SUSE-SU-2026:23159-1
Vulnerability from csaf_suse - Published: 2026-08-19 12:32 - Updated: 2026-09-16 20:12Summary
Security update for python313
Severity
Important
Notes
Title of the patch: Security update for python313
Description of the patch: This update for python313 fixes the following issues:
- CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044).
- CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041).
- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the
`configparser` module is used (bsc#1269066).
- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting
hardlinks (bsc#1269959).
- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).
- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and
enables arbitrary file reads and writes (bsc#1268977).
- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS
(bsc#1269788).
- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations
(bsc#1271192).
Patchnames: SUSE-SL-Micro-6.2-1465
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.7 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.7 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
important
7.5 (High)
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
important
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
low
5.3 (Medium)
Affected products
Recommended
16 products, the same list as for
CVE-2025-15366
Threats
Impact
moderate
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for python313",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for python313 fixes the following issues:\n\n- CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044).\n- CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041).\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n `configparser` module is used (bsc#1269066).\n- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting\n hardlinks (bsc#1269959).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and\n enables arbitrary file reads and writes (bsc#1268977).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n (bsc#1271192).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SL-Micro-6.2-1465",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23159-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:23159-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623159-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:23159-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028426.html"
},
{
"category": "self",
"summary": "SUSE Bug 1257041",
"url": "https://bugzilla.suse.com/1257041"
},
{
"category": "self",
"summary": "SUSE Bug 1257044",
"url": "https://bugzilla.suse.com/1257044"
},
{
"category": "self",
"summary": "SUSE Bug 1265268",
"url": "https://bugzilla.suse.com/1265268"
},
{
"category": "self",
"summary": "SUSE Bug 1268977",
"url": "https://bugzilla.suse.com/1268977"
},
{
"category": "self",
"summary": "SUSE Bug 1269066",
"url": "https://bugzilla.suse.com/1269066"
},
{
"category": "self",
"summary": "SUSE Bug 1269788",
"url": "https://bugzilla.suse.com/1269788"
},
{
"category": "self",
"summary": "SUSE Bug 1269959",
"url": "https://bugzilla.suse.com/1269959"
},
{
"category": "self",
"summary": "SUSE Bug 1271192",
"url": "https://bugzilla.suse.com/1271192"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-15366 page",
"url": "https://www.suse.com/security/cve/CVE-2025-15366/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-15367 page",
"url": "https://www.suse.com/security/cve/CVE-2025-15367/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-0864 page",
"url": "https://www.suse.com/security/cve/CVE-2026-0864/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11940 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11940/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11972 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11972/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15308 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15308/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4360 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4360/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8328 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8328/"
}
],
"title": "Security update for python313",
"tracking": {
"current_release_date": "2026-09-16T20:12:08Z",
"generator": {
"date": "2026-08-19T12:32:54Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:23159-1",
"initial_release_date": "2026-08-19T12:32:54Z",
"revision_history": [
{
"date": "2026-08-19T12:32:54Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T19:24:15Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:12:08Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"product": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"product_id": "libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_13-1_0@3.13.14-160000.2.1?arch=aarch64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-3.13.14-160000.2.1.aarch64",
"product": {
"name": "python313-3.13.14-160000.2.1.aarch64",
"product_id": "python313-3.13.14-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313@3.13.14-160000.2.1?arch=aarch64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-base-3.13.14-160000.2.1.aarch64",
"product": {
"name": "python313-base-3.13.14-160000.2.1.aarch64",
"product_id": "python313-base-3.13.14-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-base@3.13.14-160000.2.1?arch=aarch64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-curses-3.13.14-160000.2.1.aarch64",
"product": {
"name": "python313-curses-3.13.14-160000.2.1.aarch64",
