Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 615
Alerts This Week
Warning Icon 1 615

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 python-pillow Critical Denial of Service CVEs 2026-fc2ded926e

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H900
Fedora

Fedora 43 libseccomp Critical Security Fixes 2026-9afc6b6bb3

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 dnsx Update Addresses Critical DoS Cross-Site Scripting Issues

Calendar White Jul 20, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 OpenSSH Significant Update for Remote File Misplacement Issue

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 freerdp Important Update Notification 2026-fa672d26a8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 LibTIFF Critical Security Update for Arbitrary Code Execution

Calendar White Jul 20, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 mingw-python-idna Critical DoS Risk Update 2026-9dbf4d0ca8

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 mingw-python-pip Critical Path Traversal Risk Advisory

Calendar White Jul 20, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 c-ares Critical Use-After-Free Bug Fix FEDORA-2026-d70d93fcd7

Calendar White Jul 20, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 2 articles for you...
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE python3-lxml Moderate Info Disclosure Vulnerability 2026-2752-1

An update that solves one vulnerability can now be installed.. # Security update for python3-lxml Announcement ID: SUSE-SU-2026:2752-1 Release Date: 2026-07-03T19:19:50Z Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python3-lxml fixes the following issue * CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2752=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python3-lxml-3.6.1-3.9.1 * python3-lxml-debuginfo-3.6.1-3.9.1 * python3-lxml-debugsource-3.6.1-3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41066.html * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . Essential security update for python3-lxml addresses information disclosure. Quick patch recommended for SUSE systems.. python3-lxml, SUSE advisory, information disclosure, security patch. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •moderate SuSE
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisoryimportantinformation disclosure

openSUSE 15.5 python3-lxml Critical Data Exposure Flaw 2026-2754-1

An update that solves one vulnerability can now be installed.. # Security update for python3-lxml Announcement ID: SUSE-SU-2026:2754-1 Release Date: 2026-07-03T19:22:12Z Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python3-lxml fixes the following issue * CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2754=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2754=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-2754=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-lxml-devel-4.9.1-150500.3.7.1 * python3-lxml-debuginfo-4.9.1-150500.3.7.1 * python3-lxml-debugsource-4.9.1-150500.3.7.1 * python3-lxml-4.9.1-150500.3.7.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * python3-lxml-devel-4.9.1-150500.3.7.1 * python3-lxml-debuginfo-4.9.1-150500.3.7.1 * python3-lxml-debugsource-4.9.1-150500.3.7.1 *python3-lxml-4.9.1-150500.3.7.1 * openSUSE Leap 15.5 (noarch) * python3-lxml-doc-4.9.1-150500.3.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-lxml-debuginfo-4.9.1-150500.3.7.1 * python3-lxml-debugsource-4.9.1-150500.3.7.1 * python3-lxml-4.9.1-150500.3.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41066.html * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . # Security update for python3-lxml Announcement ID: SUSE-SU-2026:2754-1 Release Date: 2026-07-03T19:. update, solves, vulnerability, installed, security, python3-lxml. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •Important OpenSUSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Python3-lxml Moderate Information Disclosure Vuln 2026-2754-1

An update that solves one vulnerability can now be installed.. # Security update for python3-lxml Announcement ID: SUSE-SU-2026:2754-1 Release Date: 2026-07-03T19:22:12Z Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python3-lxml fixes the following issue * CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2754=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2754=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-2754=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-lxml-devel-4.9.1-150500.3.7.1 * python3-lxml-debuginfo-4.9.1-150500.3.7.1 * python3-lxml-debugsource-4.9.1-150500.3.7.1 * python3-lxml-4.9.1-150500.3.7.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * python3-lxml-devel-4.9.1-150500.3.7.1 * python3-lxml-debuginfo-4.9.1-150500.3.7.1 * python3-lxml-debugsource-4.9.1-150500.3.7.1 *python3-lxml-4.9.1-150500.3.7.1 * openSUSE Leap 15.5 (noarch) * python3-lxml-doc-4.9.1-150500.3.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-lxml-debuginfo-4.9.1-150500.3.7.1 * python3-lxml-debugsource-4.9.1-150500.3.7.1 * python3-lxml-4.9.1-150500.3.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41066.html * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . A SUSE security update addressing an information disclosure flaw in python3-lxml enhances system protection.. SUSE Linux, python3-lxml, information disclosure, security fix, local file read. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 06, 2026 •moderate SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE Python-Lxml Moderate Local File Read Threat Update 2026-2728-1

An update that solves one vulnerability can now be installed.. # Security update for python-lxml Announcement ID: SUSE-SU-2026:2728-1 Release Date: 2026-07-02T17:30:54Z Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python-lxml fixes the following issue * CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2728=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python-lxml-debugsource-3.6.1-8.8.1 * python-lxml-debuginfo-3.6.1-8.8.1 * python-lxml-3.6.1-8.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41066.html * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . Update for python-lxml addresses information disclosure risk due to untrusted XML input. Install to secure systems effectively.. python-lxml update,SUSE Enterprise Server,security patch information,linux software vulnerabilities. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jul 03, 2026 •moderate SuSE
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateSuSE

