shield Security update for python

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4411

This update for python fixes the following issues: - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: - Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903)

• Release Date
  Oct 1 2026
• References
  Bugzilla: 1267974, 1273148, 1274683, 1276223, 1276226, 1276227, 1276903
  CVEs: CVE-2026-6879, CVE-2026-9669, CVE-2026-15806, CVE-2026-17084, CVE-2026-18503, CVE-2026-19672
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.7 ppc64le

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.133.1

  lock rpm

  python
  Python Interpreter

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.133.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.133.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.133.1

  lock rpm

SUSE Package Hub 15.7 s390x

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.133.1

  lock rpm

  python
  Python Interpreter

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.133.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.133.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.133.1

  lock rpm

SUSE Package Hub 15.7 aarch64

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.133.1

  lock rpm

  python
  Python Interpreter

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.133.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.133.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.133.1

  lock rpm

SUSE Package Hub 15.7 x86_64

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.133.1

  lock rpm

  python
  Python Interpreter

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.133.1

  lock rpm

  lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.133.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.133.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.133.1

  lock rpm