{"schema_version":"2","view":"grouped","data":[{"id":70963,"cve_ids":["CVE-2026-63374","CVE-2026-64847"],"payload":{"kind":"advisory","title":"Security update for python-anyio","summary":"This update for python-anyio fixes the following issues: - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475).","evidence":"osv:SUSE-SU-2026:4416-1","products":[{"name":{"value":"python-anyio","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/13/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"SUSE-SU-2026:4416-1","aliases":["SUSE-SU-2026:4416-1"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}}],"modified":"2026-10-02T18:30:38.509005042Z","provider":"osv","upstream":["CVE-2026-63374","CVE-2026-64847"],"references":["https://www.suse.com/support/update/announcement/2026/suse-su-20264416-1/","https://bugzilla.suse.com/1281475","https://bugzilla.suse.com/1281476","https://www.suse.com/security/cve/CVE-2026-63374","https://www.suse.com/security/cve/CVE-2026-64847"]},"related_cves":[{"value":"CVE-2026-63374","evidence":"/upstream"},{"value":"CVE-2026-64847","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:84a64e1c-ba85-4467-8c3b-2f7644ef9227","priority":{"reasons":["linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-63374","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.3,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"anyio","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63374","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/SUSE-SU-2026%3A4416-1","advisory_id":"84a64e1c-ba85-4467-8c3b-2f7644ef9227","event_types":["advisory"],"published_at":"2026-10-25T22:45:49.553113+00:00","technologies":["core-osv","python-anyio"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T09:18:08+00:00","detail_url":"/advisories/advisory%3A84a64e1c-ba85-4467-8c3b-2f7644ef9227","group":{"id":"advisory:84a64e1c-ba85-4467-8c3b-2f7644ef9227","revision":1,"primary_event_id":71334,"change":"published","superseded_by":[],"changed":{"id":71334,"cve_ids":["CVE-2026-63374","CVE-2026-64847"],"payload":{"kind":"advisory","title":"Security update for python-anyio","summary":"This update for python-anyio fixes the following issues: - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475).","evidence":"osv:SUSE-SU-2026:4416-1","products":[{"name":{"value":"python-anyio","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/13/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"SUSE-SU-2026:4416-1","aliases":["SUSE-SU-2026:4416-1"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}}],"modified":"2026-10-02T18:30:38.509005042Z","provider":"osv","upstream":["CVE-2026-63374","CVE-2026-64847"],"references":["https://www.suse.com/support/update/announcement/2026/suse-su-20264416-1/","https://bugzilla.suse.com/1281475","https://bugzilla.suse.com/1281476","https://www.suse.com/security/cve/CVE-2026-63374","https://www.suse.com/security/cve/CVE-2026-64847"]},"related_cves":[{"value":"CVE-2026-63374","evidence":"/upstream"},{"value":"CVE-2026-64847","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:84a64e1c-ba85-4467-8c3b-2f7644ef9227","priority":{"reasons":["linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-63374","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.3,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"anyio","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63374","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/SUSE-SU-2026%3A4416-1","advisory_id":"84a64e1c-ba85-4467-8c3b-2f7644ef9227","event_types":["advisory"],"published_at":"2026-10-25T22:45:49.553113+00:00","technologies":["core-osv","python-anyio"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T09:18:08+00:00","detail_url":"/events/71334"},"members":[{"id":71334,"cve_ids":["CVE-2026-63374","CVE-2026-64847"],"payload":{"kind":"advisory","title":"Security update for python-anyio","summary":"This update for python-anyio fixes the following issues: - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). - CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475).","evidence":"osv:SUSE-SU-2026:4416-1","products":[{"name":{"value":"python-anyio","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"python-anyio","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.1.0-150400.9.11.1","evidence":"/affected/13/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"SUSE-SU-2026:4416-1","aliases":["SUSE-SU-2026:4416-1"],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP4","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP5","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%203%2015%20SP7","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP7"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-150400.9.11.1"}]}],"package":{"name":"python-anyio","purl":"pkg:rpm/suse/python-anyio&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6"},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4416-1.json"},"ecosystem_specific":{"binaries":[{"python311-anyio":"4.1.0-150400.9.11.1"}]}}],"modified":"2026-10-02T18:30:38.509005042Z","provider":"osv","upstream":["CVE-2026-63374","CVE-2026-64847"],"references":["https://www.suse.com/support/update/announcement/2026/suse-su-20264416-1/","https://bugzilla.suse.com/1281475","https://bugzilla.suse.com/1281476","https://www.suse.com/security/cve/CVE-2026-63374","https://www.suse.com/security/cve/CVE-2026-64847"]},"related_cves":[{"value":"CVE-2026-63374","evidence":"/upstream"},{"value":"CVE-2026-64847","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:84a64e1c-ba85-4467-8c3b-2f7644ef9227","priority":{"reasons":["linked_severity"],"severity":"critical","linked_cves":[{"cve":"CVE-2026-63374","metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.3,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","userInteraction":"NONE","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","subIntegrityImpact":"NONE","vulnIntegrityImpact":"HIGH","subAvailabilityImpact":"NONE","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","vulnConfidentialityImpact":"HIGH"}}],"products":[{"name":{"value":"anyio","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-63374","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/SUSE-SU-2026%3A4416-1","advisory_id":"84a64e1c-ba85-4467-8c3b-2f7644ef9227","event_types":["advisory"],"published_at":"2026-10-25T22:45:49.553113+00:00","technologies":["core-osv","python-anyio"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-02T09:18:08+00:00","detail_url":"/events/71334"}]}}],"next_after":70963,"next_before":70963}