Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia wget Important Denial of Service Threats and Updates 2026-0300

Calendar White Jul 25, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia libnfs Important Integer Overflow Vuln CVE-2026-53689 2026-0299

Calendar White Jul 25, 2026
Important
Mageia Large Esm H900
Mageia

Mageia Graphite2 Important Integer Underflow Out of Bounds Vuln 2026-0298

Calendar White Jul 25, 2026
Important
Mageia Large Esm H800
Mageia

Mageia vorbis-tools Critical Buffer Underflow Vulnerability CVE-2026-34253

Calendar White Jul 25, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia 10 9 Yelp Important Content Security Issue CVE-2026-13601

Calendar White Jul 25, 2026
Important
Mageia Large Esm H900
Mageia

Mageia giflib Critical Denial of Service Vuln 2026-0295 CVE-2026-26740

Calendar White Jul 25, 2026
Critical
Opensuse Large Esm H800
openSUSE

openSUSE Tumbleweed perl-HTTP-Date Moderate Threat Advisory CVE-2026-14741

Calendar White Jul 25, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE Tumbleweed proftpd Moderate Security Issue CVE-2026-42167

Calendar White Jul 25, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE google-osconfig-agent Moderate Security Threat Vuln 2026-11349-1

Calendar White Jul 25, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -6 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE 12 SP5 Python Important Patch 5 Issues 2026-1417-1

An update that solves five vulnerabilities can now be installed.. # Security update for python Announcement ID: SUSE-SU-2026:1417-1 Release Date: 2026-04-16T16:41:23Z Rating: important References: * bsc#1259611 * bsc#1259734 * bsc#1259735 * bsc#1259989 * bsc#1260026 Cross-References: * CVE-2025-13462 * CVE-2026-3479 * CVE-2026-3644 * CVE-2026-4224 * CVE-2026-4519 CVSS scores: * CVE-2025-13462 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-13462 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-13462 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3644 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-3644 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4519 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N * CVE-2026-4519 ( SUSE ): 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N * CVE-2026-4519 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4519 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for python fixes the following issues: * CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). * CVE-2026-3479: improper resource argument validation can allow path traversal (bsc#1259989). * CVE-2026-3644: incomplete control character validation in `http.cookies` (bsc#1259734). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-1417=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1417=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) *python-gdbm-debuginfo-2.7.18-33.74.1 * python-curses-debuginfo-2.7.18-33.74.1 * python-xml-2.7.18-33.74.1 * python-debuginfo-2.7.18-33.74.1 * python-curses-2.7.18-33.74.1 * python-gdbm-2.7.18-33.74.1 * python-debugsource-2.7.18-33.74.1 * python-tk-debuginfo-2.7.18-33.74.1 * python-base-2.7.18-33.74.1 * libpython2_7-1_0-2.7.18-33.74.1 * python-base-debugsource-2.7.18-33.74.1 * python-tk-2.7.18-33.74.1 * python-devel-2.7.18-33.74.1 * python-demo-2.7.18-33.74.1 * python-xml-debuginfo-2.7.18-33.74.1 * libpython2_7-1_0-debuginfo-2.7.18-33.74.1 * python-2.7.18-33.74.1 * python-idle-2.7.18-33.74.1 * python-base-debuginfo-2.7.18-33.74.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * python-doc-2.7.18-33.74.1 * python-doc-pdf-2.7.18-33.74.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * python-32bit-2.7.18-33.74.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.74.1 * python-base-32bit-2.7.18-33.74.1 * python-debuginfo-32bit-2.7.18-33.74.1 * python-base-debuginfo-32bit-2.7.18-33.74.1 * libpython2_7-1_0-32bit-2.7.18-33.74.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python-gdbm-debuginfo-2.7.18-33.74.1 * python-debugsource-2.7.18-33.74.1 * python-base-debuginfo-32bit-2.7.18-33.74.1 * python-base-debugsource-2.7.18-33.74.1 * python-devel-2.7.18-33.74.1 * python-demo-2.7.18-33.74.1 * python-idle-2.7.18-33.74.1 * libpython2_7-1_0-32bit-2.7.18-33.74.1 * python-32bit-2.7.18-33.74.1 * python-curses-debuginfo-2.7.18-33.74.1 * python-tk-debuginfo-2.7.18-33.74.1 * python-debuginfo-32bit-2.7.18-33.74.1 * python-base-debuginfo-2.7.18-33.74.1 * libpython2_7-1_0-2.7.18-33.74.1 * python-tk-2.7.18-33.74.1 * libpython2_7-1_0-debuginfo-2.7.18-33.74.1 * python-2.7.18-33.74.1 * python-xml-2.7.18-33.74.1 * python-debuginfo-2.7.18-33.74.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.74.1 *python-curses-2.7.18-33.74.1 * python-gdbm-2.7.18-33.74.1 * python-base-32bit-2.7.18-33.74.1 * python-base-2.7.18-33.74.1 * python-xml-debuginfo-2.7.18-33.74.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-doc-2.7.18-33.74.1 * python-doc-pdf-2.7.18-33.74.1 ## References: * https://www.suse.com/security/cve/CVE-2025-13462.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-3644.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4519.html * https://bugzilla.suse.com/show_bug.cgi?id=1259611 * https://bugzilla.suse.com/show_bug.cgi?id=1259734 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1260026 . An important update for python on SUSE addresses five security issues, ensuring system stability and security.. SUSE python update security issues important patch instructions. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 17, 2026 •Important SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorySuSEimportant

SUSE Linux 12 SP5 Python 36 Significant Path Traversal C Stack Overflow

An update that solves five vulnerabilities can now be installed.. # Security update for python36 Announcement ID: SUSE-SU-2026:1345-1 Release Date: 2026-04-15T12:04:29Z Rating: important References: * bsc#1259611 * bsc#1259734 * bsc#1259735 * bsc#1259989 * bsc#1260026 Cross-References: * CVE-2025-13462 * CVE-2026-3479 * CVE-2026-3644 * CVE-2026-4224 * CVE-2026-4519 CVSS scores: * CVE-2025-13462 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-13462 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-13462 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3644 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-3644 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4519 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N * CVE-2026-4519 ( SUSE ): 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N * CVE-2026-4519 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for python36 fixes the following issues: * CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). * CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). * CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1345=1 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-1345=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython3_6m1_0-32bit-3.6.15-108.1 * python36-devel-3.6.15-108.1 *python36-debugsource-3.6.15-108.1 * python36-base-3.6.15-108.1 * libpython3_6m1_0-debuginfo-3.6.15-108.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-108.1 * python36-3.6.15-108.1 * python36-debuginfo-3.6.15-108.1 * python36-base-debuginfo-3.6.15-108.1 * libpython3_6m1_0-3.6.15-108.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python36-devel-3.6.15-108.1 * python36-debugsource-3.6.15-108.1 * python36-base-3.6.15-108.1 * libpython3_6m1_0-debuginfo-3.6.15-108.1 * python36-3.6.15-108.1 * python36-debuginfo-3.6.15-108.1 * python36-base-debuginfo-3.6.15-108.1 * libpython3_6m1_0-3.6.15-108.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython3_6m1_0-32bit-3.6.15-108.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-108.1 ## References: * https://www.suse.com/security/cve/CVE-2025-13462.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-3644.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4519.html * https://bugzilla.suse.com/show_bug.cgi?id=1259611 * https://bugzilla.suse.com/show_bug.cgi?id=1259734 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1260026 . SUSE's python36 update addresses five vulnerabilities with an importance rating and patch instructions for installation.. SUSE Linux, python36, security update, vulnerabilities, patch instructions. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 15, 2026 •Important SuSE
Banner 3 1028x280 1708121785 1771599793
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryimportantinput validation

