CVE-2024-26134 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-26134 Interim 1 8 2026-03-05T02:49:07Z current 2024-02-21T00:09:00Z 2026-03-05T02:49:07Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-26134 cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-December/023501.html E-Mail link for SUSE-SU-2025:21168-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3J6INDULK4UFE4EESVOPROBMFBKXOAXS/ E-Mail link for openSUSE-SU-2025:14733-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.1/base-os-container:2.2.0-4.26 Image SL-Micro Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-BYOS-GCE Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SL-Micro-EC2 Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 16.0 openSUSE Tumbleweed gettext-runtime-0.21.1-slfo.1.1_2.1 libtextstyle0-0.21.1-slfo.1.1_2.1 python311-cbor2-5.6.5-2.1 python312-cbor2-5.6.5-2.1 python313-cbor2-5.6.5-160000.3.1 python313-cbor2-5.6.5-2.1 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/base-os-container:latest gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/base-os-container:2.2.0-4.26 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.1/base-os-container:2.2.0-4.26 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Azure libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Azure gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-Azure libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-Azure gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-EC2 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-EC2 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-GCE libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-BYOS-GCE gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT-SelfInstall libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT-SelfInstall gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT-encrypted libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-RT-encrypted gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-SelfInstall libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-SelfInstall gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-encrypted libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-encrypted gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-qcow libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Base-qcow gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default-SelfInstall libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default-SelfInstall gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default-encrypted libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default-encrypted gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default-qcow libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-Default-qcow gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-EC2 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SL-Micro-EC2 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-Azure libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-Azure gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-Azure libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-Azure gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-EC2 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-EC2 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-GCE libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-BYOS-GCE gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-EC2 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-EC2 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-GCE libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SLE-Micro-GCE gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-llc gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-Azure-ltd gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-llc gettext-runtime-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd libtextstyle0-0.21.1-slfo.1.1_2.1 as a component of Image SUSE-Multi-Linux-Manager-Server-EC2-ltd python313-cbor2-5.6.5-160000.3.1 as a component of SUSE Linux Enterprise Server 16.0 python313-cbor2-5.6.5-160000.3.1 as a component of SUSE Linux Enterprise Server for SAP applications 16.0 python313-cbor2-5.6.5-160000.3.1 as a component of openSUSE Leap 16.0 python311-cbor2-5.6.5-2.1 as a component of openSUSE Tumbleweed python312-cbor2-5.6.5-2.1 as a component of openSUSE Tumbleweed python313-cbor2-5.6.5-2.1 as a component of openSUSE Tumbleweed python313-cbor2-5.6.5-160000.3.1 as a component of SUSE Linux Enterprise Server 16.0 cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue. CVE-2024-26134 Container suse/sl-micro/6.0/base-os-container:latest:gettext-runtime-0.21.1-slfo.1.1_2.1 Container suse/sl-micro/6.0/base-os-container:latest:libtextstyle0-0.21.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/base-os-container:2.2.0-4.26:gettext-runtime-0.21.1-slfo.1.1_2.1 Container suse/sl-micro/6.1/base-os-container:2.2.0-4.26:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Azure:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Azure:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-BYOS-Azure:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-BYOS-Azure:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-BYOS-EC2:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-BYOS-EC2:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-BYOS-GCE:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-BYOS-GCE:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-RT:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-RT:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-RT-SelfInstall:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-RT-SelfInstall:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-RT-encrypted:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-RT-encrypted:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-SelfInstall:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-SelfInstall:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-VMware:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-VMware:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-encrypted:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-encrypted:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-qcow:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Base-qcow:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-SelfInstall:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-SelfInstall:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-VMware:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-VMware:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-encrypted:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-encrypted:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-qcow:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-Default-qcow:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SL-Micro-EC2:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SL-Micro-EC2:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-Azure:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-Azure:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-Azure:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-Azure:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-EC2:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-EC2:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-GCE:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-BYOS-GCE:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-EC2:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-EC2:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SLE-Micro-GCE:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SLE-Micro-GCE:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-llc:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-Azure-ltd:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-llc:libtextstyle0-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:gettext-runtime-0.21.1-slfo.1.1_2.1 Image SUSE-Multi-Linux-Manager-Server-EC2-ltd:libtextstyle0-0.21.1-slfo.1.1_2.1 SUSE Linux Enterprise Server 16.0:python313-cbor2-5.6.5-160000.3.1 SUSE Linux Enterprise Server for SAP applications 16.0:python313-cbor2-5.6.5-160000.3.1 openSUSE Leap 16.0:python313-cbor2-5.6.5-160000.3.1 openSUSE Tumbleweed:python311-cbor2-5.6.5-2.1 openSUSE Tumbleweed:python312-cbor2-5.6.5-2.1 openSUSE Tumbleweed:python313-cbor2-5.6.5-2.1 SUSE Linux Enterprise Server 16.0:python313-cbor2-5.6.5-160000.3.1 important 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H