SUSE-SU-2026:23191-1
Vulnerability from csaf_suse - Published: 2026-08-18 11:49 - Updated: 2026-09-16 20:12Summary
Security update for python311
Severity
Important
Notes
Title of the patch: Security update for python311
Description of the patch: This update for python311 fixes the following issues:
Security issues fixed:
- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the
`configparser` module is used (bsc#1269066).
- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).
- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted
Unicode input (bsc#1267581).
- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting
hardlinks (bsc#1269959).
- CVE-2026-4786: Incomplete mitigation of %action expansion for command injection to webbrowser.open() (bsc#1262319).
- CVE-2026-6019: BaseCookie.js_output() does not neutralize embedded characters (bsc#1262654).
- CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules
(bsc#1262098).
- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding
protection (bsc#1264962).
- CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory
(bsc#1267821).
- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).
- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and
enables arbitrary file reads and writes (bsc#1268977).
- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS
(bsc#1269788).
- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations
(bsc#1271192).
Non security issues fixed:
- Regression in `http.cookies` (bsc#1263083).
- udplite was removed -> python fails in tests (bsc#1268375).
- Conflicts between different versions of Python (bsc#1258364).
Patchnames: SUSE-SLE-Micro-6.1-676
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
4.9 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
low
7.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
low
8.1 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2026-0864
Threats
Impact
moderate
References
60 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python311",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python311 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n `configparser` module is used (bsc#1269066).\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted\n Unicode input (bsc#1267581).\n- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting\n hardlinks (bsc#1269959).\n- CVE-2026-4786: Incomplete mitigation of %action expansion for command injection to webbrowser.open() (bsc#1262319).\n- CVE-2026-6019: BaseCookie.js_output() does not neutralize embedded characters (bsc#1262654).\n- CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules\n (bsc#1262098).\n- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding\n protection (bsc#1264962).\n- CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory\n (bsc#1267821).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and\n enables arbitrary file reads and writes (bsc#1268977).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n (bsc#1271192).\n\nNon security issues fixed:\n\n- Regression in `http.cookies` (bsc#1263083).\n- udplite was removed -\u003e python fails in tests (bsc#1268375).\n- Conflicts between different versions of Python (bsc#1258364).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-676",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23191-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:23191-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623191-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:23191-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028465.html"
},
{
"category": "self",
"summary": "SUSE Bug 1258364",
"url": "https://bugzilla.suse.com/1258364"
},
{
"category": "self",
"summary": "SUSE Bug 1261969",
"url": "https://bugzilla.suse.com/1261969"
},
{
"category": "self",
"summary": "SUSE Bug 1262098",
"url": "https://bugzilla.suse.com/1262098"
},
{
"category": "self",
"summary": "SUSE Bug 1262319",
"url": "https://bugzilla.suse.com/1262319"
},
{
"category": "self",
"summary": "SUSE Bug 1262654",
"url": "https://bugzilla.suse.com/1262654"
},
{
"category": "self",
"summary": "SUSE Bug 1263083",
"url": "https://bugzilla.suse.com/1263083"
},
{
"category": "self",
"summary": "SUSE Bug 1264962",
"url": "https://bugzilla.suse.com/1264962"
},
{
"category": "self",
"summary": "SUSE Bug 1265268",
"url": "https://bugzilla.suse.com/1265268"
},
{
"category": "self",
"summary": "SUSE Bug 1267581",
"url": "https://bugzilla.suse.com/1267581"
},
{
"category": "self",
"summary": "SUSE Bug 1267821",
"url": "https://bugzilla.suse.com/1267821"
},
{
"category": "self",
"summary": "SUSE Bug 1268375",
"url": "https://bugzilla.suse.com/1268375"
},
{
"category": "self",
"summary": "SUSE Bug 1268977",
"url": "https://bugzilla.suse.com/1268977"
},
{
"category": "self",
"summary": "SUSE Bug 1269066",
"url": "https://bugzilla.suse.com/1269066"
},
{
"category": "self",
"summary": "SUSE Bug 1269788",
"url": "https://bugzilla.suse.com/1269788"
},
{
"category": "self",
"summary": "SUSE Bug 1269959",
"url": "https://bugzilla.suse.com/1269959"
},
{
"category": "self",
"summary": "SUSE Bug 1271192",
"url": "https://bugzilla.suse.com/1271192"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-0864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-0864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1502 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-3276 page",
"url": "https://www.suse.com/security/cve/CVE-2026-3276/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4360 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4786 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4786/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6019 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6019/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6100 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6100/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7210 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7774 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7774/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8328 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8328/"
}
],
"title": "Security update for python311",
"tracking": {
"current_release_date": "2026-09-16T20:12:29Z",
"generator": {
"date": "2026-08-18T11:49:38Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:23191-1",
"initial_release_date": "2026-08-18T11:49:38Z",
"revision_history": [
{
