openSUSE Leap 16.0 python-idna Moderate Input Bypass CVE-2026

Back Linuxsecurity

openSUSE Leap 16.0 python-idna Moderate Input Bypass CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 30, 2026

Share: View original

- CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).

To install this openSUSE security update use the suse recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch openSUSE-Leap-16.0-1061=1

- openSUSE Leap 16.0:

python313-idna-3.10-160000.3.1

*

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Moderate Vulnerability in python-idna Affects SUSE and openSUSE Systems A security advisory has been issued for a moderate vulnerability (CVE-2026-45409) in the python-idna package, affecting SUSE Linux Micro 6.2 and openSUSE Leap 16.0. This vulnerability allows specially crafted inputs to the idna.encode() function to bypass previous security fixes. The issue has been confirmed by SUSE and is linked to bug report bsc#1265413. Users are advised to apply the latest patches to mitigate potential risks. The vulnerability was published on June 5, 2026, and both SUSE and openSUSE have released updates to address it. The CVSS score for the vulnerability is rated at 4.0, indicating a moderate level of risk. Users can install the updates using recommended methods such as YaST online_update or zypper patch. 4 sources 57

Extracted Entities

CVEs (1)

Platforms (1)

OpenSUSE Leap 16.0