Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

SUSE Linux Enterprise Server 12 SP5 Security Update 2026-3205-1 Moderate

suse
Calendar Grey July 23, 2026
Scroller Suse
An update for SUSE Linux fixes multiple issues in wget, addressing moderate-severity security risks with detailed instructions.
SUSE released an update for wget addressing three vulnerabilities, including server-side request forgery and heap buffer overflow, applicable to several versions of SUSE Linux Ente...

Summary

## This update for wget fixes the following issues * CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). * CVE-2026-58470: server-controlled `Content-Range` header values can cause an integer overflow in `parse_content_range()` (bsc#1271034). * CVE-2026-58472: crafted HTML attribute with a large number of characters requiring entity encoding can lead to a heap buffer overflow (bsc#1271036). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3205=1

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SuSE integer overflow wget

References

* bsc#1271034

* bsc#1271036

* bsc#1271320

Cross-

* CVE-2026-15146

* CVE-2026-58470

* CVE-2026-58472

CVSS scores:

* CVE-2026-15146 ( SUSE ): 5.1

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2026-15146 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

* CVE-2026-15146 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

* CVE-2026-58470 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2026-58470 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2026-58470 ( NVD ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3205-1
Release Date: 2026-07-23T14:05:51Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow SuSE integer overflow wget

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.