SUSE-SU-2026:20796-1: python311-core&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise

Published

Published 19-03-2026Last modified 25-03-2026

Vulnerability summary

SUSE-SU-2026:20796-1 is a vulnerability in python311-core&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0 · Related 8

CVE-2025-11468 CVE-2025-12084 CVE-2025-13836 CVE-2025-13837 CVE-2025-15282 CVE-2025-6075+2 more

Timeline

19-03-2026
PublishedVulnerability first disclosed.
25-03-2026
Last modifiedVulnerability information updated.

Description

Security update for python311 This update for python311 fixes the following issues: Updated to Python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974). - CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029). - CVE-2025-12084: quadratic complexity in xml.minidom node ID cache clearing (bsc#1254997). - CVE-2025-13836: potential memory denial of service in the http.client module (bsc#1254400). - CVE-2025-13837: potential memory denial of service in the plistlib module (bsc#1254401). - CVE-2025-15282: control characters in URL media types data (bsc#1257046). - CVE-2026-0672: control characters in http.cookies.Morsel fields and values (bsc#1257031). - CVE-2026-0865: C0 control characters within wsgiref.headers.Headers fields, values, and parameters (bsc#1257042).