SUSE-SU-2026:23743-1

Vulnerability from csaf_suse - Published: 2026-09-16 09:45 - Updated: 2026-09-27 14:25
Summary
Security update for python311
Severity
Important
Notes
Title of the patch: Security update for python311
Description of the patch: This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240). - CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). - CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734). - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). - CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). - CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026). - CVE-2026-4786: Incomplete mitigation of %action expansion for command injection to webbrowser.open() (bsc#1262319). - CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules (bsc#1262098). - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). - CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). - CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). - CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). Changes for python311: - Update to 3.11.16: - Build - gh-153438: Update Windows build and installer tooling and documentation to use the current download URL for nuget.exe. - Library - gh-109638: Fix exponential time in csv.Sniffer.sniff() for a sample which contains many quote characters. A doubled quote character is now also detected in a field which contains the delimiter or a line break. - gh-98820: Fix quadratic time in csv.Sniffer.sniff() for a sample which contains quoted fields, in particular for a single column of quoted fields. - gh-149231: In tomllib, the number of parts in TOML keys is now limited. - gh-146083: Update bundled libexpat to version 2.7.5. - gh-141707: Don't change tarfile.TarInfo type from AREGTYPE to DIRTYPE when parsing GNU long name or link headers (bsc#1259611, CVE-2025-13462). - gh-90949: Add SetBillionLaughsAttackProtectionActivationThreshold() and SetBillionLaughsAttackProtectionMaximumAmplification() to xmlparser objects to tune protections against billion laughs attacks. Patch by Bndikt Tran. - gh-100372: ssl.SSLContext.load_verify_locations() no longer incorrectly accepts some cases of trailing data when parsing DER. - Security - gh-155558: Update bundled libexpat to version 2.8.3 for the fix to CVE-2026-72522. - gh-153030: Fixed quadratic complexity in incremental parsing of long unterminated constructs (such as tags or comments) in html.parser.HTMLParser, which could be exploited for a denial of service (bsc#1271192, CVE-2026-15308). - gh-152674: The xml.etree.ElementTree.Element methods findall(), iterfind() and find() avoid quadratic behavior when using XPath index predicates ([1], [last()], [last()-N]) on XML documents with many same-tag siblings. - gh-152216: Update bundled libexpat to version 2.8.2. - gh-151987: The tarfile.TarFile.extract() method now applies the given filter when it extracts a link target from the archive as a fallback (bsc#1269959, CVE-2026-4360). - gh-151981: In tarfile, seeking a stream now stops when end of the stream is reached (bsc#1269788, CVE-2026-11972). - gh-151544: Modules/Setup.local is no longer used as a landmark to discover whether Python is running in a source tree, as it could potentially affect actual installs. The pybuilddir.txt file is now the sole indicator of running in a source tree. - gh-151558: Fixed an vulnerability in the tarfile data and tar extraction filters where crafted archives could create a symlink pointing outside the destination directory. This was a bypass of CVE-2025-4330 (bsc#1268977, CVE-2026-11940). - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error. The decompressor now becomes unusable after libbz2 reports an error (bsc#1267974, CVE-2026-9669). - gh-150743: http.client now limits the number of chunked-response trailer lines it will read to 100, and the number of interim (1xx) responses it will skip to 100. A malicious or broken server could previously stream trailer lines or 100 Continue responses forever, hanging the client even when a socket timeout was in use. Reported by @YLChen-007 via GHSA-w4q2-g22w-6fr4. - gh-149698: Update bundled libexpat to version 2.8.1 for the fix for CVE-2026-45186. - gh-87451: The ftplib module's undocumented ftpcp function no longer trusts the IPv4 address value returned from the source server in response to the PASV command by default, completing the fix for CVE-2021-4189. As with ftplib.FTP, the former behavior can be re-enabled by setting the trust_server_pasv_ipv4_address attribute on the source ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape AI for the report (bsc#1265268, CVE-2026-8328). - gh-149486: tarfile.data_filter() now validates link targets using the same normalised value that is written to disk, strips trailing separators from the member name when resolving a symlink's directory, and rejects link members that would replace the destination directory itself. This closes several path-traversal bypasses of the data extraction filter (bsc#1267821, CVE-2026-7774). - gh-149079: Fix a potential denial of service in unicodedata.normalize(). The canonical ordering step of Unicode normalization used a quadratic-time insertion sort for reordering combining characters, which could be exploited with crafted input containing many combining characters in non-canonical order. Replaced with a linear-time counting sort for long runs (bsc#1267581, CVE-2026-3276). - gh-149018: Improved protection against XML hash-flooding attacks in xml.parsers.expat and xml.etree.ElementTree when Python is compiled with libExpat 2.8.0 or later (bsc#1264962, CVE-2026-7210). - gh-149017: Update bundled libexpat to version 2.8.0. - gh-148808: Added buffer boundary check when using nbytes parameter with asyncio.AbstractEventLoop.sock_recvfrom_into(). Only relevant for Windows and the asyncio.ProactorEventLoop. - gh-148395: Fix a dangling input pointer in lzma.LZMADecompressor, and bz2.BZ2Decompressor when memory allocation fails with MemoryError, which could let a subsequent decompress() call read or write through a stale pointer to the already-released caller buffer (bsc#1262098, CVE-2026-6100). - gh-148169: A bypass in webbrowser allowed URLs prefixed with %action to pass the dash-prefix safety check (bsc#1262319, CVE-2026-4786). - gh-146581: Fix vulnerability in shutil.unpack_archive() for ZIP files on Windows which allowed to write files outside of the destination tree if the patch in the archive contains a Windows drive prefix. Now such invalid paths will be skipped. Files containing ".." in the name (like "foo..bar") are no longer skipped. - gh-146333: Fix quadratic backtracking in configparser.RawConfigParser option parsing regexes (OPTCRE and OPTCRE_NV). A crafted configuration line with many whitespace characters could cause excessive CPU usage. - gh-146211: Reject CR/LF characters in tunnel request headers for the HTTPConnection.set_tunnel() method (bsc#1261969, CVE-2026-1502). - gh-145986: xml.parsers.expat: Fixed a crash caused by unbounded C recursion when converting deeply nested XML content models with ElementDeclHandler(). This addresses CVE-2026-4224 (bsc#1259735, CVE-2026-4224). - gh-145599: Reject control characters in http.cookies.Morsel update() and js_output(). This addresses CVE-2026-3644 (bsc#1259734, CVE-2026-3644). - gh-145506: Fixes CVE-2026-2297 by ensuring that SourcelessFileLoader uses io.open_code() when opening .pyc files (bsc#1259240, CVE-2026-2297). - gh-144370: Disallow usage of control characters in status in wsgiref.handlers to prevent HTTP header injections. Patch by Benedikt Johannes. - gh-143930: Reject leading dashes in URLs passed to webbrowser.open() (bsc#1260026, CVE-2026-4519). - gh-143927: Normalize all line endings (CR, CRLF, and LF) to LF+TAB when writing multi-line configparser values (bsc#1269066, CVE-2026-0864). - Tests - gh-149776: Fix test_socket on Linux kernel 7.1 and newer: skip UDP Lite tests if it's not supported. Patch by Victor Stinner.
Patchnames: SUSE-SLE-Micro-6.1-733
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2021-4189
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2025-13462
2.5 (Low)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact low
CVE-2025-4330
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-0864
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-11940
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-11972
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-1502
4.9 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-15308
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-15806
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-17084
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-2297
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-3276
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-3644
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-4224
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-4360
2.5 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact low
CVE-2026-45186
2.9 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact low
CVE-2026-4519
6.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-4786
7.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-6100
8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-7210
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-72522
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-7774
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact important
CVE-2026-8328
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
CVE-2026-9669
4.7 (Medium)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 16 products, the same list as for CVE-2021-4189
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1259240 self
https://bugzilla.suse.com/1259611 self
https://bugzilla.suse.com/1259734 self
https://bugzilla.suse.com/1259735 self
https://bugzilla.suse.com/1260026 self
https://bugzilla.suse.com/1261969 self
https://bugzilla.suse.com/1262098 self
https://bugzilla.suse.com/1262319 self
https://bugzilla.suse.com/1264962 self
https://bugzilla.suse.com/1265268 self
https://bugzilla.suse.com/1267581 self
https://bugzilla.suse.com/1267821 self
https://bugzilla.suse.com/1267974 self
https://bugzilla.suse.com/1268977 self
https://bugzilla.suse.com/1269066 self
https://bugzilla.suse.com/1269788 self
https://bugzilla.suse.com/1269959 self
https://bugzilla.suse.com/1271192 self
https://bugzilla.suse.com/1276223 self
https://bugzilla.suse.com/1276226 self
https://www.suse.com/security/cve/CVE-2021-4189/ self
https://www.suse.com/security/cve/CVE-2025-13462/ self
https://www.suse.com/security/cve/CVE-2025-4330/ self
https://www.suse.com/security/cve/CVE-2026-0864/ self
https://www.suse.com/security/cve/CVE-2026-11940/ self
https://www.suse.com/security/cve/CVE-2026-11972/ self
https://www.suse.com/security/cve/CVE-2026-1502/ self
https://www.suse.com/security/cve/CVE-2026-15308/ self
https://www.suse.com/security/cve/CVE-2026-15806/ self
https://www.suse.com/security/cve/CVE-2026-17084/ self
https://www.suse.com/security/cve/CVE-2026-2297/ self
https://www.suse.com/security/cve/CVE-2026-3276/ self
https://www.suse.com/security/cve/CVE-2026-3644/ self
https://www.suse.com/security/cve/CVE-2026-4224/ self
https://www.suse.com/security/cve/CVE-2026-4360/ self
https://www.suse.com/security/cve/CVE-2026-45186/ self
https://www.suse.com/security/cve/CVE-2026-4519/ self
https://www.suse.com/security/cve/CVE-2026-4786/ self
https://www.suse.com/security/cve/CVE-2026-6100/ self
https://www.suse.com/security/cve/CVE-2026-7210/ self
https://www.suse.com/security/cve/CVE-2026-72522/ self
https://www.suse.com/security/cve/CVE-2026-7774/ self
https://www.suse.com/security/cve/CVE-2026-8328/ self
https://www.suse.com/security/cve/CVE-2026-9669/ self
https://www.suse.com/security/cve/CVE-2021-4189 external
https://bugzilla.suse.com/1194146 external
https://bugzilla.suse.com/1265268 external
https://www.suse.com/security/cve/CVE-2025-13462 external
https://bugzilla.suse.com/1259611 external
https://www.suse.com/security/cve/CVE-2025-4330 external
https://bugzilla.suse.com/1244060 external
https://bugzilla.suse.com/1268977 external
https://www.suse.com/security/cve/CVE-2026-0864 external
https://bugzilla.suse.com/1269066 external
https://www.suse.com/security/cve/CVE-2026-11940 external
https://bugzilla.suse.com/1268977 external
https://www.suse.com/security/cve/CVE-2026-11972 external
https://bugzilla.suse.com/1269788 external
https://www.suse.com/security/cve/CVE-2026-1502 external
https://bugzilla.suse.com/1261969 external
https://www.suse.com/security/cve/CVE-2026-15308 external
https://bugzilla.suse.com/1271192 external
https://www.suse.com/security/cve/CVE-2026-15806 external
https://bugzilla.suse.com/1276223 external
https://www.suse.com/security/cve/CVE-2026-17084 external
https://bugzilla.suse.com/1276226 external
https://www.suse.com/security/cve/CVE-2026-2297 external
https://bugzilla.suse.com/1259240 external
https://www.suse.com/security/cve/CVE-2026-3276 external
https://bugzilla.suse.com/1267581 external
https://www.suse.com/security/cve/CVE-2026-3644 external
https://bugzilla.suse.com/1259734 external
