Linux · SUSE Linux Enterprise · Security advisory · September 29, 2026
SUSE-SU-2026:4391-1: Security update for 2 packages
SUSE-SU-2026:4391-1, released September 29, 2026, fixes 30 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
30
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0289
87th percentile
Priority of the 30 CVEs
Patch now 0
Urgent 0
High 1
Routine 29
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| netty | sles 15.7 | 4.1.138-150200.4.56.1 |
| netty-tcnative | sles 15.6 | 2.0.84-150200.3.51.1 |
| netty-tcnative | sles 15.7 | 2.0.84-150200.3.51.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-62243 | netty-tcnative: TLS hostname verification bypass in Netty OpenSSL client path (bsc#1276455). | 7.5 | 0.0016 | None reported |
| Routine | CVE-2026-93567 | netty-tcnative: HTTP/1 authority-form CONNECT is translated to malformed HTTP/2 CONNECT with Host-controlled | n/a | 0.0289 | None reported |
| Routine | CVE-2026-93569 | netty-tcnative: HTTP/1 absolute-form Host mismatch is translated to HTTP/2 :authority, overriding the request-target | n/a | 0.0242 | None reported |
| Routine | CVE-2026-93574 | netty-tcnative: HTTP request smuggling via post-digit whitespace in chunk-size parsing (bsc#1282374). | n/a | 0.0167 | None reported |
| Routine | CVE-2026-93558 | netty-tcnative: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service | n/a | 0.0122 | None reported |
| Routine | CVE-2026-93573 | netty-tcnative: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling (bsc#1282373). | n/a | 0.0108 | None reported |
| Routine | CVE-2026-93579 | netty-tcnative: HTTP/2 header field values are not validated by default (bsc#1282378). | n/a | 0.0108 | None reported |
| Routine | CVE-2026-93568 | netty-tcnative: HTTP/2 and HTTP/3 Extended CONNECT requests are downgraded as regular CONNECT requests (bsc#1282370). | n/a | 0.0108 | None reported |
| Routine | CVE-2026-93564 | netty-tcnative: HAProxy PROXY-v2 nested-TLV grandchild ByteBuf reference-count leak (bsc#1282363). | n/a | 0.0106 | None reported |
| Routine | CVE-2026-93488 | netty-tcnative: Denial of Service via unbounded concurrent SPDY streams (bsc#1282084). | n/a | 0.0096 | None reported |
| Routine | CVE-2026-93491 | netty-tcnative: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queue (bsc#1282085). | n/a | 0.0088 | None reported |
| Routine | CVE-2026-93565 | netty-tcnative: RtspDecoder Method-Token Smuggling via Trailing Control Byte (bsc#1282364). | n/a | 0.0087 | None reported |
| Routine | CVE-2026-93566 | netty-tcnative: HTTP Request Smuggling due to control characters in the chunk-size line (bsc#1282366). | n/a | 0.0058 | None reported |
| Routine | CVE-2026-93562 | netty-tcnative: Incomplete validation of malformed Transfer-Encoding allows HTTP request smuggling (bsc#1282362). | n/a | 0.0049 | None reported |
| Routine | CVE-2026-93492 | netty-tcnative: HTTP/2 HpackEncoder DoS with large table size (bsc#1282132). | n/a | 0.0048 | None reported |
| Routine | CVE-2026-93494 | netty-tcnative: ByteBuf Leak in StompSubframeDecoder When a Frame Body Is Never Terminated (bsc#1282506). | n/a | 0.0041 | None reported |
| Routine | CVE-2026-93560 | netty-tcnative: STOMP codec content-length long-to-int truncation causes infinite decode loop DoS (bsc#1282141). | n/a | 0.0041 | None reported |
| Routine | CVE-2026-93575 | netty-tcnative: missing validations in the `MqttDecoder` can lead to excessive resource consumption and a DoS | n/a | 0.0039 | None reported |
| Routine | CVE-2026-75596 | netty-tcnative: fragmented `ClientHello`records can trigger quadratic pre-handshake reassembly in default SNI parsing | n/a | 0.0037 | None reported |
| Routine | CVE-2026-59902 | netty-tcnative: Netty: Memory Exhaustion in SctpMessageCompletionHandler (bsc#1275501). | n/a | 0.0037 | None reported |
| Routine | CVE-2026-93572 | netty-tcnative: multiplication of patched preallocation limits in `RedisArrayAggregator` nested RESP headers can lead | n/a | 0.0034 | None reported |
| Routine | CVE-2026-93563 | netty-tcnative: unbounded multi-line response accumulation in `SmtpResponseDecoder` leads to memory exhaustion and a | n/a | 0.0033 | None reported |
| Routine | CVE-2026-59903 | netty-tcnative: Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite | 6.5 | 0.0032 | None reported |
| Routine | CVE-2026-75595 | netty-tcnative: fragmented TLS `ClientHello` causes fallback to default `SslContext` and allows for SNI routing and | n/a | 0.0032 | None reported |
| Routine | CVE-2026-89044 | netty-tcnative: HTTP request smuggling in Netty via improper validation of final Transfer-Encoding coding | n/a | 0.0028 | None reported |
Showing 1 to 25 of 30
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.