Alerts This Week
Warning Icon 1 1,365
Alerts This Week
Warning Icon 1 1,365

openSUSE Python-Py7zr Important Denial of Service Vulnern 2026-21159-1

opensuse
Calendar Grey June 30, 2026
Dist Opensuse Esm H88
An important security update for python-py7zr on openSUSE addresses multiple vulnerabilities and bug fixes.
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description

This update for python-py7zr fixes the following issues:

Changes in python-py7zr:

- CVE-2026-23879: crafted malicious symbolic link chains in an archive can

lead to an arbitrary file write (bsc#1268669)

- CVE-2026-55195: unchecked extraction size can cause a denial of service (bsc#1268665)

- CVE-2026-55206: crafted .7z archive with a large numstreams value can

cause a denial of service (bsc#1268666)

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 16.0

zypper in -t patch openSUSE-Leap-16.0-packagehub-354=1

Topics%20covered

Topics Covered

security advisory denial of service security update important OpenSUSE python-py7zr

Patch

Package List

- openSUSE Leap 16.0:

python313-py7zr-1.0.0-bp160.2.1

References

* bsc#1268665

* bsc#1268666

* bsc#1268669

References:

* https://www.suse.com/security/cve/CVE-2026-23879.html

* https://www.suse.com/security/cve/CVE-2026-55195.html

* https://www.suse.com/security/cve/CVE-2026-55206.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:21159-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory denial of service security update important OpenSUSE python-py7zr

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here