https://www.suse.com/security/cve/CVE-2026-4224 external
https://bugzilla.suse.com/1259735 external
https://www.suse.com/security/cve/CVE-2026-4360 external
https://bugzilla.suse.com/1269959 external
https://www.suse.com/security/cve/CVE-2026-45186 external
https://bugzilla.suse.com/1264713 external
https://www.suse.com/security/cve/CVE-2026-4519 external
https://bugzilla.suse.com/1260026 external
https://bugzilla.suse.com/1262319 external
https://www.suse.com/security/cve/CVE-2026-4786 external
https://bugzilla.suse.com/1260026 external
https://bugzilla.suse.com/1262319 external
https://www.suse.com/security/cve/CVE-2026-6100 external
https://bugzilla.suse.com/1262098 external
https://www.suse.com/security/cve/CVE-2026-7210 external
https://bugzilla.suse.com/1264962 external
https://www.suse.com/security/cve/CVE-2026-72522 external
https://bugzilla.suse.com/1275593 external
https://www.suse.com/security/cve/CVE-2026-7774 external
https://bugzilla.suse.com/1267821 external
https://www.suse.com/security/cve/CVE-2026-8328 external
https://bugzilla.suse.com/1265268 external
https://www.suse.com/security/cve/CVE-2026-9669 external
https://bugzilla.suse.com/1267974 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for python311",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for python311 fixes the following issues:\n\n- CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611).\n- CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the\n  `configparser` module is used (bsc#1269066).\n- CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969).\n- CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240).\n- CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted\n  Unicode input (bsc#1267581).\n- CVE-2026-3644: incomplete control character validation in http.cookies (bsc#1259734).\n- CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735).\n- CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting\n  hardlinks (bsc#1269959).\n- CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command\n  line option injection (bsc#1260026).\n- CVE-2026-4786: Incomplete mitigation of %action expansion for command injection to webbrowser.open() (bsc#1262319).\n- CVE-2026-6100: Arbitrary code execution or information disclosure via use-after-free in decompression modules\n  (bsc#1262098).\n- CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding\n  protection (bsc#1264962).\n- CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory\n  (bsc#1267821).\n- CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268).\n- CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974).\n- CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and\n  enables arbitrary file reads and writes (bsc#1268977).\n- CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS\n  (bsc#1269788).\n- CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations\n  (bsc#1271192).\n- CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another\n  scheme (bsc#1276223).\n- CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226).\n\nChanges for python311:\n\n- Update to 3.11.16:\n - Build\n - gh-153438: Update Windows build and installer tooling and\n documentation to use the current download URL for\n nuget.exe.\n - Library\n - gh-109638: Fix exponential time in csv.Sniffer.sniff() for\n a sample which contains many quote characters. A doubled\n quote character is now also detected in a field which\n contains the delimiter or a line break.\n - gh-98820: Fix quadratic time in csv.Sniffer.sniff() for\n a sample which contains quoted fields, in particular for\n a single column of quoted fields.\n - gh-149231: In tomllib, the number of parts in TOML keys is\n now limited.\n - gh-146083: Update bundled libexpat to version 2.7.5.\n - gh-141707: Don\u0027t change tarfile.TarInfo type from AREGTYPE\n to DIRTYPE when parsing GNU long name or link headers\n (bsc#1259611, CVE-2025-13462).\n - gh-90949: Add\n SetBillionLaughsAttackProtectionActivationThreshold() and\n SetBillionLaughsAttackProtectionMaximumAmplification() to\n xmlparser objects to tune protections against billion\n laughs attacks. Patch by Bndikt Tran.\n - gh-100372: ssl.SSLContext.load_verify_locations() no longer\n incorrectly accepts some cases of trailing data when\n parsing DER.\n - Security\n - gh-155558: Update bundled libexpat to version 2.8.3 for the\n fix to CVE-2026-72522.\n - gh-153030: Fixed quadratic complexity in incremental\n parsing of long unterminated constructs (such as tags or\n comments) in html.parser.HTMLParser, which could be\n exploited for a denial of service (bsc#1271192,\n CVE-2026-15308).\n - gh-152674: The xml.etree.ElementTree.Element methods\n findall(), iterfind() and find() avoid quadratic behavior\n when using XPath index predicates ([1], [last()],\n [last()-N]) on XML documents with many same-tag siblings.\n - gh-152216: Update bundled libexpat to version 2.8.2.\n - gh-151987: The tarfile.TarFile.extract() method now applies\n the given filter when it extracts a link target from the\n archive as a fallback (bsc#1269959, CVE-2026-4360).\n - gh-151981: In tarfile, seeking a stream now stops when end\n of the stream is reached (bsc#1269788, CVE-2026-11972).\n - gh-151544: Modules/Setup.local is no longer used as\n a landmark to discover whether Python is running in\n a source tree, as it could potentially affect actual\n installs. The pybuilddir.txt file is now the sole indicator\n of running in a source tree.\n - gh-151558: Fixed an vulnerability in the tarfile data and\n tar extraction filters where crafted archives could create\n a symlink pointing outside the destination directory. This\n was a bypass of CVE-2025-4330 (bsc#1268977,\n CVE-2026-11940).\n - gh-150599: Fix a possible stack buffer overflow in bz2 when\n a bz2.BZ2Decompressor is reused after a decompression\n error. The decompressor now becomes unusable after libbz2\n reports an error (bsc#1267974, CVE-2026-9669).\n - gh-150743: http.client now limits the number of\n chunked-response trailer lines it will read to 100, and the\n number of interim (1xx) responses it will skip to 100.\n A malicious or broken server could previously stream\n trailer lines or 100 Continue responses forever, hanging\n the client even when a socket timeout was in use. Reported\n by @YLChen-007 via GHSA-w4q2-g22w-6fr4.\n - gh-149698: Update bundled libexpat to version 2.8.1 for the\n fix for CVE-2026-45186.