Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for python-requests ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20926-1 Rating: moderate References: * bsc#1260589 Cross-References: * CVE-2026-25645 CVSS scores: * CVE-2026-25645 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-25645 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for python-requests fixes the following issue: - CVE-2026-25645: `extract_zipped_paths()` uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation (bsc#1260589). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-908=1 Package List: - openSUSE Leap 16.0: python313-requests-2.32.4-160000.3.1 References: * https://www.suse.com/security/cve/CVE-2026-25645.html . An update to address a moderate vulnerability in python-requests, resolving issues with zip extraction security.. openSUSE security, python-requests update, zip file vulnerability. . Severity: moderate. LinuxSecurity.com Team
An update that fixes one vulnerability is now available.. openSUSE Security Update: Security update for python-nltk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0057-1 Rating: important References: #1258436 Cross-References: CVE-2025-14009 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-nltk fixes the following issues: - CVE-2025-14009: Fixed Secure ZIP extraction (boo#1258436) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2026-57=1 Package List: - openSUSE Backports SLE-15-SP6 (noarch): python3-nltk-3.7-bp156.4.6.1 References: https://www.suse.com/security/cve/CVE-2025-14009.html https://bugzilla.suse.com/1258436 . Critical security update for python-nltk on openSUSE 15 SP6 addressing ZIP extraction vulnerability CVE-2025-14009.. python-nltk update, openSUSE security, python library patch, CVE-2025-14009. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.