"product_id": "python313-curses-3.13.14-160000.2.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-curses@3.13.14-160000.2.1?arch=aarch64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"product": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"product_id": "libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_13-1_0@3.13.14-160000.2.1?arch=ppc64le\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-3.13.14-160000.2.1.ppc64le",
"product": {
"name": "python313-3.13.14-160000.2.1.ppc64le",
"product_id": "python313-3.13.14-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313@3.13.14-160000.2.1?arch=ppc64le\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-base-3.13.14-160000.2.1.ppc64le",
"product": {
"name": "python313-base-3.13.14-160000.2.1.ppc64le",
"product_id": "python313-base-3.13.14-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-base@3.13.14-160000.2.1?arch=ppc64le\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-curses-3.13.14-160000.2.1.ppc64le",
"product": {
"name": "python313-curses-3.13.14-160000.2.1.ppc64le",
"product_id": "python313-curses-3.13.14-160000.2.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-curses@3.13.14-160000.2.1?arch=ppc64le\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"product": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"product_id": "libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_13-1_0@3.13.14-160000.2.1?arch=s390x\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-3.13.14-160000.2.1.s390x",
"product": {
"name": "python313-3.13.14-160000.2.1.s390x",
"product_id": "python313-3.13.14-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313@3.13.14-160000.2.1?arch=s390x\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-base-3.13.14-160000.2.1.s390x",
"product": {
"name": "python313-base-3.13.14-160000.2.1.s390x",
"product_id": "python313-base-3.13.14-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-base@3.13.14-160000.2.1?arch=s390x\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-curses-3.13.14-160000.2.1.s390x",
"product": {
"name": "python313-curses-3.13.14-160000.2.1.s390x",
"product_id": "python313-curses-3.13.14-160000.2.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-curses@3.13.14-160000.2.1?arch=s390x\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"product": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"product_id": "libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libpython3_13-1_0@3.13.14-160000.2.1?arch=x86_64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-3.13.14-160000.2.1.x86_64",
"product": {
"name": "python313-3.13.14-160000.2.1.x86_64",
"product_id": "python313-3.13.14-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313@3.13.14-160000.2.1?arch=x86_64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-base-3.13.14-160000.2.1.x86_64",
"product": {
"name": "python313-base-3.13.14-160000.2.1.x86_64",
"product_id": "python313-base-3.13.14-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-base@3.13.14-160000.2.1?arch=x86_64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python313-curses-3.13.14-160000.2.1.x86_64",
"product": {
"name": "python313-curses-3.13.14-160000.2.1.x86_64",
"product_id": "python313-curses-3.13.14-160000.2.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:python_software_foundation:cpython:3.13.14:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/python313-curses@3.13.14-160000.2.1?arch=x86_64\u0026upstream=python313-3.13.14-160000.2.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.2",
"product": {
"name": "SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64"
},
"product_reference": "libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le"
},
"product_reference": "libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x"
},
"product_reference": "libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libpython3_13-1_0-3.13.14-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64"
},
"product_reference": "libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-3.13.14-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64"
},
"product_reference": "python313-3.13.14-160000.2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-3.13.14-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le"
},
"product_reference": "python313-3.13.14-160000.2.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-3.13.14-160000.2.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x"
},
"product_reference": "python313-3.13.14-160000.2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-3.13.14-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64"
},
"product_reference": "python313-3.13.14-160000.2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-base-3.13.14-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64"
},
"product_reference": "python313-base-3.13.14-160000.2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-base-3.13.14-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le"
},
"product_reference": "python313-base-3.13.14-160000.2.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-base-3.13.14-160000.2.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x"
},
"product_reference": "python313-base-3.13.14-160000.2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-base-3.13.14-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64"
},
"product_reference": "python313-base-3.13.14-160000.2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-curses-3.13.14-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64"
