< back to search

shield Security update for python-flask
SUSE-SLE-Module-Python3-15-SP7-2026-849

This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the `Vary: Cookie` header (bsc#1258700).

  • Release Date
    Mar 9 2026
  • References
    Bugzilla: 1258700
    CVEs: CVE-2026-27205
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

Python 3 Module 15.7 ppc64le
  • Packages
    python-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock src
    python311-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock rpm
Python 3 Module 15.7 s390x
  • Packages
    python-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock src
    python311-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock rpm
Python 3 Module 15.7 aarch64
  • Packages
    python-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock src
    python311-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock rpm
Python 3 Module 15.7 x86_64
  • Packages
    python-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock src
    python311-Flask
    A microframework based on Werkzeug, Jinja2 and good intentions
    2.3.2-150400.3.9.1 lock rpm