Multiple Python Security Flaws Addressed in SUSE Updates

SUSE has released critical updates for various Python versions, addressing multiple security vulnerabilities. The updates affect Python 3.6, 3.10, and 3.11 across different SUSE Linux distributions. Key vulnerabilities include CVE-2025-13462, which involves incorrect parsing of TarInfo headers, and CVE-2026-3479, which allows for path traversal due to improper resource argument validation. Other issues include potential command injection and denial of service vulnerabilities. The updates are crucial for maintaining system integrity and preventing exploitation. Users are advised to apply the patches immediately using SUSE's recommended installation methods. The vulnerabilities have been documented with specific CVE identifiers and are linked to various bug reports. The updates are now available for installation.

Key Points: • SUSE released updates for Python 3.6, 3.10, and 3.11 addressing critical vulnerabilities. • CVE-2025-13462 and CVE-2026-3479 are among the key vulnerabilities fixed in these updates. • Immediate patching is recommended to mitigate risks associated with these vulnerabilities.