SUSE-SU-2026:2982-1

Details

Description of the patch:

This update for python-WebOb fixes the following issue

CVE-2026-44889: Location header normalization during redirect leads to open redirect (bsc#1268324).

Affected Packages

python3-WebOb

SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP7SUSE Linux Enterprise Server for SAP Applications 15 SP7

Fixed in:

1.7.4-150000.3.6.1

python2-WebOb

SUSE Linux Enterprise Module for Package Hub 15 SP7

Fixed in:

1.7.4-150000.3.6.1

References

ADVISORY

https://bugzilla.suse.com/1268324

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-July/048247.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-44889/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2026/suse-su-20262982-1/