SUSE SLED15 / SLES15 Security Update : python-idna (SUSE-SU-2026:3100-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3100-1 advisory. This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode can...

CVE-2026-39245

decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write. The safeMakeDir function index.js line 29 and the extraction path validation index.js line 106 use String.indexOf to verify the resolved path is within the output...