gpp_maybe
Security update for python
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-1206
This update for python fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass (bsc#1259734). - CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735). - CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser command line option injection (bsc#1260026).
-
Release DateApr 7 2026
-
ReferencesBugzilla: 1259735, 1259734, 1259611, 1260026
CVEs: CVE-2026-4224, CVE-2026-3644, CVE-2026-4519, CVE-2025-13462 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Package Hub 15.7 s390x
-
Packageslibpython2_7-1_0
Python Interpreter shared librarypython2.7.18-150000.111.1 lock rpm
Python Interpreterpython-base2.7.18-150000.111.1 lock rpm lock src
Python Interpreter base packagepython-curses2.7.18-150000.111.1 lock rpm lock src
Python Interface to the (N)Curses Librarypython-gdbm2.7.18-150000.111.1 lock rpm
Python Interface to the GDBM Librarypython-xml2.7.18-150000.111.1 lock rpm
A Python XML Interface2.7.18-150000.111.1 lock rpm
SUSE Package Hub 15.7 ppc64le
-
Packageslibpython2_7-1_0
Python Interpreter shared librarypython2.7.18-150000.111.1 lock rpm
Python Interpreterpython-base2.7.18-150000.111.1 lock rpm lock src
Python Interpreter base packagepython-curses2.7.18-150000.111.1 lock rpm lock src
Python Interface to the (N)Curses Librarypython-gdbm2.7.18-150000.111.1 lock rpm
Python Interface to the GDBM Librarypython-xml2.7.18-150000.111.1 lock rpm
A Python XML Interface2.7.18-150000.111.1 lock rpm
SUSE Package Hub 15.7 aarch64
-
Packageslibpython2_7-1_0
Python Interpreter shared librarypython2.7.18-150000.111.1 lock rpm
Python Interpreterpython-base2.7.18-150000.111.1 lock rpm lock src
Python Interpreter base packagepython-curses2.7.18-150000.111.1 lock rpm lock src
Python Interface to the (N)Curses Librarypython-gdbm2.7.18-150000.111.1 lock rpm
Python Interface to the GDBM Librarypython-xml2.7.18-150000.111.1 lock rpm
A Python XML Interface2.7.18-150000.111.1 lock rpm
SUSE Package Hub 15.7 x86_64
-
Packageslibpython2_7-1_0
Python Interpreter shared librarypython2.7.18-150000.111.1 lock rpm
Python Interpreterpython-base2.7.18-150000.111.1 lock rpm lock src
Python Interpreter base packagepython-curses2.7.18-150000.111.1 lock rpm lock src
Python Interface to the (N)Curses Librarypython-gdbm2.7.18-150000.111.1 lock rpm
Python Interface to the GDBM Librarypython-xml2.7.18-150000.111.1 lock rpm
A Python XML Interface2.7.18-150000.111.1 lock rpm