Back Linuxsecurity

SUSE Nodejs22 Important Vulnerabilites DoS Security Advisory 2026-2695

Linuxsecurity •LinuxSecurity Advisories • June 30, 2026

## This update for nodejs22 fixes the following issues: * CVE-2026-48618: tls: normalize hostname for server identity checks (bsc#1268593). * CVE-2026-48933: crypto: guard WebCrypto cipher output length (bsc#1268592). * CVE-2026-48615: lib,test: redact proxy credentials in tunnel errors (bsc#1268598). * CVE-2026-48619: http2: cap originSet size to prevent unbounded memory growth (bsc#1268618). * CVE-2026-48928: tls: fix case-sensitive SNI context matching (bsc#1268605). * CVE-2026-48930: dns,net: reject hostnames with embedded NUL bytes (bsc#1268606). * CVE-2026-48934: tls: bind reusable sessions to authenticated host (bsc#1268608). * CVE-2026-48617: permission: handle process.chdir on writereport (bsc#1268554). * CVE-2026-48931: http: fix response queue poisoning in http.Agent

* CVE-2026-11525 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

* CVE-2026-11525 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Announcement ID: SUSE-SU-2026:2695-1 Release Date: 2026-06-30T09:06:45Z Rating: important

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Munge Buffer Overflow Vulnerability Update SUSE has released updates addressing a critical buffer overflow vulnerability (CVE-2026-25506) in the munge package, affecting multiple SUSE Linux versions. The vulnerability, which was published on February 10, 2026, could allow for potential exploitation if not patched. Users are advised to apply the updates using recommended installation methods. 1583 sources 32

Extracted Entities

CVEs (10)

CVE-2026-11525 CVE-2026-48615 CVE-2026-48617 CVE-2026-48618 CVE-2026-48619 CVE-2026-48928 CVE-2026-48930 CVE-2026-48931 CVE-2026-48933 CVE-2026-48934

Platforms (1)

Nodejs22