Detections
Analytics
SUSE SLES15: flatpak / flatpak-devel / flatpak-remote-flathub / etc (SUSE-SU-2026:5127-1)
critical Nessus Plugin ID 377669
Synopsis
The remote SUSE host is missing one or more security updates.Description
The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5127-1 advisory.- CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options (bsc#1261769).
- CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation (bsc#1261770).
- CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host (bsc#1280236).
- CVE-2026-92162: path traversal via unvalidated `arch` parameter in `DeployAppstream` (bsc#1282514).
- CVE-2026-96275: arbitrary write access as root via extra-data extraction (bsc#1282515).
- CVE-2026-96276: arbitrary write in host context via `flatpak build-init` (bsc#1282516).
- CVE-2026-96280: buffer overflow in OCI delta stream path names (bsc#1282518).
- CVE-2026-96281: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes (bsc#1282519).
- CVE-2026-96282: extension metadata path traversal file existence oracle (bsc#1282520).
- CVE-2026-96807: fixed-filename writes to arbitrary locations via symlink attack on `.ld.so` (bsc#1282523).
- CVE-2026-96808: `revokefs` symlink path traversal allows local privilege escalation via commit tampering (bsc#1282524).
Changes for flatpak:
- Update to version 1.16.6 (jsc#PED-17048):
+ Fix file descriptor leaks affecting Chromium-based browsers.
+ Fix installing extra-data without a runtime, including OpenH264.
+ Ignore unusable sandbox-expose paths for portal sub-sandboxes, fixing Epiphany regressions.
+ Fix installed tests and handling of standard file descriptors passed as invalid flatpak run arguments.
- Switch from Autotools to Meson, preserving system bubblewrap, xdg-dbus-proxy, curl and distribution-specific installation paths.
- Require bubblewrap >= 0.10.0 and GPGME >= 1.8.0; add Meson, gettext, gtk-doc and polkit-agent build dependencies and drop obsolete intltool and libelf build dependencies.
- Generate the system-user pre-script from the Meson build directory and package the tmpfiles configuration and renamed manual pages.
Tenable has extracted the preceding description block directly from the SUSE security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages.See Also
https://bugzilla.suse.com/1261769
https://bugzilla.suse.com/1261770
https://bugzilla.suse.com/1280236
https://bugzilla.suse.com/1282514
https://bugzilla.suse.com/1282515
https://bugzilla.suse.com/1282516
https://bugzilla.suse.com/1282518
https://bugzilla.suse.com/1282519
https://bugzilla.suse.com/1282520
https://bugzilla.suse.com/1282523
https://bugzilla.suse.com/1282524
https://www.suse.com/security/cve/CVE-2026-34078
https://www.suse.com/security/cve/CVE-2026-34079
https://www.suse.com/security/cve/CVE-2026-90616
https://www.suse.com/security/cve/CVE-2026-92162
https://www.suse.com/security/cve/CVE-2026-96275
https://www.suse.com/security/cve/CVE-2026-96276
https://www.suse.com/security/cve/CVE-2026-96280
https://www.suse.com/security/cve/CVE-2026-96281
https://www.suse.com/security/cve/CVE-2026-96282
https://www.suse.com/security/cve/CVE-2026-96807
Plugin Details
Severity: Critical
ID: 377669
File Name: suse_SU-2026-5127-1.nasl
Version: 1.1
Type: Local
Agent: unix
Family: SuSE Local Security Checks
Published: 11/9/2026
Updated: 11/9/2026
Supported Sensors: Nessus Agent, Continuous Assessment, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7
Percentile: 98
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-34078
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
Risk Factor: Critical
Base Score: 9.3
Threat Score: 8.9
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/o:novell:suse_linux:15, p-cpe:/a:novell:suse_linux:flatpak-devel, p-cpe:/a:novell:suse_linux:flatpak-remote-flathub, p-cpe:/a:novell:suse_linux:flatpak-zsh-completion, p-cpe:/a:novell:suse_linux:flatpak, p-cpe:/a:novell:suse_linux:libflatpak0, p-cpe:/a:novell:suse_linux:system-user-flatpak, p-cpe:/a:novell:suse_linux:typelib-1_0-flatpak-1_0
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/6/2026
Vulnerability Publication Date: 4/7/2026
Reference Information
CVE: CVE-2026-34078, CVE-2026-34079, CVE-2026-90616, CVE-2026-92162, CVE-2026-96275, CVE-2026-96276, CVE-2026-96280, CVE-2026-96281, CVE-2026-96282, CVE-2026-96807, CVE-2026-96808
IAVA: 2026-A-0317-S, 2026-A-0990
SuSE: SUSE-SU-2026:5127-1