{"id":"openSUSE-SU-2026:21063-1","summary":"Security update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve","details":"This update for python-Markdown, python-joblib, python-handy-archives, python-apache-libcloud, python-WebOb, python-PyGithub, python-soupsieve fixes the following issues:\n\nChanges in python-Markdown:\n\n- Fix tests with latest python version (bsc#1268243)\n\nChanges in python-joblib:\n\n- Update to 1.5.2:\n    * fixing the resource tracker for python 3.13.7+\n    * Skip tests failing with Python 3.13.7\n\nChanges in python-handy-archives:\n\n- Skip some zip64 tests that fails with latest python interpreter\n  because there are more consistency checks in zipfile (bsc#1256310)\n\nChanges in python-apache-libcloud:\n\n- Fix tests compatibility with latest Python 3.13 (bsc#1258223, bsc#1261918)\n\nChanges in python-WebOb:\n\n- Security issues fixed:\n    * CVE-2026-44889: Fixed: Location header normalization during redirect leads\n      to open redirect (bsc#1268324)\n- Skip boken test with latest cpython interpreters  (bsc#1258223)\n- Skip test failing on Python 3.14\n\nChanges in python-PyGithub:\n\n- Fix: [SUSE:SLFO:Main] python-PyGithub fails to build on aarch64, ppc64le, s390x, x86_64 (bsc#1263802)\n\nChanges in python-soupsieve:\n\n- Fix: [SUSE:SLFO:Main] python-soupsieve:test fails to build on aarch64, ppc64le, s390x, x86_64 (bsc#1256316)\n","modified":"2026-06-30T18:24:45.198231381Z","published":"2026-06-26T07:41:11Z","related":["CVE-2026-44889"],"upstream":["CVE-2026-44889"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1256310"},{"type":"REPORT","url":"https://bugzilla.suse.com/1256316"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258223"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261918"},{"type":"REPORT","url":"https://bugzilla.suse.com/1263802"},{"type":"REPORT","url":"https://bugzilla.suse.com/1268243"},{"type":"REPORT","url":"https://bugzilla.suse.com/1268324"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-44889"}],"affected":[{"package":{"name":"python-Markdown","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-Markdown&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1","python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1","python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1","python313-WebOb":"1.8.9-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}},{"package":{"name":"python-PyGithub","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-PyGithub&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.1-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1","python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1","python313-WebOb":"1.8.9-160000.3.1","python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}},{"package":{"name":"python-WebOb","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-WebOb&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1","python313-WebOb":"1.8.9-160000.3.1","python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1","python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}},{"package":{"name":"python-apache-libcloud","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-apache-libcloud&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1","python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1","python313-WebOb":"1.8.9-160000.3.1","python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}},{"package":{"name":"python-handy-archives","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-handy-archives&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"python313-WebOb":"1.8.9-160000.3.1","python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1","python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1","python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}},{"package":{"name":"python-joblib","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-joblib&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.2-160000.1.1"}]}],"ecosystem_specific":{"binaries":[{"python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1","python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1","python313-WebOb":"1.8.9-160000.3.1","python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}},{"package":{"name":"python-soupsieve","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/python-soupsieve&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-160000.3.1"}]}],"ecosystem_specific":{"binaries":[{"python313-joblib":"1.5.2-160000.1.1","python313-soupsieve":"2.6-160000.3.1","python-WebOb-doc":"1.8.9-160000.3.1","python313-Markdown":"3.8.2-160000.3.1","python313-PyGithub":"2.6.1-160000.3.1","python313-WebOb":"1.8.9-160000.3.1","python313-apache-libcloud":"3.8.0-160000.3.1","python313-handy-archives":"0.2.0-160000.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21063-1.json"}}],"schema_version":"1.7.5"}