Mehrere Probleme in python312 (SUSE)

Дата публикации: 11-08-2026 18:50:49

Основное содержимое страницы с новостью.

--===============0374522493623408587==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

# Security update for python312

Announcement ID: SUSE-SU-2026:3569-1
Release Date: 2026-08-11T08:02:52Z
Rating: important
References:

* bsc#1211301
* bsc#1264962
* bsc#1265268
* bsc#1267581
* bsc#1267821
* bsc#1268375
* bsc#1268977
* bsc#1269066
* bsc#1269788
* bsc#1269959
* bsc#1271192

Cross-References:

* CVE-2026-0864
* CVE-2026-11940
* CVE-2026-11972
* CVE-2026-15308
* CVE-2026-3276
* CVE-2026-4360
* CVE-2026-7210
* CVE-2026-7774
* CVE-2026-8328

CVSS scores:

* CVE-2026-0864 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-0864 ( NVD ): 4.1

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-11940 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-11940 ( NVD ): 7.8

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-11972 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-11972 ( NVD ): 8.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-15308 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-15308 ( NVD ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-3276 ( SUSE ): 8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-3276 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-4360 ( SUSE ): 2.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
* CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
* CVE-2026-4360 ( NVD ): 2.0

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
* CVE-2026-7210 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
* CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-7210 ( NVD ): 6.3

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
* CVE-2026-7774 ( SUSE ): 8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
* CVE-2026-7774 ( NVD ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
* CVE-2026-8328 ( SUSE ): 6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
* CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
* CVE-2026-8328 ( NVD ): 5.9

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected Products:

* openSUSE Leap 15.6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server 15 SP6 LTSS
* SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that solves nine vulnerabilities and has two security fixes can now
be
installed.

## Description:

This update for python312 fixes the following issues:

Security issues fixed:

* CVE-2026-0864: improper handling of line-ending characters can lead to
configuration file injection when the `configparser` module is used
(bsc#1269066).
* CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead
to
DoS when processing specially crafted Unicode input (bsc#1267581).
* CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is
not passed properly when extracting hardlinks (bsc#1269959).
* CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use
insufficient entropy for Expat hash-flooding protection (bsc#1264962).
* CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing
outside the extraction directory (bsc#1267821).
* CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts
server-
supplied PASV host address (bsc#1265268).
* CVE-2026-11940: tarfile extraction filter bypass via a crafted archive
allows escaping the destination directory and enables arbitrary file reads
and writes (bsc#1268977).
* CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile
module streaming mode can lead to DoS (bsc#1269788).
* CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via
repeated unterminated markup declarations (bsc#1271192).

Non security issues fixed:

* [kernel 7.1] udplite was removed -> python fails in tests (bsc#1268375).
* crypto-policies: Extend the crypto-policies support for mozilla-nss,
openjdk, krb5, bind, stunnel, openssh, libssh and more packages
(bsc#1211301).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server for SAP Applications 15 SP6
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3569=1

* SUSE Linux Enterprise Server 15 SP6 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3569=1

