Bug 1257181 (CVE-2026-1299) - VUL-0: CVE-2026-1299: python,python3,python310,python311,python312,python313,python36,python39: header injection when an email is serialized due to improper newline quoting in `BytesGenerator`
Summary: VUL-0: CVE-2026-1299: python,python3,python310,python311,python312,python313,...
Status: IN_PROGRESS
Alias: CVE-2026-1299
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P2 - High : Major
Target Milestone: ---
Deadline: 2026-02-10
Assignee: Matej Cepl
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/493661/
Whiteboard: CVSSv3.1:SUSE:CVE-2026-1299:8.2:(AV:N...
Keywords: SR_produced
Depends on:
Blocks:
 
Reported: 2026-01-23 19:43 UTC by SMASH SMASH
Modified: 2026-07-17 12:42 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---
stoyan.manolov: needinfo? (mcepl)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2026-01-23 19:43:13 UTC 
The 
email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when 
serializing an email message allowing for header injection when an email
 is serialized. This is only applicable if using "LiteralHeader" writing headers that don't respect email folding rules, the new behavior will reject the incorrectly folded headers in "BytesGenerator".

References:
https://www.cve.org/CVERecord?id=CVE-2024-6923
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2026-1299
https://www.cve.org/CVERecord?id=CVE-2026-1299
https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc359413
https://github.com/python/cpython/issues/144125
https://github.com/python/cpython/pull/144126
https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZULGALJTITEAGEXLDJE2C6FORDXPBT/
Comment 3 OBSbugzilla Bot 2026-01-29 15:55:03 UTC 
This is an autogenerated message for OBS integration:
This bug (1257181) was mentioned in
https://build.opensuse.org/request/show/1329830 Factory / python315
https://build.opensuse.org/request/show/1329832 Factory / python314
Comment 8 Matej Cepl 2026-02-24 14:18:03 UTC 
All SRs filed.
Comment 9 Maintenance Automation 2026-03-05 13:34:25 UTC 
SUSE-SU-2026:20543-1: An update that solves five vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202620543-1
Category: security (important)
Bug References: 1257029, 1257031, 1257042, 1257046, 1257181
CVE References: CVE-2025-11468, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865, CVE-2026-1299
Sources used:
SUSE Linux Micro 6.2 (src):
 python313-3.13.12-160000.1.1, python313-core-3.13.12-160000.1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 10 Maintenance Automation 2026-03-05 16:45:27 UTC 
SUSE-SU-2026:20581-1: An update that solves five vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202620581-1
Category: security (important)
Bug References: 1257029, 1257031, 1257042, 1257046, 1257181
CVE References: CVE-2025-11468, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865, CVE-2026-1299
Sources used:
SUSE Linux Enterprise Server 16.0 (src):
 python313-core-3.13.12-160000.1.1, python313-3.13.12-160000.1.1, python313-documentation-3.13.12-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 16.0 (src):
 python313-core-3.13.12-160000.1.1, python313-3.13.12-160000.1.1, python313-documentation-3.13.12-160000.1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 12 Matej Cepl 2026-03-08 22:34:39 UTC 
* python
** SUSE:SLE-12-SP1:Update ssr#403039
** SUSE:SLE-12-SP4:Update ssr#403038
** SUSE:SLE-15:Update ssr#403040
* python3
** SUSE:SLE-12:Update ssr#402924
** SUSE:SLE-15-SP3:Update ssr#402923
* python36
** SUSE:SLE-12-SP3:Update:Products:Teradata:Update ssr#402922
** SUSE:SLE-12-SP5:Update ssr#402921
Comment 14 Maintenance Automation 2026-03-12 08:30:26 UTC 
SUSE-SU-2026:0873-1: An update that solves one vulnerability can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20260873-1
