Back Linuxsecurity

SUSE Linux Micro python-idna Moderate CVE-2026

Linuxsecurity •LinuxSecurity Advisories • June 2, 2026

## This update for python-idna fixes the following issue * CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-553=1 ## Package List: * SUSE Linux Micro 6.1 (noarch) * python311-idna-3.7-slfo.1.1_2.1

* CVE-2026-45409 ( SUSE ): 6.9

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

* SUSE Linux Micro 6.1

An update that solves one vulnerability can now be installed.

Announcement ID: SUSE-SU-2026:21873-1 Release Date: 2026-05-28T15:00:00Z Rating: moderate

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Micro Python IDNA Vulnerability Fix Released A security update for python-idna has been released to address CVE-2026-45409, which allows specially crafted inputs to idna.encode() to bypass previous security measures. This affects SUSE Linux Micro 6.0 and 6.1 installations. The vulnerability has a moderate severity rating, with a CVSS score of 4.0. Users are advised to apply the patch using recommended installation methods such as YaST or zypper. The update was released on May 28, 2026, and is crucial for maintaining system security against potential exploitation. The issue is confirmed to affect multiple versions of the python-idna package. 2 sources 46

Extracted Entities

CVEs (1)

CVE-2026-45409

Platforms (1)

Linux