* openSUSE Leap 15.6
zypper in -t patch SUSE-2026-3569=1

## Package List:

* SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64)
* python312-dbm-3.12.13-150600.3.62.1
* python312-curses-debuginfo-3.12.13-150600.3.62.1
* python312-dbm-debuginfo-3.12.13-150600.3.62.1
* python312-devel-3.12.13-150600.3.62.3
* libpython3_12-1_0-debuginfo-3.12.13-150600.3.62.3
* python312-3.12.13-150600.3.62.1
* python312-tk-3.12.13-150600.3.62.1
* python312-base-debuginfo-3.12.13-150600.3.62.3
* python312-base-3.12.13-150600.3.62.3
* python312-curses-3.12.13-150600.3.62.1
* python312-tools-3.12.13-150600.3.62.3
* python312-core-debugsource-3.12.13-150600.3.62.3
* python312-debugsource-3.12.13-150600.3.62.1
* python312-tk-debuginfo-3.12.13-150600.3.62.1
* libpython3_12-1_0-3.12.13-150600.3.62.3
* python312-idle-3.12.13-150600.3.62.1
* python312-debuginfo-3.12.13-150600.3.62.1
* openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
* python312-dbm-3.12.13-150600.3.62.1
* python312-base-3.12.13-150600.3.62.3
* python312-doc-devhelp-3.12.13-150600.3.62.1
* python312-idle-3.12.13-150600.3.62.1
* python312-testsuite-3.12.13-150600.3.62.3
* libpython3_12-1_0-debuginfo-3.12.13-150600.3.62.3
* python312-tk-3.12.13-150600.3.62.1
* python312-doc-3.12.13-150600.3.62.1
* python312-tools-3.12.13-150600.3.62.3
* libpython3_12-1_0-3.12.13-150600.3.62.3
* python312-curses-debuginfo-3.12.13-150600.3.62.1
* python312-devel-3.12.13-150600.3.62.3
* python312-curses-3.12.13-150600.3.62.1
* python312-tk-debuginfo-3.12.13-150600.3.62.1
* python312-dbm-debuginfo-3.12.13-150600.3.62.1
* python312-core-debugsource-3.12.13-150600.3.62.3
* python312-3.12.13-150600.3.62.1
* python312-base-debuginfo-3.12.13-150600.3.62.3
* python312-testsuite-debuginfo-3.12.13-150600.3.62.3
* python312-debugsource-3.12.13-150600.3.62.1
* python312-debuginfo-3.12.13-150600.3.62.1
* openSUSE Leap 15.6 (aarch64_ilp32)
* python312-base-64bit-3.12.13-150600.3.62.3
* libpython3_12-1_0-64bit-3.12.13-150600.3.62.3
* libpython3_12-1_0-64bit-debuginfo-3.12.13-150600.3.62.3
* python312-64bit-3.12.13-150600.3.62.1
* python312-base-64bit-debuginfo-3.12.13-150600.3.62.3
* python312-64bit-debuginfo-3.12.13-150600.3.62.1
* openSUSE Leap 15.6 (x86_64)
* libpython3_12-1_0-32bit-debuginfo-3.12.13-150600.3.62.3
* python312-base-32bit-debuginfo-3.12.13-150600.3.62.3
* libpython3_12-1_0-32bit-3.12.13-150600.3.62.3
* python312-base-32bit-3.12.13-150600.3.62.3
* python312-32bit-3.12.13-150600.3.62.1
* python312-32bit-debuginfo-3.12.13-150600.3.62.1
* SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64)
* python312-dbm-3.12.13-150600.3.62.1
* python312-curses-debuginfo-3.12.13-150600.3.62.1
* python312-dbm-debuginfo-3.12.13-150600.3.62.1
* python312-devel-3.12.13-150600.3.62.3
* libpython3_12-1_0-debuginfo-3.12.13-150600.3.62.3
* python312-3.12.13-150600.3.62.1
* python312-core-debugsource-3.12.13-150600.3.62.3
* python312-tk-3.12.13-150600.3.62.1
* python312-base-debuginfo-3.12.13-150600.3.62.3
* python312-curses-3.12.13-150600.3.62.1
* python312-tools-3.12.13-150600.3.62.3
* python312-base-3.12.13-150600.3.62.3
* python312-tk-debuginfo-3.12.13-150600.3.62.1
* python312-debugsource-3.12.13-150600.3.62.1
* libpython3_12-1_0-3.12.13-150600.3.62.3
* python312-idle-3.12.13-150600.3.62.1
* python312-debuginfo-3.12.13-150600.3.62.1

## References:

--===============0374522493623408587==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

<div class="container">
<h1>Security update for python312</h1>

<table class="table table-striped table-bordered">
<tbody>
<tr>
<th>Announcement ID:</th>
<td>SUSE-SU-2026:3569-1</td>
</tr>
<tr>
<th>Release Date:</th>
<td>2026-08-11T08:02:52Z</td>
</tr>