SUSE python-lxml Moderate Info Disclosure Vuln 2026-2488-1

An update that solves one vulnerability can now be installed.. # Security update for python-lxml Announcement ID: SUSE-SU-2026:2488-1 Release Date: 2026-06-22T12:16:12Z Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for python-lxml fixes the following issue * CVE-2026-41066: information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2488=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2488=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2488=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2488=1 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-lxml-debuginfo-4.7.1-150200.3.15.1 * python3-lxml-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * python-lxml-debugsource-4.7.1-150200.3.15.1 * python-lxml-debuginfo-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-lxml-debuginfo-4.7.1-150200.3.15.1 *python3-lxml-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * python-lxml-debugsource-4.7.1-150200.3.15.1 * python-lxml-debuginfo-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-lxml-4.7.1-150200.3.15.1 * python3-lxml-debuginfo-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * python-lxml-debugsource-4.7.1-150200.3.15.1 * python-lxml-debuginfo-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-lxml-4.7.1-150200.3.15.1 * python3-lxml-debuginfo-4.7.1-150200.3.15.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * python-lxml-debugsource-4.7.1-150200.3.15.1 * python-lxml-debuginfo-4.7.1-150200.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41066.html * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . SUSE updates python-lxml to fix information disclosure issues in Micro versions, emphasizing security and patching.. SUSE Linux Micro Update, python-lxml Security Patch, Information Disclosure Risk, Local File Read Vulnerability. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 Jun 22, 2026 •moderate SuSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateinformation disclosure

SUSE Linux Micro python-lxml Moderate Info Disclosure CVE-2026-41066

An update that solves one vulnerability can now be installed.. # Security update for python-lxml Announcement ID: SUSE-SU-2026:21731-1 Release Date: 2026-05-18T08:59:28Z Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for python-lxml fixes the following issue * CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-531=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * python311-lxml-debuginfo-4.9.3-slfo.1.1_2.1 * python-lxml-debugsource-4.9.3-slfo.1.1_2.1 * python311-lxml-4.9.3-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41066.html * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . Update available for python-lxml addressing information disclosure issue on SUSE Linux Micro 6.1. Install to ensure security.. python-lxml update,SUSE Linux Micro,security advisory,information disclosure,local file read. . Severity: moderate. LinuxSecurity.com Team

Calendar%202 May 22, 2026 •moderate SuSE
Banner 4 1028x280 1708121825 1771600306
202
Ls Advisories Opensuse Esm H240
Price Tag%201security advisorymoderateinformation disclosure

openSUSE Leap 16.0 python-lxml Moderate Info Disclosure CVE-2026-41066

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for python-lxml ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20737-1 Rating: moderate References: * bsc#1263254 Cross-References: * CVE-2026-41066 CVSS scores: * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( SUSE ): 6 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for python-lxml fixes the following issue - CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-728=1 Package List: - openSUSE Leap 16.0: python-lxml-doc-5.4.0-160000.3.1 python313-lxml-5.4.0-160000.3.1 python313-lxml-devel-5.4.0-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-41066.html . An update for openSUSE fixes a moderate severity issue in python-lxml regarding information disclosure via untrusted XML input.. python-lxml security update, openSUSE vulnerability fix, information disclosure, moderate severity patch. . LinuxSecurity.com Team

Calendar%202 May 19, 2026 OpenSUSE
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateinformation disclosure

SUSE Linux Micro 6.0 python-pyOpenSSL Moderate Info Disclosure 2026-21617-1

An update that solves two vulnerabilities can now be installed.. # Security update for python-pyOpenSSL Announcement ID: SUSE-SU-2026:21617-1 Release Date: 2026-05-09T15:44:10Z Rating: moderate References: * bsc#1262803 * bsc#1263254 Cross-References: * CVE-2026-40475 * CVE-2026-41066 CVSS scores: * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Security update for python-pyOpenSSL ### Description: This update for python-pyOpenSSL fixes the following issue ## Security update for python-lxml ### Description: This update for python-lxml fixes the following issue * CVE-2026-41066: Information disclosure via untrusted XML input leading to local file read (bsc#1263254). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-700=1 * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-520=1 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * python-lxml-debugsource-4.9.3-2.1 * python311-lxml-4.9.3-2.1 * python311-lxml-debuginfo-4.9.3-2.1 * SUSE Linux Micro 6.1 (noarch) * python311-pyOpenSSL-24.0.0-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html *https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 . An update addresses information disclosure issues in python-pyOpenSSL for SUSE Linux Micro. Upgrade recommended.. python-pyOpenSSL, SUSE Linux Micro, information disclosure, local file read. . LinuxSecurity.com Team

Calendar%202 May 15, 2026 SuSE
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":0,"type":"x","order":4,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics