Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3245-1

Опубликовано: 24 июл. 2026
Источник: suse-cvrf

Описание

Security update for python3

This update for python3 fixes the following issues:

  • CVE-2026-7210: insufficient entropy used for Expat hash-flooding protection allows a crafted XML document to trigger hash flooding (bsc#1264962).
  • CVE-2026-8328: server-supplied PASV host address is trusted by ftpcp() and allows for SSRF (bsc#1265268).
  • CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977).

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
libpython3_4m1_0-3.4.10-25.188.1
libpython3_4m1_0-32bit-3.4.10-25.188.1
python3-3.4.10-25.188.1
python3-base-3.4.10-25.188.1
python3-curses-3.4.10-25.188.1
python3-devel-3.4.10-25.188.1
python3-tk-3.4.10-25.188.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libpython3_4m1_0-3.4.10-25.188.1
libpython3_4m1_0-32bit-3.4.10-25.188.1
python3-3.4.10-25.188.1
python3-base-3.4.10-25.188.1
python3-curses-3.4.10-25.188.1
python3-devel-3.4.10-25.188.1
python3-tk-3.4.10-25.188.1

Ссылки

Описание

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting a relative target the filter judged contained escape the destination directory. This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libpython3_4m1_0-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpython3_4m1_0-32bit-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:python3-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:python3-base-3.4.10-25.188.1
Ссылки

Описание

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libpython3_4m1_0-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpython3_4m1_0-32bit-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:python3-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:python3-base-3.4.10-25.188.1
Ссылки

Описание

The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libpython3_4m1_0-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libpython3_4m1_0-32bit-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:python3-3.4.10-25.188.1
SUSE Linux Enterprise Server 12 SP5-LTSS:python3-base-3.4.10-25.188.1
Ссылки
Уязвимость SUSE-SU-2026:3245-1