p PatchFirst

SUSE-SU-2026:20710-1

SUSE-SU-2026:20710-1 · Security update for python311

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029) - CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031) - CVE-2026-0865: rejecting control characters in wsgiref.headers.Headers, which could be abused for injecting false HTTP headers. (bsc#1257042) - CVE-2025-15366: basically the same as the previous patch for IMAP protocol. (bsc#1257044) - CVE-2025-15282: basically the same as the previous patch for urllib library. (bsc#1257046) - CVE-2025-15367: basically the same as the previous patch for poplib library. (bsc#1257041) - CVE-2025-12781: fix decoding with non-standard Base64 alphabet (bsc#1257108)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python311 SUSE:Linux Micro 6.0

    Affected ranges
    • ECOSYSTEM: < 3.11.14-3.1

    Update to 3.11.14-3.1

  • python311-core SUSE:Linux Micro 6.0

    Affected ranges
    • ECOSYSTEM: < 3.11.14-3.1

    Update to 3.11.14-3.1

Original sources

Check your server →