p PatchFirst

SUSE-SU-2026:4659-1

SUSE-SU-2026:4659-1 · Security update for python312

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python312 fixes the following issues: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). - CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python312: - Update to 3.12.15

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python312 SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.12.15-150600.3.71.1

    Update to 3.12.15-150600.3.71.1

  • python312-core SUSE:Linux Enterprise Server 15 SP6-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.12.15-150600.3.71.1

    Update to 3.12.15-150600.3.71.1

  • python312 SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.12.15-150600.3.71.1

    Update to 3.12.15-150600.3.71.1

  • python312-core SUSE:Linux Enterprise Server for SAP Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.12.15-150600.3.71.1

    Update to 3.12.15-150600.3.71.1

Original sources

Check your server →