gpp_maybe Security update for python-python-engineio

SUSE-SLE-Module-Python3-15-SP7-2026-3085

This update for python-python-engineio fixes the following issues: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS (bsc#1269544). - CVE-2026-48809: size of incoming messages is not checked before they are loaded into memory and allows remote users to cause a DoS via excessive memory allocation (bsc#1269545).

• Release Date
  Jul 16 2026
• References
  Bugzilla: 1269545, 1269544
  CVEs: CVE-2026-48809, CVE-2026-48802
• Type
  security
• Severity
  important

cloud_download Downloads

Python 3 Module 15.7 aarch64

• Packages
  python-python-engineio
  EngineIO server

  4.3.4-150600.3.3.1 lock src

  python311-python-engineio
  EngineIO server

  4.3.4-150600.3.3.1 lock rpm

Python 3 Module 15.7 ppc64le

• Packages
  python-python-engineio
  EngineIO server

  4.3.4-150600.3.3.1 lock src

  python311-python-engineio
  EngineIO server

  4.3.4-150600.3.3.1 lock rpm

Python 3 Module 15.7 x86_64

• Packages
  python-python-engineio
  EngineIO server

  4.3.4-150600.3.3.1 lock src

  python311-python-engineio
  EngineIO server

  4.3.4-150600.3.3.1 lock rpm