
      "supported": true
    },
    {
      "product": "byte-buddy",
      "productUrl": "https://patchblox.com/security/product/linux/byte-buddy",
      "release": "sles 15.7",
      "fixedVersion": "1.18.8-150200.5.13.2",
      "supported": true
    },
    {
      "product": "jakarta-activation",
      "productUrl": "https://patchblox.com/security/product/linux/jakarta-activation",
      "release": "sles 15.6",
      "fixedVersion": "2.1.0-150200.5.7.1",
      "supported": true
    },
    {
      "product": "jakarta-activation",
      "productUrl": "https://patchblox.com/security/product/linux/jakarta-activation",
      "release": "sles 15.7",
      "fixedVersion": "2.1.0-150200.5.7.1",
      "supported": true
    },
    {
      "product": "jakarta-mail",
      "productUrl": "https://patchblox.com/security/product/linux/jakarta-mail",
      "release": "sles 15.6",
      "fixedVersion": "2.1.0-150200.5.7.2",
      "supported": true
    },
    {
      "product": "jakarta-mail",
      "productUrl": "https://patchblox.com/security/product/linux/jakarta-mail",
      "release": "sles 15.7",
      "fixedVersion": "2.1.0-150200.5.7.2",
      "supported": true
    },
    {
      "product": "javaparser",
      "productUrl": "https://patchblox.com/security/product/linux/javaparser",
      "release": "sles 15.6",
      "fixedVersion": "3.28.2-150200.3.10.2",
      "supported": true
    },
    {
      "product": "javaparser",
      "productUrl": "https://patchblox.com/security/product/linux/javaparser",
      "release": "sles 15.7",
      "fixedVersion": "3.28.2-150200.3.10.2",
      "supported": true
    },
    {
      "product": "javassist",
      "productUrl": "https://patchblox.com/security/product/linux/javassist",
      "release": "sles 15.6",
      "fixedVersion": "3.29.2-150200.3.12.2",
      "supported": true
    },
    {
      "product": "javassist",
      "productUrl": "https://patchblox.com/security/product/linux/javassist",
      "release": "sles 15.7",
      "fixedVersion": "3.29.2-150200.3.12.2",
      "supported": true
    },
    {
      "product": "jdepend",
      "productUrl": "https://patchblox.com/security/product/linux/jdepend",
      "release": "sles 15.6",
      "fixedVersion": "2.10-150200.11.6.2",
      "supported": true
    },
    {
      "product": "jdepend",
      "productUrl": "https://patchblox.com/security/product/linux/jdepend",
      "release": "sles 15.7",
      "fixedVersion": "2.10-150200.11.6.2",
      "supported": true
    },
    {
      "product": "junit5",
      "productUrl": "https://patchblox.com/security/product/linux/junit5",
      "release": "sles 15.6",
      "fixedVersion": "5.14.4-150200.3.15.15",
      "supported": true
    },
    {
      "product": "junit5",
      "productUrl": "https://patchblox.com/security/product/linux/junit5",
      "release": "sles 15.7",
      "fixedVersion": "5.14.4-150200.3.15.15",
      "supported": true
    },
    {
      "product": "junit5-minimal",
      "productUrl": "https://patchblox.com/security/product/linux/junit5-minimal",
      "release": "sles 15.6",
      "fixedVersion": "5.14.4-150200.3.15.10",
      "supported": true
    },
    {
      "product": "junit5-minimal",
      "productUrl": "https://patchblox.com/security/product/linux/junit5-minimal",
      "release": "sles 15.7",
      "fixedVersion": "5.14.4-150200.3.15.10",
      "supported": true
    },
    {
      "product": "maven-surefire",
      "productUrl": "https://patchblox.com/security/product/linux/maven-surefire",
      "release": "sles 15.6",
      "fixedVersion": "3.5.6-150200.3.9.23.28",
      "supported": true
    },
    {
      "product": "maven-surefire",
      "productUrl": "https://patchblox.com/security/product/linux/maven-surefire",
      "release": "sles 15.7",
      "fixedVersion": "3.5.6-150200.3.9.23.28",
      "supported": true
    },
    {
      "product": "maven-surefire-plugins",
      "productUrl": "https://patchblox.com/security/product/linux/maven-surefire-plugins",
      "release": "sles 15.6",
      "fixedVersion": "3.5.6-150200.3.9.23.3",
      "supported": true
    },
    {
      "product": "maven-surefire-plugins",
      "productUrl": "https://patchblox.com/security/product/linux/maven-surefire-plugins",
      "release": "sles 15.7",
      "fixedVersion": "3.5.6-150200.3.9.23.3",
      "supported": true
    },
    {
      "product": "objectweb-asm",
      "productUrl": "https://patchblox.com/security/product/linux/objectweb-asm",
      "release": "sles 15.6",