openSUSE Python312 Security Update Highlights Path Traversal Issue

An update that solves five vulnerabilities can now be installed.. # Security update for python312 Announcement ID: SUSE-SU-2026:1292-1 Release Date: 2026-04-13T08:10:53Z Rating: important References: * bsc#1259611 * bsc#1259734 * bsc#1259735 * bsc#1259989 * bsc#1260026 Cross-References: * CVE-2025-13462 * CVE-2026-3479 * CVE-2026-3644 * CVE-2026-4224 * CVE-2026-4519 CVSS scores: * CVE-2025-13462 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-13462 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-13462 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3644 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-3644 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4519 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N * CVE-2026-4519 ( SUSE ): 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N * CVE-2026-4519 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). * CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989). * CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass (bsc#1259734). * CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735). * CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser command line option injection (bsc#1260026). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1292=1 openSUSE-SLE-15.6-2026-1292=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1292=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1292=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) *python312-core-debugsource-3.12.13-150600.3.53.1 * python312-tk-debuginfo-3.12.13-150600.3.53.1 * python312-curses-debuginfo-3.12.13-150600.3.53.1 * python312-tools-3.12.13-150600.3.53.1 * libpython3_12-1_0-debuginfo-3.12.13-150600.3.53.1 * python312-base-3.12.13-150600.3.53.1 * python312-devel-3.12.13-150600.3.53.1 * python312-dbm-debuginfo-3.12.13-150600.3.53.1 * python312-base-debuginfo-3.12.13-150600.3.53.1 * python312-debugsource-3.12.13-150600.3.53.1 * python312-3.12.13-150600.3.53.1 * python312-debuginfo-3.12.13-150600.3.53.1 * python312-dbm-3.12.13-150600.3.53.1 * python312-doc-3.12.13-150600.3.53.1 * python312-testsuite-3.12.13-150600.3.53.1 * python312-testsuite-debuginfo-3.12.13-150600.3.53.1 * python312-idle-3.12.13-150600.3.53.1 * python312-tk-3.12.13-150600.3.53.1 * python312-doc-devhelp-3.12.13-150600.3.53.1 * python312-curses-3.12.13-150600.3.53.1 * libpython3_12-1_0-3.12.13-150600.3.53.1 * openSUSE Leap 15.6 (x86_64) * python312-32bit-debuginfo-3.12.13-150600.3.53.1 * libpython3_12-1_0-32bit-debuginfo-3.12.13-150600.3.53.1 * python312-32bit-3.12.13-150600.3.53.1 * python312-base-32bit-debuginfo-3.12.13-150600.3.53.1 * libpython3_12-1_0-32bit-3.12.13-150600.3.53.1 * python312-base-32bit-3.12.13-150600.3.53.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libpython3_12-1_0-64bit-3.12.13-150600.3.53.1 * python312-base-64bit-3.12.13-150600.3.53.1 * python312-base-64bit-debuginfo-3.12.13-150600.3.53.1 * python312-64bit-debuginfo-3.12.13-150600.3.53.1 * python312-64bit-3.12.13-150600.3.53.1 * libpython3_12-1_0-64bit-debuginfo-3.12.13-150600.3.53.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python312-base-debuginfo-3.12.13-150600.3.53.1 * python312-dbm-debuginfo-3.12.13-150600.3.53.1 * python312-curses-debuginfo-3.12.13-150600.3.53.1 * python312-tools-3.12.13-150600.3.53.1 * python312-idle-3.12.13-150600.3.53.1 *libpython3_12-1_0-debuginfo-3.12.13-150600.3.53.1 * python312-base-3.12.13-150600.3.53.1 * python312-core-debugsource-3.12.13-150600.3.53.1 * python312-tk-3.12.13-150600.3.53.1 * python312-debugsource-3.12.13-150600.3.53.1 * python312-tk-debuginfo-3.12.13-150600.3.53.1 * python312-3.12.13-150600.3.53.1 * python312-dbm-3.12.13-150600.3.53.1 * python312-debuginfo-3.12.13-150600.3.53.1 * python312-devel-3.12.13-150600.3.53.1 * python312-curses-3.12.13-150600.3.53.1 * libpython3_12-1_0-3.12.13-150600.3.53.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python312-base-debuginfo-3.12.13-150600.3.53.1 * python312-dbm-debuginfo-3.12.13-150600.3.53.1 * python312-curses-debuginfo-3.12.13-150600.3.53.1 * python312-tools-3.12.13-150600.3.53.1 * python312-idle-3.12.13-150600.3.53.1 * libpython3_12-1_0-debuginfo-3.12.13-150600.3.53.1 * python312-base-3.12.13-150600.3.53.1 * python312-core-debugsource-3.12.13-150600.3.53.1 * python312-tk-3.12.13-150600.3.53.1 * python312-debugsource-3.12.13-150600.3.53.1 * python312-tk-debuginfo-3.12.13-150600.3.53.1 * python312-3.12.13-150600.3.53.1 * python312-dbm-3.12.13-150600.3.53.1 * python312-debuginfo-3.12.13-150600.3.53.1 * python312-devel-3.12.13-150600.3.53.1 * python312-curses-3.12.13-150600.3.53.1 * libpython3_12-1_0-3.12.13-150600.3.53.1 ## References: * https://www.suse.com/security/cve/CVE-2025-13462.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-3644.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4519.html * https://bugzilla.suse.com/show_bug.cgi?id=1259611 * https://bugzilla.suse.com/show_bug.cgi?id=1259734 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1260026 . Update for python312 fixes fiveissues including path traversal and C stack overflow vulnerabilities in openSUSE.. python312 update, openSUSE security, path traversal, C stack overflow, input validation. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Apr 13, 2026 •Important OpenSUSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics