SUSE-SU-2026:24138-1
Security update for python311
Published Oct 10, 2026 · updated Oct 15, 2026
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 10, 2026 · OSV.dev
Detected
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).
Oct 15, 2026 · OSV.dev
Fix available
python311 fixed in 3.11.16-159998.1.1; python311-core fixed in 3.11.16-159998.1.1
Oct 15, 2026 · OSV.dev
Fix available
python311 fixed in 3.11.16-159998.1.1
Oct 15, 2026 · OSV.dev
Fix available
python311-core fixed in 3.11.16-159998.1.1
Oct 15, 2026 · OSV.dev
Updated
This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227).
Affected
- SUSE:Linux Micro 6.0 python3110 → 3.11.16-159998.1.1
- SUSE:Linux Micro 6.0 python311-core0 → 3.11.16-159998.1.1