      "fixedVersion": "9.10.1-150200.3.20.3",
      "supported": true
    },
    {
      "product": "objectweb-asm",
      "productUrl": "https://patchblox.com/security/product/linux/objectweb-asm",
      "release": "sles 15.7",
      "fixedVersion": "9.10.1-150200.3.20.3",
      "supported": true
    },
    {
      "product": "opentest4j",
      "productUrl": "https://patchblox.com/security/product/linux/opentest4j",
      "release": "sles 15.6",
      "fixedVersion": "1.2.0-150200.3.6.4",
      "supported": true
    },
    {
      "product": "opentest4j",
      "productUrl": "https://patchblox.com/security/product/linux/opentest4j",
      "release": "sles 15.7",
      "fixedVersion": "1.2.0-150200.3.6.4",
      "supported": true
    },
    {
      "product": "picocli",
      "productUrl": "https://patchblox.com/security/product/linux/picocli",
      "release": "sles 15.6",
      "fixedVersion": "4.7.6-150200.3.19.2",
      "supported": true
    },
    {
      "product": "picocli",
      "productUrl": "https://patchblox.com/security/product/linux/picocli",
      "release": "sles 15.7",
      "fixedVersion": "4.7.6-150200.3.19.2",
      "supported": true
    },
    {
      "product": "plexus-archiver",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-archiver",
      "release": "sles 15.6",
      "fixedVersion": "4.14.0-150200.3.13.2",
      "supported": true
    },
    {
      "product": "plexus-archiver",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-archiver",
      "release": "sles 15.7",
      "fixedVersion": "4.14.0-150200.3.13.2",
      "supported": true
    },
    {
      "product": "plexus-build-api",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-build-api",
      "release": "sles 15.6",
      "fixedVersion": "1.2.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-build-api0",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-build-api0",
      "release": "sles 15.6",
      "fixedVersion": "0.0.8-150200.5.8.7",
      "supported": true
    },
    {
      "product": "plexus-build-api0",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-build-api0",
      "release": "sles 15.7",
      "fixedVersion": "0.0.8-150200.5.8.7",
      "supported": true
    },
    {
      "product": "plexus-cipher",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-cipher",
      "release": "sles 15.6",
      "fixedVersion": "2.1.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-cipher",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-cipher",
      "release": "sles 15.7",
      "fixedVersion": "2.1.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-classworlds",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-classworlds",
      "release": "sles 15.6",
      "fixedVersion": "2.12.1-150200.3.8.2",
      "supported": true
    },
    {
      "product": "plexus-classworlds",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-classworlds",
      "release": "sles 15.7",
      "fixedVersion": "2.12.1-150200.3.8.2",
      "supported": true
    },
    {
      "product": "plexus-compiler",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-compiler",
      "release": "sles 15.6",
      "fixedVersion": "2.17.1-150200.3.12.2",
      "supported": true
    },
    {
      "product": "plexus-compiler",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-compiler",
      "release": "sles 15.7",
      "fixedVersion": "2.17.1-150200.3.12.2",
      "supported": true
    },
    {
      "product": "plexus-component-metadata",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-component-metadata",
      "release": "sles 15.6",
      "fixedVersion": "2.2.0-150200.3.12.2",
      "supported": true
    },
    {
      "product": "plexus-component-metadata",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-component-metadata",
      "release": "sles 15.7",
      "fixedVersion": "2.2.0-150200.3.12.2",
      "supported": true
    },
    {
      "product": "plexus-containers",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-containers",
      "release": "sles 15.6",
      "fixedVersion": "2.2.0-150200.3.12.2",
      "supported": true
    },
    {
      "product": "plexus-containers",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-containers",
      "release": "sles 15.7",
      "fixedVersion": "2.2.0-150200.3.12.2",
      "supported": true
    },
    {
      "product": "plexus-interpolation",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-interpolation",
      "release": "sles 15.6",
