Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 470
Alerts This Week
Warning Icon 1 470

SUSE Python3 Important Issues Fixed May Lead to Remote Access 2026-3245-1

suse
Calendar Grey July 27, 2026
Scroller Suse
Install a vital SUSE update for python3 addressing multiple security issues including buffer overflow risks and SSRF.
SUSE released a security update for Python 3 fixing three vulnerabilities, which include hash flooding, SSRF risks, and an archive extraction filter bypass, applicable to various S...

Summary

## This update for python3 fixes the following issues: * CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding (bsc#1264962). * CVE-2026-8328: server-supplied PASV host address is trusted by `ftpcp()` and allows for SSRF (bsc#1265268). * CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-3245=1

Topics%20covered

Topics Covered

security advisory buffer overflow remote access important SSRF python3

References

* bsc#1264962

* bsc#1265268

* bsc#1268977

Cross-

* CVE-2026-11940

* CVE-2026-7210

* CVE-2026-8328

CVSS scores:

* CVE-2026-11940 ( SUSE ): 8.2

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

* CVE-2026-11940 ( NVD ): 7.8

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2026-7210 ( SUSE ): 8.7

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-7210 ( NVD ): 6.3

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3245-1
Release Date: 2026-07-24T13:43:52Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow remote access important SSRF python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.