openSUSE Python-msgpack Important Buffer Overflow Fix CVE-2026

Back Linuxsecurity

openSUSE Python-msgpack Important Buffer Overflow Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Share: View original

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

This update for python-msgpack fixes the following issue:

* CVE-2026-57585: reusing an Unpacker instance after an error has been caught

can lead to an out-of-bounds read (bsc#1269947).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* SUSE Linux Enterprise Server 15 SP5 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3932=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-3932=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4

zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-3932=1

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5

zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3932=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP4

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-3932=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3932=1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5

* SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64

* python311-msgpack-1.0.7-150400.10.9.1

* python-msgpack-debugsource-1.0.7-150400.10.9.1

* python311-msgpack-debuginfo-1.0.7-150400.10.9.1

* SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64)

* python311-msgpack-debuginfo-1.0.7-150400.10.9.1

* python-msgpack-debugsource-1.0.7-150400.10.9.1

* python311-msgpack-1.0.7-150400.10.9.1

* SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64

* python311-msgpack-1.0.7-150400.10.9.1

* python-msgpack-debugsource-1.0.7-150400.10.9.1

* python311-msgpack-debuginfo-1.0.7-150400.10.9.1

* SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)

* python311-msgpack-1.0.7-150400.10.9.1

* python-msgpack-debugsource-1.0.7-150400.10.9.1

* python311-msgpack-debuginfo-1.0.7-150400.10.9.1

* SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)

* python311-msgpack-debuginfo-1.0.7-150400.10.9.1

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

openSUSE Python-msgpack Buffer Overflow Vulnerability Fix Released A critical buffer overflow vulnerability, CVE-2026-57585, was discovered in python-msgpack, affecting multiple SUSE Linux Enterprise products. The issue arises from reusing an Unpacker instance after an error, which can lead to an out-of-bounds read. This vulnerability has been patched in the latest updates for various SUSE products, including SUSE Linux Enterprise Server and High Performance Computing editions. System administrators are urged to apply the patches using recommended installation methods such as YaST or zypper. The vulnerability was published on June 30, 2026, and is categorized as a significant risk to affected systems. Proper patching is essential to mitigate potential exploitation risks. The advisory emphasizes the importance of keeping systems secure and up to date. 4 sources 72

Extracted Entities

CVEs (1)

CWE Weaknesses (2)

CWE-120 - Classic Buffer Overflow Cwe-125 - Out-of-bounds Read

Platforms (8)

Linux SUSE Linux Enterprise High Performance Computing Espos 15 SP4 SUSE Linux Enterprise High Performance Computing Espos 15 SP5 SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 SUSE Linux Enterprise Server 15 SP5 LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5