<div class="container">
<h1>Security update for jline3</h1>
<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:23989-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-10-01T12:14:32Z</td>
</tr>
<tr>
<th>Rating:</th>
<td>moderate</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>
</ul>
</td>
</tr>
<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">
<li class="list-group-item">SUSE Linux Enterprise Server 16.0</li>
<li class="list-group-item">SUSE Linux Enterprise Server for SAP applications 16.0</li>
</ul>
</td>
</tr>
</tbody>
</table>
<p>An update that can now be installed.</p>
<h2>Description:</h2>
<p>This update for jline3 fixes the following issue:</p>
<p>Update to upstream version 3.30.17:</p>
<ul>
<li>Security Fixes</li>
<li>Native Stack Buffer Overflow in Public INPUT_RECORD.memmove
JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6)</li>
<li>Authenticated SSH Shell Channel Resource Leak via Null or
Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj)</li>
<li>Authenticated SSH DoS via Unbounded Window-Change Terminal
Geometry (GHSA-m935-wqpj-pvp3)</li>
<li>TCP Socket File Descriptor Leak When Maximum Connections
Reached (GHSA-c87g-867h-cqr6)</li>
<li>Bug Fixes</li>
<li>strip control characters from file names in posix builtins</li>
<li>bound !# history expansion to prevent exponential blowup</li>
<li>verify server host keys in the ssh client builtin</li>
<li>address remaining security vulnerabilities reported by
AFINE/CERT.PL</li>
<li>backport security fixes from master</li>
<li>backport security fixes to 3.x (path traversal + DSR plain
text)</li>
<li>strip control characters from ssh banner and prompts</li>
<li>Dependency updates</li>
<li>bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to
3.10.2</li>
<li>bump slf4j.version from 2.0.18 to 2.0.19</li>
<li>bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6
to 3.6.0</li>
<li>bump org.apache.maven.plugins:maven-compiler-plugin from
3.15.0 to 3.16.0</li>
<li>bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.2</li>
<li>bump actions/setup-java from 5 to 6.0.0</li>
<li>bump org.graalvm.sdk:graal-sdk from 25.1.3 to 25.3.4.1</li>
<li>bump com.mycila:license-maven-plugin from 5.0.0 to 5.1.2</li>
<li>bump org.easymock:easymock from 5.6.0 to 5.7.0</li>
<li>bump com.google.jimfs:jimfs from 1.3.1 to 1.3.2</li>
<li>bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to
3.3.4</li>
<li>bump org.apache.maven:apache-maven from 4.0.0-rc-3 to
4.0.0-rc-6</li>
<li>bump eu.maveniverse.maven.njord:extension3 from 0.9.9 to
0.9.10</li>
<li>bump com.palantir.javaformat:palantir-java-format from 2.96.0
to 2.97.0</li>
<li>bump release-drafter/release-drafter from 7.6.0 to 7.7.0</li>
<li>bump groovy.version from 4.0.32 to 4.0.33</li>
<li>bump release-drafter/release-drafter from 7 to 7.6.0</li>
<li>bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to
3.5.1</li>
<li>Update to upstream version 3.30.16</li>
<li>bugfix release with security hardening, SSH agent forwarding
fix, and terminal compatibility improvements.</li>
<li>Breaking Changes</li>
<li>SSH agent forwarding is no longer enabled by default;
pass -A to explicitly request it</li>
<li>reject overlong hex components in OSC color responses</li>
<li>strip OSC and other escape sequences in ansiAppend</li>
<li>search multiple lib paths for versioned libutil.so</li>
<li>use Path.resolve instead of URI.resolve in cat and sort to