Category: security (important)
Bug References: 1257181
CVE References: CVE-2026-1299
Maintenance Incident: [SUSE:Maintenance:43089](https://smelt.suse.de/incident/43089/)
Sources used:
openSUSE Leap 15.6 (src):
 python-doc-2.7.18-150000.108.1, python-base-2.7.18-150000.108.1, python-2.7.18-150000.108.1
SUSE Package Hub 15 15-SP7 (src):
 python-base-2.7.18-150000.108.1, python-2.7.18-150000.108.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 15 Maintenance Automation 2026-03-12 16:30:01 UTC 
SUSE-SU-2026:0884-1: An update that solves one vulnerability can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20260884-1
Category: security (important)
Bug References: 1257181
CVE References: CVE-2026-1299
Maintenance Incident: [SUSE:Maintenance:43057](https://smelt.suse.de/incident/43057/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 python36-3.6.15-103.1, python36-core-3.6.15-103.1
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 python36-3.6.15-103.1, python36-core-3.6.15-103.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 16 Maintenance Automation 2026-03-13 16:30:22 UTC 
SUSE-SU-2026:0891-1: An update that solves one vulnerability can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20260891-1
Category: security (important)
Bug References: 1257181
CVE References: CVE-2026-1299
Maintenance Incident: [SUSE:Maintenance:43088](https://smelt.suse.de/incident/43088/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 python-doc-2.7.18-33.69.1, python-base-2.7.18-33.69.1, python-2.7.18-33.69.1
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 python-doc-2.7.18-33.69.1, python-base-2.7.18-33.69.1, python-2.7.18-33.69.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 17 Maintenance Automation 2026-03-13 20:30:13 UTC 
SUSE-SU-2026:0897-1: An update that solves one vulnerability can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20260897-1
Category: security (important)
Bug References: 1257181
CVE References: CVE-2026-1299
Maintenance Incident: [SUSE:Maintenance:43060](https://smelt.suse.de/incident/43060/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 python3-3.4.10-25.175.1, python3-base-3.4.10-25.175.1
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 python3-3.4.10-25.175.1, python3-base-3.4.10-25.175.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 19 OBSbugzilla Bot 2026-03-18 22:55:01 UTC 
This is an autogenerated message for OBS integration:
This bug (1257181) was mentioned in
https://build.opensuse.org/request/show/1341037 Factory / python311
https://build.opensuse.org/request/show/1341041 Factory / python313
Comment 20 OBSbugzilla Bot 2026-03-20 21:05:01 UTC 
This is an autogenerated message for OBS integration:
This bug (1257181) was mentioned in
https://build.opensuse.org/request/show/1341597 Factory / python310
https://build.opensuse.org/request/show/1341598 Factory / python312
Comment 22 Maintenance Automation 2026-03-26 16:31:35 UTC 
SUSE-SU-2026:1062-1: An update that solves nine vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20261062-1
Category: security (important)
Bug References: 1252974, 1254400, 1254401, 1254997, 1257029, 1257031, 1257042, 1257181, 1259240
CVE References: CVE-2025-11468, CVE-2025-12084, CVE-2025-13836, CVE-2025-13837, CVE-2025-6075, CVE-2026-0672, CVE-2026-0865, CVE-2026-1299, CVE-2026-2297
Maintenance Incident: [SUSE:Maintenance:43190](https://smelt.suse.de/incident/43190/)
Sources used:
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 python310-3.10.20-150400.4.102.1, python310-core-3.10.20-150400.4.102.1
openSUSE Leap 15.4 (src):
 python310-3.10.20-150400.4.102.1, python310-core-3.10.20-150400.4.102.1, python310-documentation-3.10.20-150400.4.102.1
openSUSE Leap 15.6 (src):
 python310-3.10.20-150400.4.102.1, python310-core-3.10.20-150400.4.102.1, python310-documentation-3.10.20-150400.4.102.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 python310-3.10.20-150400.4.102.1, python310-core-3.10.20-150400.4.102.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 python310-3.10.20-150400.4.102.1, python310-core-3.10.20-150400.4.102.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 python310-3.10.20-150400.4.102.1, python310-core-3.10.20-150400.4.102.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 23 Maintenance Automation 2026-03-27 08:32:06 UTC 
SUSE-SU-2026:1090-1: An update that solves one vulnerability can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20261090-1
Category: security (important)
Bug References: 1257181
CVE References: CVE-2026-1299
Maintenance Incident: [SUSE:Maintenance:43059](https://smelt.suse.de/incident/43059/)
Sources used:
openSUSE Leap 15.3 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1, python3-documentation-3.6.15-150300.10.109.1
openSUSE Leap 15.6 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1, python3-documentation-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro 5.3 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro 5.4 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro 5.5 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
Basesystem Module 15-SP7 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
Development Tools Module 15-SP7 (src):
 python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Server 15 SP5 LTSS (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Server 15 SP6 LTSS (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro 5.2 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 python3-3.6.15-150300.10.109.1, python3-core-3.6.15-150300.10.109.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 24 Maintenance Automation 2026-03-27 16:31:21 UTC 
SUSE-SU-2026:1117-1: An update that solves 10 vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20261117-1
Category: security (important)
Bug References: 1252974, 1254400, 1254401, 1254997, 1257029, 1257031, 1257042, 1257046, 1257181, 1259240
CVE References: CVE-2025-11468, CVE-2025-12084, CVE-2025-13836, CVE-2025-13837, CVE-2025-15282, CVE-2025-6075, CVE-2026-0672, CVE-2026-0865, CVE-2026-1299, CVE-2026-2297
Maintenance Incident: [SUSE:Maintenance:43177](https://smelt.suse.de/incident/43177/)
Sources used:
openSUSE Leap 15.4 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
Public Cloud Module 15-SP4 (src):
 python311-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise Server 15 SP5 LTSS (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src):
 python311-3.11.15-150400.9.80.1, python311-documentation-3.11.15-150400.9.80.1, python311-core-3.11.15-150400.9.80.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 25 Maintenance Automation 2026-03-27 16:31:52 UTC 
SUSE-SU-2026:1107-1: An update that solves 10 vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20261107-1
Category: security (important)
Bug References: 1252974, 1254400, 1254401, 1254997, 1257029, 1257031, 1257042, 1257046, 1257181, 1259240
CVE References: CVE-2025-11468, CVE-2025-12084, CVE-2025-13836, CVE-2025-13837, CVE-2025-15282, CVE-2025-6075, CVE-2026-0672, CVE-2026-0865, CVE-2026-1299, CVE-2026-2297
Maintenance Incident: [SUSE:Maintenance:43191](https://smelt.suse.de/incident/43191/)
Sources used:
openSUSE Leap 15.6 (src):
 python312-core-3.12.13-150600.3.48.1, python312-documentation-3.12.13-150600.3.48.1, python312-3.12.13-150600.3.48.1
SUSE Linux Enterprise Server 15 SP6 LTSS (src):
 python312-core-3.12.13-150600.3.48.1, python312-3.12.13-150600.3.48.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (src):