\n - gh-87451: The ftplib module\u0027s undocumented ftpcp function\n no longer trusts the IPv4 address value returned from the\n source server in response to the PASV command by default,\n completing the fix for CVE-2021-4189. As with ftplib.FTP,\n the former behavior can be re-enabled by setting the\n trust_server_pasv_ipv4_address attribute on the source\n ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape\n AI for the report (bsc#1265268, CVE-2026-8328).\n - gh-149486: tarfile.data_filter() now validates link targets\n using the same normalised value that is written to disk,\n strips trailing separators from the member name when\n resolving a symlink\u0027s directory, and rejects link members\n that would replace the destination directory itself. This\n closes several path-traversal bypasses of the data\n extraction filter (bsc#1267821, CVE-2026-7774).\n - gh-149079: Fix a potential denial of service in\n unicodedata.normalize(). The canonical ordering step of\n Unicode normalization used a quadratic-time insertion sort\n for reordering combining characters, which could be\n exploited with crafted input containing many combining\n characters in non-canonical order. Replaced with\n a linear-time counting sort for long runs (bsc#1267581,\n CVE-2026-3276).\n - gh-149018: Improved protection against XML hash-flooding\n attacks in xml.parsers.expat and xml.etree.ElementTree when\n Python is compiled with libExpat 2.8.0 or later\n (bsc#1264962, CVE-2026-7210).\n - gh-149017: Update bundled libexpat to version 2.8.0.\n - gh-148808: Added buffer boundary check when using nbytes\n parameter with\n asyncio.AbstractEventLoop.sock_recvfrom_into(). Only\n relevant for Windows and the asyncio.ProactorEventLoop.\n - gh-148395: Fix a dangling input pointer in\n lzma.LZMADecompressor, and bz2.BZ2Decompressor when memory\n allocation fails with MemoryError, which could let\n a subsequent decompress() call read or write through\n a stale pointer to the already-released caller buffer\n (bsc#1262098, CVE-2026-6100).\n - gh-148169: A bypass in webbrowser allowed URLs prefixed\n with %action to pass the dash-prefix safety check\n (bsc#1262319, CVE-2026-4786).\n - gh-146581: Fix vulnerability in shutil.unpack_archive() for\n ZIP files on Windows which allowed to write files outside\n of the destination tree if the patch in the archive\n contains a Windows drive prefix. Now such invalid paths\n will be skipped. Files containing \"..\" in the name (like\n \"foo..bar\") are no longer skipped.\n - gh-146333: Fix quadratic backtracking in\n configparser.RawConfigParser option parsing regexes (OPTCRE\n and OPTCRE_NV). A crafted configuration line with many\n whitespace characters could cause excessive CPU usage.\n - gh-146211: Reject CR/LF characters in tunnel request\n headers for the HTTPConnection.set_tunnel() method\n (bsc#1261969, CVE-2026-1502).\n - gh-145986: xml.parsers.expat: Fixed a crash caused by\n unbounded C recursion when converting deeply nested XML\n content models with ElementDeclHandler(). This addresses\n CVE-2026-4224 (bsc#1259735, CVE-2026-4224).\n - gh-145599: Reject control characters in http.cookies.Morsel\n update() and js_output(). This addresses CVE-2026-3644\n (bsc#1259734, CVE-2026-3644).\n - gh-145506: Fixes CVE-2026-2297 by ensuring that\n SourcelessFileLoader uses io.open_code() when opening .pyc\n files (bsc#1259240, CVE-2026-2297).\n - gh-144370: Disallow usage of control characters in status\n in wsgiref.handlers to prevent HTTP header injections.\n Patch by Benedikt Johannes.\n - gh-143930: Reject leading dashes in URLs passed to\n webbrowser.open() (bsc#1260026, CVE-2026-4519).\n - gh-143927: Normalize all line endings (CR, CRLF, and LF) to\n LF+TAB when writing multi-line configparser values\n (bsc#1269066, CVE-2026-0864).\n - Tests\n - gh-149776: Fix test_socket on Linux kernel 7.1 and newer:\n skip UDP Lite tests if it\u0027s not supported. Patch by Victor\n Stinner.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-733",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23743-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:23743-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623743-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:23743-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-September/029285.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259240",
        "url": "https://bugzilla.suse.com/1259240"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259611",
        "url": "https://bugzilla.suse.com/1259611"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259734",
        "url": "https://bugzilla.suse.com/1259734"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259735",
        "url": "https://bugzilla.suse.com/1259735"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1260026",
        "url": "https://bugzilla.suse.com/1260026"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1261969",
        "url": "https://bugzilla.suse.com/1261969"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262098",
        "url": "https://bugzilla.suse.com/1262098"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262319",
        "url": "https://bugzilla.suse.com/1262319"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264962",
        "url": "https://bugzilla.suse.com/1264962"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1265268",
        "url": "https://bugzilla.suse.com/1265268"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267581",
        "url": "https://bugzilla.suse.com/1267581"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267821",
        "url": "https://bugzilla.suse.com/1267821"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1267974",
        "url": "https://bugzilla.suse.com/1267974"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268977",
        "url": "https://bugzilla.suse.com/1268977"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269066",
        "url": "https://bugzilla.suse.com/1269066"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269788",
        "url": "https://bugzilla.suse.com/1269788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269959",
        "url": "https://bugzilla.suse.com/1269959"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271192",
        "url": "https://bugzilla.suse.com/1271192"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276223",
        "url": "https://bugzilla.suse.com/1276223"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1276226",