},
"product_reference": "python313-curses-3.13.14-160000.2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-curses-3.13.14-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le"
},
"product_reference": "python313-curses-3.13.14-160000.2.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-curses-3.13.14-160000.2.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x"
},
"product_reference": "python313-curses-3.13.14-160000.2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python313-curses-3.13.14-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
},
"product_reference": "python313-curses-3.13.14-160000.2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-15366",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-15366"
}
],
"notes": [
{
"category": "general",
"text": "The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-15366",
"url": "https://www.suse.com/security/cve/CVE-2025-15366"
},
{
"category": "external",
"summary": "SUSE Bug 1257044 for CVE-2025-15366",
"url": "https://bugzilla.suse.com/1257044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "moderate"
}
],
"title": "CVE-2025-15366"
},
{
"cve": "CVE-2025-15367",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-15367"
}
],
"notes": [
{
"category": "general",
"text": "The poplib module, when passed a user-controlled command, can have\nadditional commands injected using newlines. Mitigation rejects commands\ncontaining control characters.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-15367",
"url": "https://www.suse.com/security/cve/CVE-2025-15367"
},
{
"category": "external",
"summary": "SUSE Bug 1257041 for CVE-2025-15367",
"url": "https://bugzilla.suse.com/1257041"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "moderate"
}
],
"title": "CVE-2025-15367"
},
{
"cve": "CVE-2026-0864",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-0864"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-0864",
"url": "https://www.suse.com/security/cve/CVE-2026-0864"
},
{
"category": "external",
"summary": "SUSE Bug 1269066 for CVE-2026-0864",
"url": "https://bugzilla.suse.com/1269066"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "important"
}
],
"title": "CVE-2026-0864"
},
{
"cve": "CVE-2026-11940",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11940"
}
],
"notes": [
{
"category": "general",
"text": "tarfile.extractall() with the \u0027data\u0027 or \u0027tar\u0027\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself. \nThe extraction fallback validated the symlink at it\u0027s archived location \nbut recreated it at the hardlink\u0027s shallower\npath, letting a relative\n target the filter judged contained escape the destination directory. \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11940",
"url": "https://www.suse.com/security/cve/CVE-2026-11940"
},
{
"category": "external",
"summary": "SUSE Bug 1268977 for CVE-2026-11940",
"url": "https://bugzilla.suse.com/1268977"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "important"
}
],
"title": "CVE-2026-11940"
},
{
"cve": "CVE-2026-11972",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11972"
}
],
"notes": [
{
"category": "general",
"text": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11972",
"url": "https://www.suse.com/security/cve/CVE-2026-11972"
},
{
"category": "external",
"summary": "SUSE Bug 1269788 for CVE-2026-11972",
"url": "https://bugzilla.suse.com/1269788"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "important"
}
],
"title": "CVE-2026-11972"
},
{
"cve": "CVE-2026-15308",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15308"
}
],
"notes": [
{
"category": "general",
"text": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15308",
"url": "https://www.suse.com/security/cve/CVE-2026-15308"
},
{
"category": "external",
"summary": "SUSE Bug 1271192 for CVE-2026-15308",
"url": "https://bugzilla.suse.com/1271192"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "important"
}
],
"title": "CVE-2026-15308"
},
{
"cve": "CVE-2026-4360",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4360"
}
],
"notes": [
{
"category": "general",
"text": "In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter=\u0027data\u0027 to the extract() function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4360",
"url": "https://www.suse.com/security/cve/CVE-2026-4360"
},
{
"category": "external",
"summary": "SUSE Bug 1269959 for CVE-2026-4360",
"url": "https://bugzilla.suse.com/1269959"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "low"
}
],
"title": "CVE-2026-4360"
},
{
"cve": "CVE-2026-8328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8328"
}
],
"notes": [
{
"category": "general",
"text": "The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8328",
"url": "https://www.suse.com/security/cve/CVE-2026-8328"
},
{
"category": "external",
"summary": "SUSE Bug 1265268 for CVE-2026-8328",
"url": "https://bugzilla.suse.com/1265268"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:libpython3_13-1_0-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-base-3.13.14-160000.2.1.x86_64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.aarch64",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.ppc64le",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.s390x",
"SUSE Linux Micro 6.2:python313-curses-3.13.14-160000.2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-19T12:32:54Z",
"details": "moderate"
}
],
"title": "CVE-2026-8328"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…