Описание
Security update for python311
This update for python311 fixes the following issues:
- Regression in
http.cookies(bsc#1263083).
Список пакетов
Container bci/python:3
libpython3_11-1_0-3.11.15-150600.3.65.1
python311-3.11.15-150600.3.65.1
python311-base-3.11.15-150600.3.65.1
python311-devel-3.11.15-150600.3.65.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
libpython3_11-1_0-3.11.15-150600.3.65.1
python311-base-3.11.15-150600.3.65.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-3.11.15-150600.3.65.1
python311-curses-3.11.15-150600.3.65.1
python311-dbm-3.11.15-150600.3.65.1
python311-devel-3.11.15-150600.3.65.1
python311-idle-3.11.15-150600.3.65.1
python311-tk-3.11.15-150600.3.65.1
python311-tools-3.11.15-150600.3.65.1
SUSE Linux Enterprise Server 15 SP6-LTSS
libpython3_11-1_0-3.11.15-150600.3.65.1
python311-3.11.15-150600.3.65.1
python311-base-3.11.15-150600.3.65.1
python311-curses-3.11.15-150600.3.65.1
python311-dbm-3.11.15-150600.3.65.1
python311-devel-3.11.15-150600.3.65.1
python311-idle-3.11.15-150600.3.65.1
python311-tk-3.11.15-150600.3.65.1
python311-tools-3.11.15-150600.3.65.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
libpython3_11-1_0-3.11.15-150600.3.65.1
python311-3.11.15-150600.3.65.1
python311-base-3.11.15-150600.3.65.1
python311-curses-3.11.15-150600.3.65.1
python311-dbm-3.11.15-150600.3.65.1
python311-devel-3.11.15-150600.3.65.1
python311-idle-3.11.15-150600.3.65.1
python311-tk-3.11.15-150600.3.65.1
python311-tools-3.11.15-150600.3.65.1
Ссылки
- Link for SUSE-SU-2026:3648-1
- E-Mail link for SUSE-SU-2026:3648-1
- SUSE Security Ratings
- SUSE Bug 1263083
- SUSE CVE CVE-2026-3276 page
- SUSE CVE CVE-2026-6019 page
Описание
unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canonical Combining Class values. This affects all normalization forms.
Затронутые продукты
Container bci/python:3:libpython3_11-1_0-3.11.15-150600.3.65.1
Container bci/python:3:python311-3.11.15-150600.3.65.1
Container bci/python:3:python311-base-3.11.15-150600.3.65.1
Container bci/python:3:python311-devel-3.11.15-150600.3.65.1
Ссылки
- CVE-2026-3276
- SUSE Bug 1267581
Описание
http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML parser-sensitive sequence </script> inside the generated script element. Mitigation base64-encodes the cookie value to disallow escaping using cookie value.
Затронутые продукты
Container bci/python:3:libpython3_11-1_0-3.11.15-150600.3.65.1
Container bci/python:3:python311-3.11.15-150600.3.65.1
Container bci/python:3:python311-base-3.11.15-150600.3.65.1
Container bci/python:3:python311-devel-3.11.15-150600.3.65.1
Ссылки
- CVE-2026-6019
- SUSE Bug 1262654