        "url": "https://bugzilla.suse.com/1276226"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-4189 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-4189/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-13462 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-13462/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4330 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4330/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-0864 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-0864/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-11940 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-11940/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-11972 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-11972/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-1502 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-1502/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15308 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15308/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-15806 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-15806/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-17084 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-17084/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-2297 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-2297/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-3276 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-3276/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-3644 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-3644/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4224 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4224/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4360 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4360/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-45186 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-45186/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4519 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4519/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-4786 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-4786/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6100 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6100/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-7210 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-7210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-72522 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-72522/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-7774 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-7774/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-8328 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-8328/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9669 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9669/"
      }
    ],
    "title": "Security update for python311",
    "tracking": {
      "current_release_date": "2026-09-27T14:25:55Z",
      "generator": {
        "date": "2026-09-16T09:45:01Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:23743-1",
      "initial_release_date": "2026-09-16T09:45:01Z",
      "revision_history": [
        {
          "date": "2026-09-16T09:45:01Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-27T14:25:55Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_id": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-slfo.1.1_1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-slfo.1.1_1.1.aarch64",
                "product": {
                  "name": "python311-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_id": "python311-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-slfo.1.1_1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
                "product": {
                  "name": "python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_id": "python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-slfo.1.1_1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
                "product": {
                  "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_id": "python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-slfo.1.1_1.1?arch=aarch64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_id": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-slfo.1.1_1.1?arch=ppc64le\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
                "product": {
                  "name": "python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_id": "python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-slfo.1.1_1.1?arch=ppc64le\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
                "product": {
                  "name": "python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_id": "python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-slfo.1.1_1.1?arch=ppc64le\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
                "product": {
                  "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_id": "python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-slfo.1.1_1.1?arch=ppc64le\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_id": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-slfo.1.1_1.1?arch=s390x\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-slfo.1.1_1.1.s390x",
                "product": {
                  "name": "python311-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_id": "python311-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-slfo.1.1_1.1?arch=s390x\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
                "product": {
                  "name": "python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_id": "python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-slfo.1.1_1.1?arch=s390x\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
                "product": {
                  "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_id": "python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-slfo.1.1_1.1?arch=s390x\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
                "product": {
                  "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_id": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/libpython3_11-1_0@3.11.16-slfo.1.1_1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-0:3.11.16-slfo.1.1_1.1.x86_64",
                "product": {
                  "name": "python311-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_id": "python311-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311@3.11.16-slfo.1.1_1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
                "product": {
