Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

openSUSE Leap 16.0 Python313 Important Security Update ID 20517-1

opensuse
Calendar Grey April 21, 2026
Dist Opensuse Esm H88
Critical security update for python313 in openSUSE addressing important vulnerabilities. Immediate installation recommended.
An update that solves 7 vulnerabilities and has 7 bug fixes can now be installed.

Description

This update for python313 fixes the following issues:

Update to version 3.13.13.

- CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to

misinterpretation of tar archives (bsc#1259611).

- CVE-2026-2297: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).

- CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989).

- CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass

(bsc#1259734).

- CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735).

- CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser

command line option injection (bsc#1260026).

Patch instructions:

To install this openSUSE security update use the suse recommended installation methods

like YaST...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory important input validation path traversal OpenSUSE python313

Patch

Package List

- openSUSE Leap 16.0:

libpython3_13-1_0-3.13.13-160000.1.1

libpython3_13-1_0-x86-64-v3-3.13.13-160000.1.1

libpython3_13t1_0-3.13.13-160000.1.1

python313-3.13.13-160000.1.1

python313-base-3.13.13-160000.1.1

python313-base-x86-64-v3-3.13.13-160000.1.1

python313-curses-3.13.13-160000.1.1

python313-dbm-3.13.13-160000.1.1

python313-devel-3.13.13-160000.1.1

python313-doc-3.13.13-160000.1.1

python313-doc-devhelp-3.13.13-160000.1.1

python313-idle-3.13.13-160000.1.1

python313-nogil-3.13.13-160000.1.1

python313-nogil-base-3.13.13-160000.1.1

python313-nogil-curses-3.13.13-160000.1.1

python313-nogil-dbm-3.13.13-160000.1.1

python313-nogil-devel-3.13.13-160000.1.1

python313-nogil-idle-3.13.13-160000.1.1

python313-nogil-testsuite-3.13.13-160000.1.1

python313-nogil-tk-3.13.13-160000.1.1

python313-nogil-tools-3.13.13-160000.1.1

python313-testsuite-3.13.13-160000.1.1

python313-tk-3.13.13-160000.1.1

python313-tools-3.13.13-160000.1.1

python313-x86-64-v3-3.13.13-160000.1.1

References

* bsc#1257181

* bsc#1259240

* bsc#1259611

* bsc#1259734

* bsc#1259735

* bsc#1259989

* bsc#1260026

References:

* https://www.suse.com/security/cve/CVE-2025-13462.html

* https://www.suse.com/security/cve/CVE-2026-1299.html

* https://www.suse.com/security/cve/CVE-2026-2297.html

* https://www.suse.com/security/cve/CVE-2026-3479.html

* https://www.suse.com/security/cve/CVE-2026-3644.html

* https://www.suse.com/security/cve/CVE-2026-4224.html

* https://www.suse.com/security/cve/CVE-2026-4519.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20517-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Topics%20covered

Topics Covered

security advisory important input validation path traversal OpenSUSE python313

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here