< back to search

gpp_maybe Security update for python-cbor2

SUSE-SLES-16.0-482

This update for python-cbor2 fixes the following issues: - CVE-2025-68131: CBORDecoder reuse across trust boundaries can lead to leak of shareable values from previous decode calls via attacker-controlled messages (bsc#1255783). - CVE-2026-26209: uncontrolled recursion via crafted CBOR payloads can cause a denial of service (bsc#1260367).

Release Date

Apr 7 2026
References

Bugzilla: 1255783, 1260367
CVEs: CVE-2025-68131, CVE-2026-26209
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 16.0 aarch64

Packages

python313-cbor2
Pure Python CBOR (de)serializer with extensive tag support

5.6.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

Packages

python313-cbor2
Pure Python CBOR (de)serializer with extensive tag support

5.6.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

Packages

python313-cbor2
Pure Python CBOR (de)serializer with extensive tag support

5.6.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

Packages

python313-cbor2
Pure Python CBOR (de)serializer with extensive tag support

5.6.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

Packages

python313-cbor2
Pure Python CBOR (de)serializer with extensive tag support

5.6.5-160000.4.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

Packages

python313-cbor2
Pure Python CBOR (de)serializer with extensive tag support

5.6.5-160000.4.1 lock rpm