"date": "2026-08-18T11:49:38Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T19:24:44Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:12:29Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"product": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"product_id": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.15-slfo.1.1_5.1?arch=aarch64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-3.11.15-slfo.1.1_5.1.aarch64",
"product": {
"name": "python311-3.11.15-slfo.1.1_5.1.aarch64",
"product_id": "python311-3.11.15-slfo.1.1_5.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311@3.11.15-slfo.1.1_5.1?arch=aarch64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"product": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"product_id": "python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-base@3.11.15-slfo.1.1_5.1?arch=aarch64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"product": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"product_id": "python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-curses@3.11.15-slfo.1.1_5.1?arch=aarch64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"product": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"product_id": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.15-slfo.1.1_5.1?arch=ppc64le\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-3.11.15-slfo.1.1_5.1.ppc64le",
"product": {
"name": "python311-3.11.15-slfo.1.1_5.1.ppc64le",
"product_id": "python311-3.11.15-slfo.1.1_5.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311@3.11.15-slfo.1.1_5.1?arch=ppc64le\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"product": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"product_id": "python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-base@3.11.15-slfo.1.1_5.1?arch=ppc64le\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"product": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"product_id": "python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-curses@3.11.15-slfo.1.1_5.1?arch=ppc64le\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"product": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"product_id": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.15-slfo.1.1_5.1?arch=s390x\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-3.11.15-slfo.1.1_5.1.s390x",
"product": {
"name": "python311-3.11.15-slfo.1.1_5.1.s390x",
"product_id": "python311-3.11.15-slfo.1.1_5.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311@3.11.15-slfo.1.1_5.1?arch=s390x\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-base-3.11.15-slfo.1.1_5.1.s390x",
"product": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.s390x",
"product_id": "python311-base-3.11.15-slfo.1.1_5.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-base@3.11.15-slfo.1.1_5.1?arch=s390x\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"product": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"product_id": "python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-curses@3.11.15-slfo.1.1_5.1?arch=s390x\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"product": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"product_id": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.15-slfo.1.1_5.1?arch=x86_64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-3.11.15-slfo.1.1_5.1.x86_64",
"product": {
"name": "python311-3.11.15-slfo.1.1_5.1.x86_64",
"product_id": "python311-3.11.15-slfo.1.1_5.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311@3.11.15-slfo.1.1_5.1?arch=x86_64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"product": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"product_id": "python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-base@3.11.15-slfo.1.1_5.1?arch=x86_64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python311-curses-3.11.15-slfo.1.1_5.1.x86_64",
"product": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.x86_64",
"product_id": "python311-curses-3.11.15-slfo.1.1_5.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.15:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python311-curses@3.11.15-slfo.1.1_5.1?arch=x86_64\u0026upstream=python311-3.11.15-slfo.1.1_5.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64"
},
"product_reference": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le"
},
"product_reference": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x"
},
"product_reference": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64"
},
"product_reference": "libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-3.11.15-slfo.1.1_5.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64"
},
"product_reference": "python311-3.11.15-slfo.1.1_5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-3.11.15-slfo.1.1_5.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le"
},
"product_reference": "python311-3.11.15-slfo.1.1_5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-3.11.15-slfo.1.1_5.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x"
},
"product_reference": "python311-3.11.15-slfo.1.1_5.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-3.11.15-slfo.1.1_5.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64"
},
"product_reference": "python311-3.11.15-slfo.1.1_5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64"
},
"product_reference": "python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le"
},
"product_reference": "python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x"
},
"product_reference": "python311-base-3.11.15-slfo.1.1_5.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-base-3.11.15-slfo.1.1_5.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64"
},
"product_reference": "python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64"
},
"product_reference": "python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le"
},
"product_reference": "python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x"
},
"product_reference": "python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python311-curses-3.11.15-slfo.1.1_5.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
},
"product_reference": "python311-curses-3.11.15-slfo.1.1_5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-0864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-0864"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-0864",
"url": "https://www.suse.com/security/cve/CVE-2026-0864"
},
{
"category": "external",
"summary": "SUSE Bug 1269066 for CVE-2026-0864",
"url": "https://bugzilla.suse.com/1269066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-0864"
},
{
