shield Recommended update for python-uv

SUSE-SLES-16.0-1138

This update for python-uv fixes the following issues: - Fix: arbitrary file write through entry point names allows malicious wheel to place an executable outside of the intended environment and cause arbitrary code execution (bsc#1268681) - Fix: uv arbitrary file deletion through RECORD entries allows malicious or malformed wheel to induce deletion of files outside of the wheel's installation prefix on uninstall (bsc#1268684)

• Release Date
  Jul 2 2026
• References
  Bugzilla: 1268684, 1268681
  
• Type
  recommended
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  python313-uv
  A Python package installer and resolver, written in Rust

  0.7.18-160000.6.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  python313-uv
  A Python package installer and resolver, written in Rust

  0.7.18-160000.6.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  python313-uv
  A Python package installer and resolver, written in Rust

  0.7.18-160000.6.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  python313-uv
  A Python package installer and resolver, written in Rust

  0.7.18-160000.6.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  python313-uv
  A Python package installer and resolver, written in Rust

  0.7.18-160000.6.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  python313-uv
  A Python package installer and resolver, written in Rust

  0.7.18-160000.6.1 lock rpm