cve-2026-71290
csaf_opensuse
Description
SUSE CVE-2026-71290
Timeline
- Published
- 2026-08-14 17:13 UTC
- Last Modified
- 2026-08-31
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SUSE CVE-2026-71290",
"title": "Title"
},
{
"category": "description",
"text": "Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain. \n\n\nPlease note the classic version of HttpClient is not affected by this vulnerability. \n\nAffected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.",
"title": "Description of the CVE"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "CVE-2026-71290",
"url": "https://www.suse.com/security/cve/CVE-2026-71290"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 1275121 for CVE-2026-71290",
"url": "https://bugzilla.suse.com/1275121"
}
],
"title": "SUSE CVE CVE-2026-71290",
"tracking": {
"current_release_date": "2026-08-31T16:27:34Z",
"generator": {
"date": "2026-08-14T17:13:14Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf-vex.pl",
"version": "1"
}
},
"id": "CVE-2026-71290",
"initial_release_date": "2026-08-14T17:13:14Z",
"revision_history": [
{
"date": "2026-08-14T17:13:14Z",
"number": "2",
"summary": "vulnerabilities added,references added,severity changed from to important"
},
{
"date": "2026-08-31T16:27:34Z",
"number": "3",
"summary": "more updates marked as affected"
}
],
"status": "interim",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP2",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP3",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2",
"product_id": "SUSE Linux Enterprise Server 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3",
"product_id": "SUSE Linux Enterprise Server 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4",
"product_id": "SUSE Linux Enterprise Server 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5",
"product_id": "SUSE Linux Enterprise Server 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6",
"product_id": "SUSE Linux Enterprise Server 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.1",
"product": {
"name": "SUSE Linux Enterprise Server 16.1",
"product_id": "SUSE Linux Enterprise Server 16.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.1:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server Teradata 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server Teradata 15 SP4",
"product_id": "SUSE Linux Enterprise Server Teradata 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_teradata:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp2"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.1",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.1:server-sap"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
},
{
"category": "product_version",
"name": "httpcomponents-client",
"product": {
"name": "httpcomponents-client",
"product_id": "httpcomponents-client",
"product_identification_helper": {
"purl": "pkg:rpm/suse/httpcomponents-client@?upstream=httpcomponents-client.src.rpm"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-client-cache",
"product": {
"name": "httpcomponents-client-cache",
"product_id": "httpcomponents-client-cache",
"product_identification_helper": {
"purl": "pkg:rpm/suse/httpcomponents-client-cache@?upstream=httpcomponents-client.src.rpm"
}
}
},
{
"category": "product_version",
"name": "httpcomponents-client-javadoc",
"product": {
"name": "httpcomponents-client-javadoc",
"product_id": "httpcomponents-client-javadoc",
"product_identification_helper": {
"purl": "pkg:rpm/suse/httpcomponents-client-javadoc@?upstream=httpcomponents-client.src.rpm"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP2",
"product_id": "SUSE Linux Enterprise Server 15 SP2:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP Applications 15 SP2",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise High Performance Computing 15 SP2",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP2-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP2-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP3",
"product_id": "SUSE Linux Enterprise Server 15 SP3:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise High Performance Computing 15 SP3",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP4",
"product_id": "SUSE Linux Enterprise Server 15 SP4:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise High Performance Computing 15 SP4",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP5",
"product_id": "SUSE Linux Enterprise Server 15 SP5:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise High Performance Computing 15 SP5",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP6",
"product_id": "SUSE Linux Enterprise Server 15 SP6:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-cache as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:httpcomponents-client-cache"
},
"product_reference": "httpcomponents-client-cache",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:httpcomponents-client-javadoc"
},
"product_reference": "httpcomponents-client-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server 16.1",
"product_id": "SUSE Linux Enterprise Server 16.1:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-cache as component of SUSE Linux Enterprise Server 16.1",
"product_id": "SUSE Linux Enterprise Server 16.1:httpcomponents-client-cache"
},
"product_reference": "httpcomponents-client-cache",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc as component of SUSE Linux Enterprise Server 16.1",
"product_id": "SUSE Linux Enterprise Server 16.1:httpcomponents-client-javadoc"
},
"product_reference": "httpcomponents-client-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server Teradata 15 SP4",
"product_id": "SUSE Linux Enterprise Server Teradata 15 SP4:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server Teradata 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-cache as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:httpcomponents-client-cache"
},
"product_reference": "httpcomponents-client-cache",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:httpcomponents-client-javadoc"
},
"product_reference": "httpcomponents-client-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of SUSE Linux Enterprise Server for SAP applications 16.1",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.1:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-cache as component of SUSE Linux Enterprise Server for SAP applications 16.1",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.1:httpcomponents-client-cache"
},
"product_reference": "httpcomponents-client-cache",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client-javadoc as component of SUSE Linux Enterprise Server for SAP applications 16.1",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.1:httpcomponents-client-javadoc"
},
"product_reference": "httpcomponents-client-javadoc",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpcomponents-client as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:httpcomponents-client"
},
"product_reference": "httpcomponents-client",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-71290",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-71290"
}
],
"notes": [
{
"category": "general",
"text": "Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain. \n\n\nPlease note the classic version of HttpClient is not affected by this vulnerability. \n\nAffected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"known_affected": [
"SUSE Linux Enterprise Desktop 15 SP7:httpcomponents-client",
"SUSE Linux Enterprise High Performance Computing 15 SP2:httpcomponents-client",
"SUSE Linux Enterprise High Performance Computing 15 SP3:httpcomponents-client",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:httpcomponents-client",
"SUSE Linux Enterprise High Performance Computing 15 SP4:httpcomponents-client",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:httpcomponents-client",
"SUSE Linux Enterprise High Performance Computing 15 SP5:httpcomponents-client",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP2-LTSS:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP2:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP3-LTSS:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP3:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP4-LTSS:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP4:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP5-LTSS:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP5:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP6-LTSS:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP6:httpcomponents-client",
"SUSE Linux Enterprise Server 15 SP7:httpcomponents-client",
"SUSE Linux Enterprise Server 16.0:httpcomponents-client",
"SUSE Linux Enterprise Server 16.0:httpcomponents-client-cache",
"SUSE Linux Enterprise Server 16.0:httpcomponents-client-javadoc",
"SUSE Linux Enterprise Server 16.1:httpcomponents-client",
"SUSE Linux Enterprise Server 16.1:httpcomponents-client-cache",
"SUSE Linux Enterprise Server 16.1:httpcomponents-client-javadoc",
"SUSE Linux Enterprise Server Teradata 15 SP4:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP Applications 15 SP2:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP Applications 15 SP3:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP Applications 15 SP7:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP applications 16.0:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP applications 16.0:httpcomponents-client-cache",
"SUSE Linux Enterprise Server for SAP applications 16.0:httpcomponents-client-javadoc",
"SUSE Linux Enterprise Server for SAP applications 16.1:httpcomponents-client",
"SUSE Linux Enterprise Server for SAP applications 16.1:httpcomponents-client-cache",
"SUSE Linux Enterprise Server for SAP applications 16.1:httpcomponents-client-javadoc",
"openSUSE Leap 16.0:httpcomponents-client"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-71290",
"url": "https://www.suse.com/security/cve/CVE-2026-71290"
},
{
"category": "external",
"summary": "SUSE Security Ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "external",
"summary": "SUSE Bug 1275121 for CVE-2026-71290",
"url": "https://bugzilla.suse.com/1275121"
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-11T22:11:59Z",
"details": "important"
}
],
"title": "CVE-2026-71290"
}
]
}