      "fixedVersion": "1.30.0-150200.3.12.4",
      "supported": true
    },
    {
      "product": "plexus-interpolation",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-interpolation",
      "release": "sles 15.7",
      "fixedVersion": "1.30.0-150200.3.12.4",
      "supported": true
    },
    {
      "product": "plexus-io",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-io",
      "release": "sles 15.6",
      "fixedVersion": "3.8.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-io",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-io",
      "release": "sles 15.7",
      "fixedVersion": "3.8.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-languages",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-languages",
      "release": "sles 15.6",
      "fixedVersion": "1.6.0-150200.3.8.2",
      "supported": true
    },
    {
      "product": "plexus-languages",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-languages",
      "release": "sles 15.7",
      "fixedVersion": "1.6.0-150200.3.8.2",
      "supported": true
    },
    {
      "product": "plexus-sec-dispatcher",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-sec-dispatcher",
      "release": "sles 15.6",
      "fixedVersion": "2.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-sec-dispatcher",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-sec-dispatcher",
      "release": "sles 15.7",
      "fixedVersion": "2.0-150200.3.10.2",
      "supported": true
    },
    {
      "product": "plexus-utils",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-utils",
      "release": "sles 15.6",
      "fixedVersion": "4.1.0-150200.3.17.2",
      "supported": true
    },
    {
      "product": "plexus-utils",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-utils",
      "release": "sles 15.7",
      "fixedVersion": "4.1.0-150200.3.17.2",
      "supported": true
    },
    {
      "product": "plexus-xml",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-xml",
      "release": "sles 15.6",
      "fixedVersion": "3.1.0-150200.5.13.2",
      "supported": true
    },
    {
      "product": "plexus-xml",
      "productUrl": "https://patchblox.com/security/product/linux/plexus-xml",
      "release": "sles 15.7",
      "fixedVersion": "3.1.0-150200.5.13.2",
      "supported": true
    },
    {
      "product": "qdox",
      "productUrl": "https://patchblox.com/security/product/linux/qdox",
      "release": "sles 15.6",
      "fixedVersion": "2.0.1-150200.3.6.2",
      "supported": true
    },
    {
      "product": "qdox",
      "productUrl": "https://patchblox.com/security/product/linux/qdox",
      "release": "sles 15.7",
      "fixedVersion": "2.0.1-150200.3.6.2",
      "supported": true
    },
    {
      "product": "univocity-parsers",
      "productUrl": "https://patchblox.com/security/product/linux/univocity-parsers",
      "release": "sles 15.6",
      "fixedVersion": "2.9.1-150200.3.9.4",
      "supported": true
    },
    {
      "product": "univocity-parsers",
      "productUrl": "https://patchblox.com/security/product/linux/univocity-parsers",
      "release": "sles 15.7",
      "fixedVersion": "2.9.1-150200.3.9.4",
      "supported": true
    },
    {
      "product": "zstd-jni",
      "productUrl": "https://patchblox.com/security/product/linux/zstd-jni",
      "release": "sles 15.6",
      "fixedVersion": "1.5.7.16-150200.5.7.2",
      "supported": true
    },
    {
      "product": "zstd-jni",
      "productUrl": "https://patchblox.com/security/product/linux/zstd-jni",
      "release": "sles 15.7",
      "fixedVersion": "1.5.7.16-150200.5.7.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-7962",
      "url": "https://patchblox.com/security/cve/CVE-2025-7962",
      "title": "ant: Fixed improper neutralization of line breaks to prevent SMTP injection (bsc#1246873)",
      "priority": "High",
      "severity": "important",
      "epss": 0.00891,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-78254",
      "url": "https://patchblox.com/security/cve/CVE-2026-78254",
      "title": "Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.0052,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-36374",
      "url": "https://patchblox.com/security/cve/CVE-2021-36374",
      "title": "plexus-component-metadata: Fixed excessive memory allocation when reading specially crafted ZIP archives or derived formats",
      "priority": "Routine",
      "epss": 0.02642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}