 python312-core-3.12.13-150600.3.48.1, python312-3.12.13-150600.3.48.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 28 Maintenance Automation 2026-04-07 12:30:23 UTC 
SUSE-SU-2026:20956-1: An update that solves two vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202620956-1
Category: security (important)
Bug References: 1257181, 1259240
CVE References: CVE-2026-1299, CVE-2026-2297
Sources used:
SUSE Linux Micro 6.0 (src):
 python311-core-3.11.15-2.1, python311-3.11.15-2.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 29 Maintenance Automation 2026-04-07 12:30:45 UTC 
SUSE-SU-2026:20951-1: An update that solves two vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202620951-1
Category: security (important)
Bug References: 1257181, 1259240
CVE References: CVE-2026-1299, CVE-2026-2297
Sources used:
SUSE Linux Micro 6.1 (src):
 python311-3.11.15-slfo.1.1_2.1, python311-core-3.11.15-slfo.1.1_2.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 31 Maintenance Automation 2026-04-15 20:32:48 UTC 
SUSE-SU-2026:1354-1: An update that solves seven vulnerabilities and contains one feature can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20261354-1
Category: security (important)
Bug References: 1257181, 1259240, 1259611, 1259734, 1259735, 1259989, 1260026
CVE References: CVE-2025-13462, CVE-2026-1299, CVE-2026-2297, CVE-2026-3479, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519
Jira References: PED-15850
Maintenance Incident: [SUSE:Maintenance:43463](https://smelt.suse.de/incident/43463/)
Sources used:
Python 3 Module 15-SP7 (src):
 python313-core-3.13.13-150700.4.45.1, python313-3.13.13-150700.4.45.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 32 Maintenance Automation 2026-04-15 20:33:58 UTC 
SUSE-SU-2026:1349-1: An update that solves 15 vulnerabilities can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20261349-1
Category: security (important)
Bug References: 1252974, 1254400, 1254401, 1254997, 1257029, 1257031, 1257042, 1257046, 1257181, 1259240, 1259611, 1259734, 1259735, 1259989, 1260026
CVE References: CVE-2025-11468, CVE-2025-12084, CVE-2025-13462, CVE-2025-13836, CVE-2025-13837, CVE-2025-15282, CVE-2025-6075, CVE-2026-0672, CVE-2026-0865, CVE-2026-1299, CVE-2026-2297, CVE-2026-3479, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519
Maintenance Incident: [SUSE:Maintenance:43189](https://smelt.suse.de/incident/43189/)
Sources used:
openSUSE Leap 15.6 (src):
 python311-documentation-3.11.15-150600.3.53.1, python311-3.11.15-150600.3.53.1, python311-core-3.11.15-150600.3.53.1
Basesystem Module 15-SP7 (src):
 python311-core-3.11.15-150600.3.53.1
Python 3 Module 15-SP7 (src):
 python311-3.11.15-150600.3.53.1, python311-core-3.11.15-150600.3.53.1
SUSE Linux Enterprise Server 15 SP6 LTSS (src):
 python311-3.11.15-150600.3.53.1, python311-core-3.11.15-150600.3.53.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6 (src):
 python311-3.11.15-150600.3.53.1, python311-core-3.11.15-150600.3.53.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 33 Maintenance Automation 2026-04-16 08:30:52 UTC 
SUSE-SU-2026:21104-1: An update that solves seven vulnerabilities and contains one feature can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202621104-1
Category: security (important)
Bug References: 1257181, 1259240, 1259611, 1259734, 1259735, 1259989, 1260026
CVE References: CVE-2025-13462, CVE-2026-1299, CVE-2026-2297, CVE-2026-3479, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519
Jira References: PED-15850
Sources used:
SUSE Linux Micro 6.2 (src):
 python313-core-3.13.13-160000.1.1, python313-3.13.13-160000.1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 37 Maintenance Automation 2026-04-21 12:35:19 UTC 
SUSE-SU-2026:21178-1: An update that solves seven vulnerabilities and contains one feature can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202621178-1
Category: security (important)
Bug References: 1257181, 1259240, 1259611, 1259734, 1259735, 1259989, 1260026
CVE References: CVE-2025-13462, CVE-2026-1299, CVE-2026-2297, CVE-2026-3479, CVE-2026-3644, CVE-2026-4224, CVE-2026-4519
Jira References: PED-15850
Sources used:
SUSE Linux Enterprise Server 16.0 (src):
 python313-3.13.13-160000.1.1, python313-documentation-3.13.13-160000.1.1, python313-core-3.13.13-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0 (src):
 python313-3.13.13-160000.1.1, python313-documentation-3.13.13-160000.1.1, python313-core-3.13.13-160000.1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 44 Maintenance Automation 2026-07-06 16:33:23 UTC 
SUSE-SU-2026:22493-1: An update that solves 61 vulnerabilities, contains three features and has 65 fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-202622493-1
Category: security (important)
Bug References: 1208800, 1224788, 1226578, 1227579, 1229105, 1232641, 1234567, 1238890, 1242916, 1244925, 1245107, 1247707, 1248699, 1248707, 1248848, 1249243, 1249400, 1249532, 1251305, 1252974, 1253032, 1253174, 1254400, 1254401, 1254866, 1254867, 1254900, 1254997, 1255418, 1255764, 1256070, 1256331, 1257029, 1257031, 1257041, 1257042, 1257044, 1257046, 1257100, 1257108, 1257181, 1257583, 1257894, 1258041, 1258079, 1258144, 1258382, 1258816, 1259087, 1259230, 1259240, 1259261, 1259474, 1259479, 1259482, 1259521, 1259590, 1259591, 1259611, 1259630, 1259700, 1259734, 1259735, 1259739, 1259787, 1259804, 1259808, 1259960, 1260026, 1260031, 1260589, 1260614, 1260806, 1260905, 1261305, 1261307, 1261327, 1261631, 1261723, 1261753, 1261810, 1261841, 1261902, 1262222, 1262285, 1262409, 1262460, 1262471, 1262492, 1262595, 1262708, 1262720, 1262760, 1262761, 1262950, 1263157, 1263501, 1263814, 1263823, 1263841, 1263986, 1263987, 1264149, 1264234, 1264256, 1264966, 1265134, 1265281, 1265282, 1265283, 1265284, 1265285, 1265286, 1265287, 1265288, 1265289, 1265290, 1265319, 1265358, 1265975, 1266012, 1266556, 1266600, 1266608, 1267153, 1268381
CVE References: CVE-2022-21698, CVE-2023-52425, CVE-2024-35195, CVE-2024-47081, CVE-2024-52804, CVE-2025-11468, CVE-2025-12084, CVE-2025-12781, CVE-2025-13462, CVE-2025-13836, CVE-2025-13837, CVE-2025-15282, CVE-2025-15366, CVE-2025-15367, CVE-2025-15444, CVE-2025-50181, CVE-2025-6069, CVE-2025-6075, CVE-2025-66418, CVE-2025-66471, CVE-2025-67724, CVE-2025-67725, CVE-2025-67726, CVE-2025-69277, CVE-2025-8194, CVE-2025-8291, CVE-2026-0672, CVE-2026-0865, CVE-2026-10649, CVE-2026-1299, CVE-2026-21441, CVE-2026-2297, CVE-2026-24049, CVE-2026-25645, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27448, CVE-2026-27459, CVE-2026-28374, CVE-2026-28376, CVE-2026-28379, CVE-2026-28380, CVE-2026-28383, CVE-2026-31958, CVE-2026-33376, CVE-2026-33377, CVE-2026-33378, CVE-2026-33380, CVE-2026-33381, CVE-2026-34986, CVE-2026-3644, CVE-2026-39821, CVE-2026-40179, CVE-2026-41602, CVE-2026-42151, CVE-2026-42154, CVE-2026-4224, CVE-2026-42502, CVE-2026-42506, CVE-2026-4519
Jira References: MSQA-1056, PED-14816, SUMA-320
Sources used:
SUSE Linux Enterprise Server High Availability Extension 16.0 (src):
 pacemaker-3.0.0+20250218.64cd85422c-160000.4.1
SUSE Multi-Linux Manager Proxy 5.1 (src):
 suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.4-8.20.10, uyuni-tools-5.1.29-slfo.1.1.1, suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.4-8.20.10
SUSE Multi-Linux Manager Retail Branch Server 5.1 (src):
 suse-multi-linux-manager-5.1-s390x-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-x86_64-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-x86_64-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-s390x-proxy-tftpd-image-5.1.4-8.20.10, uyuni-tools-5.1.29-slfo.1.1.1, suse-multi-linux-manager-5.1-x86_64-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-ppc64le-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-s390x-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-ppc64le-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-aarch64-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-aarch64-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-s390x-proxy-ssh-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-aarch64-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-ppc64le-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-ppc64le-proxy-salt-broker-image-5.1.4-9.20.19, suse-multi-linux-manager-5.1-s390x-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-x86_64-proxy-tftpd-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-x86_64-proxy-squid-image-5.1.4-8.20.8, suse-multi-linux-manager-5.1-aarch64-proxy-httpd-image-5.1.4-8.22.17, suse-multi-linux-manager-5.1-ppc64le-proxy-tftpd-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-aarch64-proxy-tftpd-image-5.1.4-8.20.10
SUSE Multi-Linux Manager Server 5.1 (src):
 suse-multi-linux-manager-5.1-aarch64-server-postgresql-image-5.1.4-6.22.10, suse-multi-linux-manager-5.1-s390x-server-migration-14-16-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-x86_64-server-postgresql-image-5.1.4-6.22.10, suse-multi-linux-manager-5.1-x86_64-server-migration-14-16-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-aarch64-server-image-5.1.4-8.20.25, suse-multi-linux-manager-5.1-aarch64-server-migration-14-16-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-x86_64-server-saline-image-5.1.4-9.20.18, suse-multi-linux-manager-5.1-aarch64-server-hub-xmlrpc-api-image-5.1.4-8.20.9, uyuni-tools-5.1.29-slfo.1.1.1, suse-multi-linux-manager-5.1-ppc64le-server-hub-xmlrpc-api-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-s390x-server-hub-xmlrpc-api-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-x86_64-server-hub-xmlrpc-api-image-5.1.4-8.20.9, suse-multi-linux-manager-5.1-ppc64le-server-image-5.1.4-8.20.25, suse-multi-linux-manager-5.1-aarch64-server-saline-image-5.1.4-9.20.18, suse-multi-linux-manager-5.1-s390x-server-image-5.1.4-8.20.25, suse-multi-linux-manager-5.1-ppc64le-server-migration-14-16-image-5.1.4-8.20.10, suse-multi-linux-manager-5.1-x86_64-server-attestation-image-5.1.4-8.22.7, suse-multi-linux-manager-5.1-x86_64-server-image-5.1.4-8.20.25, suse-multi-linux-manager-5.1-aarch64-server-attestation-image-5.1.4-8.22.7, suse-multi-linux-manager-5.1-ppc64le-server-postgresql-image-5.1.4-6.22.10, suse-multi-linux-manager-5.1-ppc64le-server-attestation-image-5.1.4-8.22.7, suse-multi-linux-manager-5.1-s390x-server-postgresql-image-5.1.4-6.22.10, suse-multi-linux-manager-5.1-s390x-server-attestation-image-5.1.4-8.22.7, suse-multi-linux-manager-5.1-s390x-server-saline-image-5.1.4-9.20.18, suse-multi-linux-manager-5.1-ppc64le-server-saline-image-5.1.4-9.20.18
SUSE Multi-Linux Manager Client Tools for SLE 16 (src):
 golang-github-prometheus-alertmanager-0.28.1-160002.2.1, grafana-11.6.14+security04-160002.1.1, golang-github-prometheus-prometheus-3.5.3-160002.1.1, golang-github-QubitProducts-exporter_exporter-0.4.0-160002.3.1, venv-salt-minion-3006.0-160002.6.1, supportutils-plugin-susemanager-client-5.2.3-160002.1.1, spacecmd-5.2.8-160002.1.1, prometheus-blackbox_exporter-0.26.0-160002.2.1, golang-github-prometheus-node_exporter-1.10.2-160002.1.1, prometheus-postgres_exporter-0.10.1-160002.2.1, uyuni-tools-5.2.12-160002.1.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.