Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

SUSE 15 SP7 SCCache Important Buffer Overflow Vulnerabilities 2026-3022-1

suse
Calendar Grey July 15, 2026
Scroller Suse
SUSE update 2026-3022-1 fixes 14 issues in sccache, addressing buffer overflow and information leaks among others.
SUSE released a security update for sccache, addressing 14 vulnerabilities including memory issues and potential exploits, with recommended installation instructions for affected p...

Summary

## This update for sccache fixes the following issues: Update to version 0.15.0~17. * CVE-2023-26964: hyper,h2: high resource consumption due to stream stacking when H2 component processes `HTTP2 RST_STREAM` frames (bsc#1210346). * CVE-2024-32650: rust-rustls: infinite loop in `rustls::conn::ConnectionCommon:complete_io()` when processing client input network input (bsc#1223238). * CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` (bsc#1242611). * CVE-2026-25727: time: stack exhaustion in the RFC 2822 date parser when processing certain user provided input (bsc#1257923). * CVE-2026-41676: openssl: short buffer overflow via `Deriver:derive` and `PkeyCtxRef:derive` when using OpenSSL 1.1.1 (bsc#1270206).

Topics%20covered

Topics Covered

security advisory information leak buffer overflow SuSE important sccache

References

* bsc#1210346

* bsc#1223238

* bsc#1229955

* bsc#1242611

* bsc#1243868

* bsc#1257923

* bsc#1270206

* bsc#1270512

* bsc#1270559

* bsc#1270693

* bsc#1270736

* bsc#1270869

* bsc#1270938

* bsc#1270948

Cross-

* CVE-2023-26964

* CVE-2024-12224

* CVE-2024-32650

* CVE-2024-43806

* CVE-2025-3416

* CVE-2026-25727

* CVE-2026-41676

* CVE-2026-41677

* CVE-2026-41678

* CVE-2026-41681

* CVE-2026-41898

* CVE-2026-42327

* CVE-2026-44662

* CVE-2026-45784

CVSS scores:

* CVE-2023-26964 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2023-26964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2023-26964 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2024-12224 ( SUSE ): 2.1

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3022-1
Release Date: 2026-07-15T09:48:48Z
Rating: important

Topics%20covered

Topics Covered

security advisory information leak buffer overflow SuSE important sccache

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.