SUSE-SU-2026:23858-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202623858-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23858-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:23858-1
- Upstream
- Related
- Published
- 2026-09-21T17:43:14Z
- Modified
- 2026-09-27T18:23:16Z
- Summary
- Security update for zstd-jni
- Details
-
This update for zstd-jni fixes the following issues:
- CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953).
- CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#1279956).
- CVE-2026-87825: use-after-free resulting in silent data corruption or JVM crashes (bsc#1279955).
- CVE-2026-87877: use-After-Free vulnerability allows memory corruption and denial of service (bsc#1279954).
Changes for zstd-jni:
- update to version v1.5.7.16.
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202623858-1/
- https://bugzilla.suse.com/1279953
- https://bugzilla.suse.com/1279954
- https://bugzilla.suse.com/1279955
- https://bugzilla.suse.com/1279956
- https://www.suse.com/security/cve/CVE-2026-87823
- https://www.suse.com/security/cve/CVE-2026-87824
- https://www.suse.com/security/cve/CVE-2026-87825
- https://www.suse.com/security/cve/CVE-2026-87877
Affected packages
SUSE:Linux Enterprise Server 16.0 / zstd-jni
Package
- Name
- zstd-jni
- Purl
- pkg:rpm/suse/zstd-jni&distro=SUSE%20Linux%20Enterprise%20Server%2016.0