SUSE-SU-2026:0663-1: python-base&distro=SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise

CVSS: UnknownPublished
Published 26-02-2026Last modified 23-03-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:0663-1 is a vulnerability in python-base&distro=SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0 · Related 5
CVE-2025-15366CVE-2025-15367CVE-2025-6075CVE-2026-0672CVE-2026-0865

Timeline

  1. 26-02-2026
    PublishedVulnerability first disclosed.
  2. 23-03-2026
    Last modifiedVulnerability information updated.

Description

Security update for python This update for python fixes the following issues: - CVE-2025-6075: Fixed performance degradation when using os.path.expandvars() (bsc#1252974). - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel. (bsc#1257031) - CVE-2026-0865: Fixed a bug where a user-controlled header containing newlines can allow injecting HTTP headers. (bsc#1257042) - CVE-2025-15366: Fixed a bug wherer a user-controlled command can allow additional commands injected using newlines. (bsc#1257044) - CVE-2025-15367: Fixed control characters which may allow the injection of additional commands. (bsc#1257041)

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse6 products
  • python-base&distro=SUSE Linux Enterprise Server 12 SP5-LTSS< 2.7.18-33.63.1
  • python-base&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.63.1
  • python-doc&distro=SUSE Linux Enterprise Server 12 SP5-LTSS< 2.7.18-33.63.1
  • python-doc&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 2.7.18-33.63.1
  • python&distro=SUSE Linux Enterprise Server 12 SP5-LTSS< 2.7.18-33.63.1

1 vendor · 6 products

References

13 links
Show all 13 references