"cve": "CVE-2026-11940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11940"
}
],
"notes": [
{
"category": "general",
"text": "tarfile.extractall() with the \u0027data\u0027 or \u0027tar\u0027\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself. \nThe extraction fallback validated the symlink at it\u0027s archived location \nbut recreated it at the hardlink\u0027s shallower\npath, letting a relative\n target the filter judged contained escape the destination directory. \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11940",
"url": "https://www.suse.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "SUSE Bug 1268977 for CVE-2026-11940",
"url": "https://bugzilla.suse.com/1268977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-11940"
},
{
"cve": "CVE-2026-11972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11972"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11972",
"url": "https://www.suse.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "SUSE Bug 1269788 for CVE-2026-11972",
"url": "https://bugzilla.suse.com/1269788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-11972"
},
{
"cve": "CVE-2026-1502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1502"
}
],
"notes": [
{
"category": "general",
"text": "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1502",
"url": "https://www.suse.com/security/cve/CVE-2026-1502"
},
{
"category": "external",
"summary": "SUSE Bug 1261969 for CVE-2026-1502",
"url": "https://bugzilla.suse.com/1261969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "moderate"
}
],
"title": "CVE-2026-1502"
},
{
"cve": "CVE-2026-15308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15308"
}
],
"notes": [
{
"category": "general",
"text": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15308",
"url": "https://www.suse.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "SUSE Bug 1271192 for CVE-2026-15308",
"url": "https://bugzilla.suse.com/1271192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-15308"
},
{
"cve": "CVE-2026-3276",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-3276"
}
],
"notes": [
{
"category": "general",
"text": "unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-3276",
"url": "https://www.suse.com/security/cve/CVE-2026-3276"
},
{
"category": "external",
"summary": "SUSE Bug 1267581 for CVE-2026-3276",
"url": "https://bugzilla.suse.com/1267581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-3276"
},
{
"cve": "CVE-2026-4360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4360"
}
],
"notes": [
{
"category": "general",
"text": "In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter=\u0027data\u0027 to the extract() function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4360",
"url": "https://www.suse.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "SUSE Bug 1269959 for CVE-2026-4360",
"url": "https://bugzilla.suse.com/1269959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "low"
}
],
"title": "CVE-2026-4360"
},
{
"cve": "CVE-2026-4786",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4786"
}
],
"notes": [
{
"category": "general",
"text": "Mitgation of CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types the \"webbrowser.open()\" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4786",
"url": "https://www.suse.com/security/cve/CVE-2026-4786"
},
{
"category": "external",
"summary": "SUSE Bug 1260026 for CVE-2026-4786",
"url": "https://bugzilla.suse.com/1260026"
},
{
"category": "external",
"summary": "SUSE Bug 1262319 for CVE-2026-4786",
"url": "https://bugzilla.suse.com/1262319"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-4786"
},
{
"cve": "CVE-2026-6019",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6019"
}
],
"notes": [
{
"category": "general",
"text": "http.cookies.Morsel.js_output() returns an inline \u003cscript\u003e snippet and only escapes \" for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence \u003c/script\u003e inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6019",
"url": "https://www.suse.com/security/cve/CVE-2026-6019"
},
{
"category": "external",
"summary": "SUSE Bug 1262654 for CVE-2026-6019",
"url": "https://bugzilla.suse.com/1262654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.8,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "low"
}
],
"title": "CVE-2026-6019"
},
{
"cve": "CVE-2026-6100",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6100"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6100",
"url": "https://www.suse.com/security/cve/CVE-2026-6100"
},
{
"category": "external",
"summary": "SUSE Bug 1262098 for CVE-2026-6100",
"url": "https://bugzilla.suse.com/1262098"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-6100"
},
{
"cve": "CVE-2026-7210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7210"
}
],
"notes": [
{
"category": "general",
"text": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7210",
"url": "https://www.suse.com/security/cve/CVE-2026-7210"
},
{
"category": "external",
"summary": "SUSE Bug 1264962 for CVE-2026-7210",
"url": "https://bugzilla.suse.com/1264962"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-7210"
},
{
"cve": "CVE-2026-7774",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7774"
}
],
"notes": [
{
"category": "general",
"text": "tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7774",
"url": "https://www.suse.com/security/cve/CVE-2026-7774"
},
{
"category": "external",
"summary": "SUSE Bug 1267821 for CVE-2026-7774",
"url": "https://bugzilla.suse.com/1267821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "important"
}
],
"title": "CVE-2026-7774"
},
{
"cve": "CVE-2026-8328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8328"
}
],
"notes": [
{
"category": "general",
"text": "The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8328",
"url": "https://www.suse.com/security/cve/CVE-2026-8328"
},
{
"category": "external",
"summary": "SUSE Bug 1265268 for CVE-2026-8328",
"url": "https://bugzilla.suse.com/1265268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:libpython3_11-1_0-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-base-3.11.15-slfo.1.1_5.1.x86_64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.aarch64",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.ppc64le",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.s390x",
"SUSE Linux Micro 6.1:python311-curses-3.11.15-slfo.1.1_5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-18T11:49:38Z",
"details": "moderate"
}
],
"title": "CVE-2026-8328"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…