SUSE-SU-2026:24138-1
SUSE-SU-2026:24138-1 · Security update for python311
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python311 SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 3.11.16-159998.1.1
Update to 3.11.16-159998.1.1
python311-core SUSE:Linux Micro 6.0
- Affected ranges
- ECOSYSTEM: < 3.11.16-159998.1.1
Update to 3.11.16-159998.1.1