Linuxsecurity SUSE Linux Micro Vulnerabilities Addressed in Recent Updates
Article Content
- •SUSE Linux Micro updates address vulnerabilities in cpio and gzip utilities.
- •CVE-2026-66484, CVE-2026-66485, and CVE-2026-66486 are related to cpio, while CVE-2026-41992 affects gzip.
- •Users should apply the patches promptly to mitigate risks associated with these vulnerabilities.
Recent updates for SUSE Linux Micro address multiple vulnerabilities in cpio and gzip utilities. The cpio update, identified as SUSE-SU-2026:23355-1, fixes three CVEs: CVE-2026-66484, CVE-2026-66485, and CVE-2026-66486, which involve issues like improper sanitization and memory management, potentially allowing for denial of service and terminal control sequence injection. The gzip update, SUSE-SU-2026:23392-1, resolves CVE-2026-41992, a global buffer overflow vulnerability due to improper state management in decompression logic. Both updates are rated as moderate in severity and are applicable to SUSE Linux Micro versions 6.1 and 6.2. Users are advised to apply the patches using recommended installation methods. The vulnerabilities were disclosed in August 2026, with CVE-2026-41992 having been published earlier in June 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (12)
Following this threat?
Track SuSE and CVE-2026-41992 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…