p PatchFirst

SUSE-SU-2026:24267-1

SUSE-SU-2026:24267-1 · Security update for python-soupsieve

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python-soupsieve fixes the following issues: - CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). - CVE-2026-86000: quadratic complexity when running the `IDENTIFIER` / `VALUE` selector sub-patterns can lead to a DoS (bsc#1281120).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python-soupsieve SUSE:Linux Enterprise Server 16.0

    Affected ranges
    • ECOSYSTEM: < 2.6-160000.5.1

    Update to 2.6-160000.5.1

  • python-soupsieve SUSE:Linux Enterprise Server for SAP applications 16.0

    Affected ranges
    • ECOSYSTEM: < 2.6-160000.5.1

    Update to 2.6-160000.5.1

Original sources

Check your server →