Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE 15 SP7 Cryptsetup Moderate Buffer Overflow Security Update 2026-2777-1

suse
Calendar Grey July 6, 2026
Dist Suse Esm H88
An update for SUSE resolves a critical security issue in cryptsetup and s390-tools, ensuring improved system protection.
An update that solves one vulnerability, contains three features and has three security fixes can now be installed.

Summary

## This update for cryptsetup, s390-tools fixes the following issue Security fixes: * CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270185). Changes for s390-tools: * Upgrade s390-tools to version 2.41.0 (jsc#PED-15860) * Automatically set appropriate MTU for HSCI (bsc#1259314) * Changes of existing tools: * chreipl: Make --bootparms work for ECKD re-IPL * cpacfstats: Add 'unauthorized' state to CPU-MF counters * cpictl: Detect RHCOS using VARIANT_ID * hsci: Automatically set appropriate MTU for HSCI * libutil: Add util_readlink() and util_readlinkat() helpers * libutil: Add util_startswith() to util_str * libutil: Add utility parsing functions * lschp: Add support for structured output (--format)

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SuSE cryptsetup s390-tools

References

* bsc#1241612

* bsc#1259314

* bsc#1261813

* bsc#1270185

* jsc#PED-14586

* jsc#PED-15860

* jsc#PED-15889

Cross-

* CVE-2026-41676

CVSS scores:

* CVE-2026-41676 ( SUSE ): 8.3

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

* CVE-2026-41676 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

* CVE-2026-41676 ( NVD ): 7.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2026-41676 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* Basesystem Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:2777-1
Release Date: 2026-07-06T08:57:17Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SuSE cryptsetup s390-tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here