<tr>
<th>Rating:</th>
<td>important</td>
</tr>
<tr>
<th>References:</th>
<td>
<ul>

</ul>
</td>
</tr>

<tr>
<th>
Cross-References:
</th>
<td>
<ul>

</ul>
</td>
</tr>
<tr>
<th>CVSS scores:</th>
<td>
<ul class="list-group">

<li class="list-group-item">
CVE-2026-0864

(

SUSE

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-0864

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-0864

(

NVD

):

4.1
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-11940

(

SUSE

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-11940

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-11940

(

NVD

):

7.8
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-11972

(

SUSE

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-11972

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-11972

(

NVD

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-15308

(

SUSE

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-15308

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-15308

(

NVD

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-15308

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-3276

(

SUSE

):

8.2
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-3276

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-3276

(

NVD

):

6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-4360

(

SUSE

):

2.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-4360

(

SUSE

):

2.5
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-4360

(

NVD

):

2.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-4360

(

NVD

):

5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
</li>

<li class="list-group-item">
CVE-2026-7210

(

SUSE

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-7210

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-7210

(

NVD

):

6.3
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-7210

(

NVD

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
</li>

<li class="list-group-item">
CVE-2026-7774

(

SUSE

):

8.7
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-7774

(

SUSE

):

7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
</li>

<li class="list-group-item">
CVE-2026-7774

(

NVD

):

6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

<li class="list-group-item">
CVE-2026-8328

(

SUSE

):

6.3
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
</li>

<li class="list-group-item">
CVE-2026-8328

(

SUSE

):

5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
</li>

<li class="list-group-item">
CVE-2026-8328

(

NVD

):

5.9
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
</li>

</ul>
</td>
</tr>

<tr>
<th>Affected Products:</th>
<td>
<ul class="list-group">

<li class="list-group-item">openSUSE Leap
15.6</li>

<li class="list-group-item">SUSE Linux
Enterprise Server 15 SP6</li>

<li class="list-group-item">SUSE Linux
Enterprise Server 15 SP6 LTSS</li>

<li class="list-group-item">SUSE Linux
Enterprise Server for SAP Applications 15 SP6</li>

</ul>
</td>
</tr>
</tbody>
</table>

An update that solves nine vulnerabilities and has two security
fixes can now be installed.

<h2>Description:</h2>

This update for python312 fixes the following issues:
Security issues fixed:
<ul>
<li>CVE-2026-0864: improper handling of line-ending characters can lead
to configuration file injection when the
<code>configparser</code> module is used
(bsc#1269066).</li>
<li>CVE-2026-3276: quadratic complexity in
<code>unicodedata.normalize()</code> can lead to DoS when processing specially crafted
Unicode input (bsc#1267581).</li>
<li>CVE-2026-4360: in the Tarfile.extract() function, the filter
parameter is not passed properly when extracting
hardlinks (bsc#1269959).</li>
<li>CVE-2026-7210: <code>xml.parsers.expat</code> and
<code>xml.etree.ElementTree</code> use insufficient entropy for Expat hash-flooding
protection (bsc#1264962).</li>
<li>CVE-2026-7774: <code>tarfile.data_filter</code> path
traversal bypass allows writing outside the extraction directory
(bsc#1267821).</li>
<li>CVE-2026-8328: <code>ftpcp()</code> does not use actual
peer address and trusts server-supplied PASV host address (bsc#1265268).</li>
<li>CVE-2026-11940: tarfile extraction filter bypass via a crafted
archive allows escaping the destination directory and
enables arbitrary file reads and writes (bsc#1268977).</li>
<li>CVE-2026-11972: infinite loop due to improper EOF handling in the
tarfile module streaming mode can lead to DoS
(bsc#1269788).</li>
<li>CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via
repeated unterminated markup declarations
(bsc#1271192).</li>
</ul>
Non security issues fixed:
<ul>
<li>[kernel 7.1] udplite was removed -> python fails in tests
(bsc#1268375).</li>
<li>crypto-policies: Extend the crypto-policies support for mozilla-nss,
openjdk, krb5, bind, stunnel, openssh, libssh and
more packages (bsc#1211301).</li>
</ul>

<h2>Patch Instructions:</h2>

To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper
patch".

