SUSE-SU-2026:23845-1
SUSE-SU-2026:23845-1 · Security update for python311
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). Changes for python311: - Updated to version 3.11.16
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python311 SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 3.11.16-1.1
Update to 3.11.16-1.1
python311-core SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 3.11.16-1.1
Update to 3.11.16-1.1
Original sources
- https://www.suse.com/support/update/announcement/2026/suse-su-202623845-1/
- https://bugzilla.suse.com/1267974
- https://bugzilla.suse.com/1276223
- https://bugzilla.suse.com/1276226
- https://www.suse.com/security/cve/CVE-2026-15806
- https://www.suse.com/security/cve/CVE-2026-17084
- https://www.suse.com/security/cve/CVE-2026-9669
- https://osv.dev/vulnerability/SUSE-SU-2026:23845-1