Описание
Security update for python-pytest-html
This update for python-pytest-html fixes the following issues:
Changes in python-pytest-html:
- Revendor updating brace-expansion:
- force brace-expansion minimum version to fix CVE-2026-13149 (bsc#1269923)
Список пакетов
openSUSE Leap 16.0
python313-pytest-html-4.1.1-bp160.4.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1269923
- SUSE CVE CVE-2026-13149 page
Описание
brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transitively, can cause significant CPU consumption and event-loop blocking. The max option does not mitigate this, as it bounds the output size rather than the recursion work.
Затронутые продукты
openSUSE Leap 16.0:python313-pytest-html-4.1.1-bp160.4.1
Ссылки
- CVE-2026-13149
- SUSE Bug 1269911