Alternatively you can run the command listed for your product:

<ul class="list-group">

<li class="list-group-item">
SUSE Linux Enterprise Server for SAP Applications 15 SP6

<code>zypper in -t patch
SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3569=1</code>

</li>

<li class="list-group-item">
SUSE Linux Enterprise Server 15 SP6 LTSS

<code>zypper in -t patch
SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3569=1</code>

</li>

<li class="list-group-item">
openSUSE Leap 15.6

<code>zypper in -t patch
SUSE-2026-3569=1</code>

</li>

</ul>

<h2>Package List:</h2>
<ul>

<li>
SUSE Linux Enterprise Server for SAP Applications 15 SP6
(ppc64le x86_64)
<ul>

<li>python312-dbm-3.12.13-150600.3.62.1</li>

<li>python312-curses-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-dbm-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-devel-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-3.12.13-150600.3.62.1</li>

<li>python312-tk-3.12.13-150600.3.62.1</li>

<li>python312-base-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-base-3.12.13-150600.3.62.3</li>

<li>python312-curses-3.12.13-150600.3.62.1</li>

<li>python312-tools-3.12.13-150600.3.62.3</li>

<li>python312-core-debugsource-3.12.13-150600.3.62.3</li>

<li>python312-debugsource-3.12.13-150600.3.62.1</li>

<li>python312-tk-debuginfo-3.12.13-150600.3.62.1</li>

<li>libpython3_12-1_0-3.12.13-150600.3.62.3</li>

<li>python312-idle-3.12.13-150600.3.62.1</li>

<li>python312-debuginfo-3.12.13-150600.3.62.1</li>

</ul>
</li>

<li>
openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64)
<ul>

<li>python312-dbm-3.12.13-150600.3.62.1</li>

<li>python312-base-3.12.13-150600.3.62.3</li>

<li>python312-doc-devhelp-3.12.13-150600.3.62.1</li>

<li>python312-idle-3.12.13-150600.3.62.1</li>

<li>python312-testsuite-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-tk-3.12.13-150600.3.62.1</li>

<li>python312-doc-3.12.13-150600.3.62.1</li>

<li>python312-tools-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-3.12.13-150600.3.62.3</li>

<li>python312-curses-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-devel-3.12.13-150600.3.62.3</li>

<li>python312-curses-3.12.13-150600.3.62.1</li>

<li>python312-tk-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-dbm-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-core-debugsource-3.12.13-150600.3.62.3</li>

<li>python312-3.12.13-150600.3.62.1</li>

<li>python312-base-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-testsuite-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-debugsource-3.12.13-150600.3.62.1</li>

<li>python312-debuginfo-3.12.13-150600.3.62.1</li>

</ul>
</li>

<li>
openSUSE Leap 15.6 (aarch64_ilp32)
<ul>

<li>python312-base-64bit-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-64bit-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-64bit-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-64bit-3.12.13-150600.3.62.1</li>

<li>python312-base-64bit-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-64bit-debuginfo-3.12.13-150600.3.62.1</li>

</ul>
</li>

<li>
openSUSE Leap 15.6 (x86_64)
<ul>

<li>libpython3_12-1_0-32bit-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-base-32bit-debuginfo-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-32bit-3.12.13-150600.3.62.3</li>

<li>python312-base-32bit-3.12.13-150600.3.62.3</li>

<li>python312-32bit-3.12.13-150600.3.62.1</li>

<li>python312-32bit-debuginfo-3.12.13-150600.3.62.1</li>

</ul>
</li>

<li>
SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le
s390x x86_64)
<ul>

<li>python312-dbm-3.12.13-150600.3.62.1</li>

<li>python312-curses-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-dbm-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-devel-3.12.13-150600.3.62.3</li>

