# CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

CVE-2026-78254 is fixed in 57 products on 1 platform, first by DEBIAN-CVE-2026-78254, released September 18, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-78254
- Priority: High
- CVSS: 7.4 (Important)
- EPSS: 0.0052
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 7, 2026
- Weakness: Relative Path Traversal
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-78254

## Description

The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the user running Ant in versions prior to Ant 1.10.18.      In order to exploit this vulnerability, the server would either have to be malicious or be subject to a machine-in-the-middle attack. Additionally in the case of scp or the ftp task using ftps the server must pass the server identity checks performed by the tasks.     For ftp tasks not using ftps a malicious server could act as a machine-in-the-middle to provide malicious files.     Starting with Ant 1.10.18 both tasks will prevent writing outside of the destination directory by default. An option is available to disable this behavior in the unlikely case that the  old behavior is required by existing build files.     Mitigations:     Users of scp and ftp (when using ftps) in any version of Ant should not bypass server identity checks. Users of ftp not using ftps should switch to ftps where possible.     All users are recommended to upgrade to Apache Ant 1.10.18, which fixes this issue.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ant Debian 14 | 1.10.18-1 | [DEBIAN-CVE-2026-78254](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78254.md) | Sep 18, 2026 |
| Linux | ant amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant opensuse-leap 16.0 | 1.10.18-160000.1.1 | [OPENSUSE-SU-2026:21891-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21891-1.md) | Sep 20, 2026 |
| Linux | ant sles 15.6 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant sles 15.7 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-antlr amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-antlr opensuse-leap 16.0 | 1.10.18-160000.1.1 | [OPENSUSE-SU-2026:21891-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21891-1.md) | Sep 20, 2026 |
| Linux | ant-antlr sles 15.6 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-antlr sles 15.7 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-apache-bcel amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-apache-bsf amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-apache-oro amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-apache-regexp amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-apache-resolver amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-apache-xalan2 amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-commons-logging amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-commons-net amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-contrib sles 15.6 | 1.0b3-150200.11.17.1 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-contrib sles 15.7 | 1.0b3-150200.11.17.1 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-imageio amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-javadoc amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-javamail amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-jdepend amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-jmf amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-jsch amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-junit amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-junit opensuse-leap 16.0 | 1.10.18-160000.1.1 | [OPENSUSE-SU-2026:21891-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21891-1.md) | Sep 20, 2026 |
| Linux | ant-junit sles 15.6 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-junit sles 15.7 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-junit5 amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-junit5 opensuse-leap 16.0 | 1.10.18-160000.1.1 | [OPENSUSE-SU-2026:21891-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21891-1.md) | Sep 20, 2026 |
| Linux | ant-junit5 sles 15.6 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-junit5 sles 15.7 | 1.10.18-150200.4.31.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | ant-lib amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-manual amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-swing amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-testutil amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | ant-xz amzn 2023 | 1.10.12-5.amzn2023.0.5 | [ALAS2023-2026-3239](https://patchblox.com/security/data/fix/linux/alas2023-2026-3239.md) | Nov 7, 2026 |
| Linux | antlr sles 15.6 | 2.7.7-150200.18.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | antlr sles 15.7 | 2.7.7-150200.18.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | assertj-core sles 15.6 | 3.27.7-150200.5.11.8 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | assertj-core sles 15.7 | 3.27.7-150200.5.11.8 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | bsf sles 15.6 | 2.4.0-150200.13.8.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | bsf sles 15.7 | 2.4.0-150200.13.8.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | byte-buddy sles 15.6 | 1.18.8-150200.5.13.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | byte-buddy sles 15.7 | 1.18.8-150200.5.13.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | jakarta-activation sles 15.6 | 2.1.0-150200.5.7.1 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | jakarta-activation sles 15.7 | 2.1.0-150200.5.7.1 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | jakarta-mail sles 15.6 | 2.1.0-150200.5.7.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | jakarta-mail sles 15.7 | 2.1.0-150200.5.7.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | javaparser sles 15.6 | 3.28.2-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | javaparser sles 15.7 | 3.28.2-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | javassist sles 15.6 | 3.29.2-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | javassist sles 15.7 | 3.29.2-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | jdepend sles 15.6 | 2.10-150200.11.6.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | jdepend sles 15.7 | 2.10-150200.11.6.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | junit5 sles 15.6 | 5.14.4-150200.3.15.15 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | junit5 sles 15.7 | 5.14.4-150200.3.15.15 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | junit5-minimal sles 15.6 | 5.14.4-150200.3.15.10 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | junit5-minimal sles 15.7 | 5.14.4-150200.3.15.10 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | maven-surefire sles 15.6 | 3.5.6-150200.3.9.23.28 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | maven-surefire sles 15.7 | 3.5.6-150200.3.9.23.28 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | maven-surefire-plugins sles 15.6 | 3.5.6-150200.3.9.23.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | maven-surefire-plugins sles 15.7 | 3.5.6-150200.3.9.23.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | objectweb-asm sles 15.6 | 9.10.1-150200.3.20.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | objectweb-asm sles 15.7 | 9.10.1-150200.3.20.3 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | opentest4j sles 15.6 | 1.2.0-150200.3.6.4 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | opentest4j sles 15.7 | 1.2.0-150200.3.6.4 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | picocli sles 15.6 | 4.7.6-150200.3.19.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | picocli sles 15.7 | 4.7.6-150200.3.19.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-archiver sles 15.6 | 4.14.0-150200.3.13.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-archiver sles 15.7 | 4.14.0-150200.3.13.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-build-api sles 15.6 | 1.2.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-build-api0 sles 15.6 | 0.0.8-150200.5.8.7 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-build-api0 sles 15.7 | 0.0.8-150200.5.8.7 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-cipher sles 15.6 | 2.1.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-cipher sles 15.7 | 2.1.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-classworlds sles 15.6 | 2.12.1-150200.3.8.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-classworlds sles 15.7 | 2.12.1-150200.3.8.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-compiler sles 15.6 | 2.17.1-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-compiler sles 15.7 | 2.17.1-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-component-metadata sles 15.6 | 2.2.0-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-component-metadata sles 15.7 | 2.2.0-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-containers sles 15.6 | 2.2.0-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-containers sles 15.7 | 2.2.0-150200.3.12.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-interpolation sles 15.6 | 1.30.0-150200.3.12.4 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-interpolation sles 15.7 | 1.30.0-150200.3.12.4 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-io sles 15.6 | 3.8.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-io sles 15.7 | 3.8.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-languages sles 15.6 | 1.6.0-150200.3.8.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-languages sles 15.7 | 1.6.0-150200.3.8.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-sec-dispatcher sles 15.6 | 2.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-sec-dispatcher sles 15.7 | 2.0-150200.3.10.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-utils sles 15.6 | 4.1.0-150200.3.17.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-utils sles 15.7 | 4.1.0-150200.3.17.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-xml sles 15.6 | 3.1.0-150200.5.13.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | plexus-xml sles 15.7 | 3.1.0-150200.5.13.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | qdox sles 15.6 | 2.0.1-150200.3.6.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | qdox sles 15.7 | 2.0.1-150200.3.6.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | univocity-parsers sles 15.6 | 2.9.1-150200.3.9.4 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | univocity-parsers sles 15.7 | 2.9.1-150200.3.9.4 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | zstd-jni sles 15.6 | 1.5.7.16-150200.5.7.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |
| Linux | zstd-jni sles 15.7 | 1.5.7.16-150200.5.7.2 | [SUSE-SU-2026:4677-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4677-1.md) | Nov 7, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
