Back Linuxsecurity

Moderate Severity Alert for SUSE Python

Linuxsecurity •LinuxSecurity Advisories • September 10, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

## This update for python-aiohttp fixes the following issues: * CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). * CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure (bsc#1273553). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4113=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4113=1 * Public Cloud Module 15-SP6

* CVE-2026-59881 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2026-59881 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

* CVE-2026-59881 ( NVD ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2026-69243 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

* CVE-2026-69243 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

* CVE-2026-69243 ( NVD ): 6.3

Announcement ID: SUSE-SU-2026:4113-1 Release Date: 2026-09-09T16:19:36Z Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Vulnerabilities: Buffer Overflow and Privilege Escalation Issues Two vulnerabilities in SUSE Linux systems have been disclosed, affecting opensc and fuse-overlayfs. The first, CVE-2026-40510, is a stack buffer overflow in `piv_process_history()` that allows physical attackers to exploit crafted PIV smart cards or USB devices, leading to memory corruption. The second, CVE-2026-52791, involves privilege escalation due to SUID/SGID bit preservation after a truncate operation. Both vulnerabilities are rated as moderate in severity and require immediate patching. SUSE has provided patch instructions for both vulnerabilities, urging users to update their systems promptly. The opensc vulnerability was published on May 29, 2026, while the fuse-overlayfs issue was published on July 29, 2026. Users of SUSE Linux Micro 6.0 and 6.2 are specifically affected by these vulnerabilities. 23 sources 46

Extracted Entities

CVEs (2)

CVE-2026-59881 CVE-2026-69243

Platforms (1)

Linux