<li>libpython3_12-1_0-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-3.12.13-150600.3.62.1</li>

<li>python312-core-debugsource-3.12.13-150600.3.62.3</li>

<li>python312-tk-3.12.13-150600.3.62.1</li>

<li>python312-base-debuginfo-3.12.13-150600.3.62.3</li>

<li>python312-curses-3.12.13-150600.3.62.1</li>

<li>python312-tools-3.12.13-150600.3.62.3</li>

<li>python312-base-3.12.13-150600.3.62.3</li>

<li>python312-tk-debuginfo-3.12.13-150600.3.62.1</li>

<li>python312-debugsource-3.12.13-150600.3.62.1</li>

<li>libpython3_12-1_0-3.12.13-150600.3.62.3</li>

<li>python312-idle-3.12.13-150600.3.62.1</li>

<li>python312-debuginfo-3.12.13-150600.3.62.1</li>

</ul>
</li>

</ul>

<h2>References:</h2>
<ul>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-0864.html">https://www.suse.com/security/cve/CVE-2026-0864.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-11940.html">https://www.suse.com/security/cve/CVE-2026-11940.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-11972.html">https://www.suse.com/security/cve/CVE-2026-11972.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-15308.html">https://www.suse.com/security/cve/CVE-2026-15308.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-3276.html">https://www.suse.com/security/cve/CVE-2026-3276.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-4360.html">https://www.suse.com/security/cve/CVE-2026-4360.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-7210.html">https://www.suse.com/security/cve/CVE-2026-7210.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-7774.html">https://www.suse.com/security/cve/CVE-2026-7774.html</a>
</li>

<li>
<a href="https://www.suse.com/security/cve/CVE-2026-8328.html">https://www.suse.com/security/cve/CVE-2026-8328.html</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1211301">https://bugzilla.suse.com/show_bug.cgi?id=1211301</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1264962">https://bugzilla.suse.com/show_bug.cgi?id=1264962</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1265268">https://bugzilla.suse.com/show_bug.cgi?id=1265268</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267581">https://bugzilla.suse.com/show_bug.cgi?id=1267581</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1267821">https://bugzilla.suse.com/show_bug.cgi?id=1267821</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268375">https://bugzilla.suse.com/show_bug.cgi?id=1268375</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1268977">https://bugzilla.suse.com/show_bug.cgi?id=1268977</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269066">https://bugzilla.suse.com/show_bug.cgi?id=1269066</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269788">https://bugzilla.suse.com/show_bug.cgi?id=1269788</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1269959">https://bugzilla.suse.com/show_bug.cgi?id=1269959</a>
</li>

<li>
<a href="https://bugzilla.suse.com/show_bug.cgi?id=1271192">https://bugzilla.suse.com/show_bug.cgi?id=1271192</a>
</li>

</ul>

</div>

--===============0374522493623408587==--

Схожие новости

#	Наименование новости	Информативность	Дата публикации
1	Mehrere Probleme in libkrun (SUSE)	10	11-08-2026
2	Mehrere Probleme in gawk (SUSE)	10	11-08-2026
3	Mehrere Probleme in bind (SUSE)	10	11-08-2026
4	Mehrere Probleme in nginx (SUSE)	10	30-07-2026
5	Mehrere Probleme in webkit2gtk3 (SUSE)	10	11-08-2026
6	Mehrere Probleme in libssh (SUSE)	10	30-07-2026
7	Mehrere Probleme in libssh (SUSE)	10	30-07-2026
8	Mehrere Probleme in Linux (Red Hat)	10	11-08-2026
9	Mehrere Probleme in Linux (Red Hat)	10	11-08-2026
10	Mehrere Probleme in nodejs22 (SUSE)	10	11-08-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 10. Источник: www.pro-linux.de.

Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

Mehrere Probleme in python312 (SUSE)

Дата публикации: 11-08-2026 18:50:49

Основное содержимое страницы с новостью.

Схожие новости