p PatchFirst

SUSE-SU-2026:20665-1

SUSE-SU-2026:20665-1 · Security update for python311

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029) - CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031) - CVE-2026-0865: rejecting control characters in wsgiref.headers.Headers, which could be abused for injecting false HTTP headers. (bsc#1257042) - CVE-2025-15366: basically the same as the previous patch for IMAP protocol. (bsc#1257044) - CVE-2025-15282: basically the same as the previous patch for urllib library. (bsc#1257046) - CVE-2025-15367: basically the same as the previous patch for poplib library. (bsc#1257041) - CVE-2025-12781: fix decoding with non-standard Base64 alphabet (bsc#1257108)

Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • python311 SUSE:Linux Micro 6.1

    Intervalos de versiones afectados
    • ECOSYSTEM: < 3.11.14-slfo.1.1_3.1

    Actualiza a 3.11.14-slfo.1.1_3.1

  • python311-core SUSE:Linux Micro 6.1

    Intervalos de versiones afectados
    • ECOSYSTEM: < 3.11.14-slfo.1.1_3.1

    Actualiza a 3.11.14-slfo.1.1_3.1

Fuentes originales

Comprueba tu servidor →