prevent SSRF</li>
<li>check closed flag in PtyInputStream to prevent hang on empty
input</li>
<li>confine ConfigurationPath lookups to the config directory</li>
<li>disable Read File command in nano restricted mode</li>
<li>drain buffered data before EOF in NonBlockingPumpInputStream</li>
<li>look up openpty in libc.so.6 for glibc 2.34+</li>
<li>guard styleMatches and highlighter rules against ReDoS</li>
<li>backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c)</li>
<li>propagate EOF in PtyInputStream to avoid infinite loop</li>
<li>bump org.apache.ivy:ivy from 2.5.3 to 2.6.0</li>
<li>bump actions/setup-node from 6 to 7</li>
<li>bump com.palantir.javaformat:palantir-java-format from 2.94.0
to 2.96.0</li>
<li>bump sshd.version from 2.18.0 to 2.19.0</li>
<li>bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to
5.1.0</li>
<li>bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3</li>
<li>bump com.diffplug.spotless:spotless-maven-plugin</li>
</ul>
<h2>Patch Instructions:</h2>
<p>
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".<br/>
Alternatively you can run the command listed for your product:
</p>
<ul class="list-group">
<li class="list-group-item">
SUSE Linux Enterprise Server for SAP applications 16.0
<br/>
<code>zypper in -t patch SUSE-SLES-16.0-1800</code>
</li>
<li class="list-group-item">
SUSE Linux Enterprise Server 16.0
<br/>
<code>zypper in -t patch SUSE-SLES-16.0-1800</code>
</li>
</ul>
<h2>Package List:</h2>
<ul>
<li>
SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64)
<ul>
<li>jline3-3.30.17-160000.1.1</li>
<li>jline3-debugsource-3.30.17-160000.1.1</li>
<li>jline3-native-debuginfo-3.30.17-160000.1.1</li>
<li>jline3-native-3.30.17-160000.1.1</li>
<li>jline3-jansi-3.30.17-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server for SAP applications 16.0 (noarch)
<ul>
<li>jline3-terminal-jni-3.30.17-160000.1.1</li>
<li>jline3-terminal-jna-3.30.17-160000.1.1</li>
<li>jline3-terminal-3.30.17-160000.1.1</li>
<li>jline3-reader-3.30.17-160000.1.1</li>
<li>jline3-console-ui-3.30.17-160000.1.1</li>
<li>jline3-console-3.30.17-160000.1.1</li>
<li>jline3-curses-3.30.17-160000.1.1</li>
<li>jline3-javadoc-3.30.17-160000.1.1</li>
<li>jline3-jansi-core-3.30.17-160000.1.1</li>
<li>jline3-builtins-3.30.17-160000.1.1</li>
<li>jline3-style-3.30.17-160000.1.1</li>
<li>jline3-terminal-jansi-3.30.17-160000.1.1</li>
<li>jline3-remote-telnet-3.30.17-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
<ul>
<li>jline3-3.30.17-160000.1.1</li>
<li>jline3-debugsource-3.30.17-160000.1.1</li>
<li>jline3-native-debuginfo-3.30.17-160000.1.1</li>
<li>jline3-native-3.30.17-160000.1.1</li>
<li>jline3-jansi-3.30.17-160000.1.1</li>
</ul>
</li>
<li>
SUSE Linux Enterprise Server 16.0 (noarch)
<ul>
<li>jline3-terminal-jni-3.30.17-160000.1.1</li>
<li>jline3-terminal-jna-3.30.17-160000.1.1</li>
<li>jline3-terminal-3.30.17-160000.1.1</li>
<li>jline3-reader-3.30.17-160000.1.1</li>
<li>jline3-console-ui-3.30.17-160000.1.1</li>
<li>jline3-console-3.30.17-160000.1.1</li>
<li>jline3-curses-3.30.17-160000.1.1</li>
<li>jline3-javadoc-3.30.17-160000.1.1</li>
<li>jline3-jansi-core-3.30.17-160000.1.1</li>
<li>jline3-builtins-3.30.17-160000.1.1</li>
<li>jline3-style-3.30.17-160000.1.1</li>
<li>jline3-terminal-jansi-3.30.17-160000.1.1</li>
<li>jline3-remote-telnet-3.30.17-160000.1.1</li>
</ul>
</li>
</ul>
</div>