                  "name": "python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_id": "python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-base@3.11.16-slfo.1.1_1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64",
                "product": {
                  "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_id": "python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python_software_foundation:cpython:3.11.16:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-curses@3.11.16-slfo.1.1_1.1?arch=x86_64\u0026upstream=python311-0:3.11.16-slfo.1.1_1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64"
        },
        "product_reference": "libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64"
        },
        "product_reference": "python311-0:3.11.16-slfo.1.1_1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-slfo.1.1_1.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le"
        },
        "product_reference": "python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-slfo.1.1_1.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x"
        },
        "product_reference": "python311-0:3.11.16-slfo.1.1_1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-0:3.11.16-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64"
        },
        "product_reference": "python311-0:3.11.16-slfo.1.1_1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64"
        },
        "product_reference": "python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le"
        },
        "product_reference": "python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-slfo.1.1_1.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x"
        },
        "product_reference": "python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-base-0:3.11.16-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64"
        },
        "product_reference": "python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64"
        },
        "product_reference": "python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le"
        },
        "product_reference": "python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x"
        },
        "product_reference": "python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        },
        "product_reference": "python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-4189",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-4189"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-4189",
          "url": "https://www.suse.com/security/cve/CVE-2021-4189"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194146 for CVE-2021-4189",
          "url": "https://bugzilla.suse.com/1194146"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265268 for CVE-2021-4189",
          "url": "https://bugzilla.suse.com/1265268"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-4189"
    },
    {
      "cve": "CVE-2025-13462",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-13462"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"tarfile\" module would still apply normalization of AREGTYPE (\\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-13462",
          "url": "https://www.suse.com/security/cve/CVE-2025-13462"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259611 for CVE-2025-13462",
          "url": "https://bugzilla.suse.com/1259611"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "low"
        }
      ],
      "title": "CVE-2025-13462"
    },
    {
      "cve": "CVE-2025-4330",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4330"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile  module to extract untrusted tar archives using TarFile.extractall()  or TarFile.extract()  using the filter=  parameter with a value of \"data\"  or \"tar\". See the tarfile  extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter   for more information.\n\nNote that for Python 3.14 or later the default value of filter=  changed from \"no filtering\" to `\"data\", so if you are relying on this new default behavior then your usage is also affected.\n\nNote that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However when evaluating source distributions it\u0027s important to avoid installing source distributions with suspicious links.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4330",
          "url": "https://www.suse.com/security/cve/CVE-2025-4330"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1244060 for CVE-2025-4330",
          "url": "https://bugzilla.suse.com/1244060"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268977 for CVE-2025-4330",
          "url": "https://bugzilla.suse.com/1268977"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-4330"
    },
    {
      "cve": "CVE-2026-0864",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-0864"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When using the \"configparser\" module to write configuration files\ncontaining multi-line text values with carriage return characters (\\r) the\nresulting file could be injected with unexpected keys and values if the\nattacker controls the written value.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-0864",
          "url": "https://www.suse.com/security/cve/CVE-2026-0864"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269066 for CVE-2026-0864",
          "url": "https://bugzilla.suse.com/1269066"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-0864"
    },
    {
      "cve": "CVE-2026-11940",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-11940"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tarfile.extractall() with the \u0027data\u0027 or \u0027tar\u0027\n filter could be bypassed by a crafted archive where a hardlink \nreferences a symlink stored at a deeper name than the hardlink itself.   \nThe extraction fallback validated the symlink at it\u0027s archived location \nbut recreated it at the hardlink\u0027s shallower\npath, letting a relative\n target the filter judged contained escape the destination directory.   \nThis allowed a malicious tar archive to create a symlink pointing \noutside the destination, enabling out-of-destination file reads or \nwrites. This was an incomplete fix of CVE-2025-4330.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-11940",
          "url": "https://www.suse.com/security/cve/CVE-2026-11940"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268977 for CVE-2026-11940",
          "url": "https://bugzilla.suse.com/1268977"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-11940"
    },
    {
      "cve": "CVE-2026-11972",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-11972"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When using the \"tarfile\" module with a file opened in \"streaming mode\" (mode=\"r|\") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-11972",
          "url": "https://www.suse.com/security/cve/CVE-2026-11972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269788 for CVE-2026-11972",
          "url": "https://bugzilla.suse.com/1269788"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-11972"
    },
    {
      "cve": "CVE-2026-1502",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-1502"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-1502",
          "url": "https://www.suse.com/security/cve/CVE-2026-1502"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261969 for CVE-2026-1502",
          "url": "https://bugzilla.suse.com/1261969"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-1502"
    },
    {
      "cve": "CVE-2026-15308",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15308"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The incremental HTML parser (html.parser.HTMLParser) allows for CPU\ndenial-of-service through repeated unterminated markup declarations when\nprocessing uncontrolled data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15308",
          "url": "https://www.suse.com/security/cve/CVE-2026-15308"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271192 for CVE-2026-15308",
          "url": "https://bugzilla.suse.com/1271192"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-15308"
    },
    {
      "cve": "CVE-2026-15806",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-15806"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The HTTPPasswordMgr class in the urllib.request module, along with its subclasses HTTPPasswordMgrWithDefaultRealm and HTTPPasswordMgrWithPriorAuth, did not take the URL scheme into account when matching stored credentials against a requested URL. Credentials added for an https:// URL were also used for requests to the same host over http://, so an attacker able to redirect or downgrade a client to plain HTTP (for example, via an HTTPS-to-HTTP redirect or an on-path position) could capture credentials in cleartext. Credentials added for http:// URLs could likewise be sent over https://.\n\nCredential matching is now scoped by URL scheme. Credentials registered with a URL that includes a scheme are only used for requests with the same scheme. Credentials registered with a bare authority (such as example.com or example.com:8080) continue to match any scheme, preserving compatibility with existing code, including proxy authentication.\n\nUsers who cannot upgrade immediately can mitigate by ensuring that applications never make plain http:// requests to hosts for which credentials are registered, for example by not following redirects to http:// URLs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-15806",
          "url": "https://www.suse.com/security/cve/CVE-2026-15806"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276223 for CVE-2026-15806",
          "url": "https://bugzilla.suse.com/1276223"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-15806"
    },
    {
      "cve": "CVE-2026-17084",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-17084"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"stringprep\" module didn\u0027t process characters from RFC 3454 tables \nB.2 or B.3 correctly: the latest Unicode codepoint attributes were used \ninstead of the specified Unicode 3.2.0. This behavior would cause \nmismatches when processing domain names using IDNA 2003 (the \"idna\" \ncodec) and the in_table_b2() function of the \"stringprep\" module. This \nonly affects domain names containing characters that were not previously\n registered or had their Unicode attributes such as case-folding \nbehavior updated since Unicode 3.2.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-17084",
          "url": "https://www.suse.com/security/cve/CVE-2026-17084"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1276226 for CVE-2026-17084",
          "url": "https://bugzilla.suse.com/1276226"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-17084"
    },
    {
      "cve": "CVE-2026-2297",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-2297"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-2297",
          "url": "https://www.suse.com/security/cve/CVE-2026-2297"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259240 for CVE-2026-2297",
          "url": "https://bugzilla.suse.com/1259240"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-2297"
    },
    {
      "cve": "CVE-2026-3276",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-3276"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unicodedata.normalize() can take excessive CPU time when processing\nspecially crafted Unicode input containing long runs of combining characters\nwith alternating Canonical Combining Class values.\nThis affects all normalization forms.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-3276",
          "url": "https://www.suse.com/security/cve/CVE-2026-3276"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267581 for CVE-2026-3276",
          "url": "https://bugzilla.suse.com/1267581"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-3276"
    },
    {
      "cve": "CVE-2026-3644",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-3644"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update(), |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.js_output() lacked the output validation applied to BaseCookie.output().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-3644",
          "url": "https://www.suse.com/security/cve/CVE-2026-3644"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259734 for CVE-2026-3644",
          "url": "https://bugzilla.suse.com/1259734"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-3644"
    },
    {
      "cve": "CVE-2026-4224",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4224"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When an Expat parser with a registered ElementDeclHandler parses an inline\ndocument type definition containing a deeply nested content model a C stack\noverflow occurs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4224",
          "url": "https://www.suse.com/security/cve/CVE-2026-4224"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259735 for CVE-2026-4224",
          "url": "https://bugzilla.suse.com/1259735"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4224"
    },
    {
      "cve": "CVE-2026-4360",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4360"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter=\u0027data\u0027 to the extract() function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4360",
          "url": "https://www.suse.com/security/cve/CVE-2026-4360"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269959 for CVE-2026-4360",
          "url": "https://bugzilla.suse.com/1269959"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-4360"
    },
    {
      "cve": "CVE-2026-45186",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-45186"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-45186",
          "url": "https://www.suse.com/security/cve/CVE-2026-45186"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264713 for CVE-2026-45186",
          "url": "https://bugzilla.suse.com/1264713"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-45186"
    },
    {
      "cve": "CVE-2026-4519",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4519"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The webbrowser.open() API would accept leading dashes in the URL which \ncould be handled as command line options for certain web browsers. New \nbehavior rejects leading dashes. Users are recommended to sanitize URLs \nprior to passing to webbrowser.open().",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4519",
          "url": "https://www.suse.com/security/cve/CVE-2026-4519"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260026 for CVE-2026-4519",
          "url": "https://bugzilla.suse.com/1260026"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262319 for CVE-2026-4519",
          "url": "https://bugzilla.suse.com/1262319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-4519"
    },
    {
      "cve": "CVE-2026-4786",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-4786"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mitgation of  CVE-2026-4519 was incomplete. If the URL contained \"%action\" the mitigation could be bypassed for certain browser types the \"webbrowser.open()\" API could have commands injected into the underlying shell. See  CVE-2026-4519 for details.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-4786",
          "url": "https://www.suse.com/security/cve/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1260026 for CVE-2026-4786",
          "url": "https://bugzilla.suse.com/1260026"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262319 for CVE-2026-4786",
          "url": "https://bugzilla.suse.com/1262319"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-4786"
    },
    {
      "cve": "CVE-2026-6100",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6100"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.\n\nThe vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6100",
          "url": "https://www.suse.com/security/cve/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262098 for CVE-2026-6100",
          "url": "https://bugzilla.suse.com/1262098"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-6100"
    },
    {
      "cve": "CVE-2026-7210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-7210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\\r\\n\\r\\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-7210",
          "url": "https://www.suse.com/security/cve/CVE-2026-7210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264962 for CVE-2026-7210",
          "url": "https://bugzilla.suse.com/1264962"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-7210"
    },
    {
      "cve": "CVE-2026-72522",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-72522"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-72522",
          "url": "https://www.suse.com/security/cve/CVE-2026-72522"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275593 for CVE-2026-72522",
          "url": "https://bugzilla.suse.com/1275593"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-72522"
    },
    {
      "cve": "CVE-2026-7774",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-7774"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "tarfile.data_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() to write files outside the destination directory, subject to the permissions of the extracting process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-7774",
          "url": "https://www.suse.com/security/cve/CVE-2026-7774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267821 for CVE-2026-7774",
          "url": "https://bugzilla.suse.com/1267821"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-7774"
    },
    {
      "cve": "CVE-2026-8328",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-8328"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The ftpcp() function in Lib/ftplib.py was not updated when \nCVE-2021-4189 was fixed. While makepasv() was patched to replace \nserver-supplied PASV host addresses with the actual peer address \n(getpeername()[0]), ftpcp() still calls parse227() directly and passes \nthe raw attacker-controllable IP address and port to target.sendport(). This patch is related to  CVE-2021-4189.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-8328",
          "url": "https://www.suse.com/security/cve/CVE-2026-8328"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1265268 for CVE-2026-8328",
          "url": "https://bugzilla.suse.com/1265268"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-8328"
    },
    {
      "cve": "CVE-2026-9669",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9669"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer. This could crash the process when processing untrusted data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
          "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9669",
          "url": "https://www.suse.com/security/cve/CVE-2026-9669"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1267974 for CVE-2026-9669",
          "url": "https://bugzilla.suse.com/1267974"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:libpython3_11-1_0-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-base-0:3.11.16-slfo.1.1_1.1.x86_64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.aarch64",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.s390x",
            "SUSE Linux Micro 6.1:python311-curses-0:3.11.16-slfo.1.1_1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-16T09:45:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-9669"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.