openSUSE Leap 15.4 Quagga Moderate DoS CVE-2026-37458 Advisory 2026-3950

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This update for quagga fixes the following issue:

* CVE-2026-37458: missing input validation in the `MP_REACH_NLRI` component

allows authenticated attackers to cause a DoS via a crafted UPDATE message

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-3950=1

* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)

* libfpm_pb0-1.1.1-150400.12.11.1

* libospf0-1.1.1-150400.12.11.1

* quagga-debuginfo-1.1.1-150400.12.11.1

* quagga-devel-1.1.1-150400.12.11.1

* quagga-1.1.1-150400.12.11.1

* libzebra1-1.1.1-150400.12.11.1

* libospf0-debuginfo-1.1.1-150400.12.11.1

* libzebra1-debuginfo-1.1.1-150400.12.11.1

* libquagga_pb0-1.1.1-150400.12.11.1

* quagga-debugsource-1.1.1-150400.12.11.1

* libquagga_pb0-debuginfo-1.1.1-150400.12.11.1

* libospfapiclient0-debuginfo-1.1.1-150400.12.11.1

* libfpm_pb0-debuginfo-1.1.1-150400.12.11.1

* libospfapiclient0-1.1.1-150400.12.11.1

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases