SUSE-SU-2026:0226-1

UNKNOWN

Security update for python-marshmallow

Published Jan 22, 2026

Modified 1 months ago

Fix available

Details

This update for python-marshmallow fixes the following issues:

CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).

Affected Packages

python-marshmallow

SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP5SUSE Linux Enterprise Module for Public Cloud 15 SP6SUSE Linux Enterprise Module for Public Cloud 15 SP7openSUSE Leap 15.6

Fixed in:

3.20.2-150400.9.10.1

python311-marshmallow

Fixed in:

3.20.2-150400.9.10.1

References

REPORT

https://bugzilla.suse.com/1255473

WEB

https://www.suse.com/security/cve/CVE-2025-68480

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20260226-1/

Upstream

CVE-2025-68480

Ecosystems

SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP7 openSUSE Leap 15.6

Timeline

PublishedJan 22, 2026

ModifiedJan 22, 2026

SUSE-SU-2026:0226-1 | Mondoo Vulnerability Intelligence