openSUSE published a moderate security patch to resolve CVE-2026-49852 within the joserfc cryptographic library. The update bumps both the python313-joserfc and python314-joserfc packages to version 1.7.2-2.1 across the official software repositories.

openSUSE-SU-2026:11183-1: moderate: python313-joserfc-1.7.2-2.1 on GA media

openSUSE-SU-2026:11183-1: moderate: python313-joserfc-1.7.2-2.1 on GA media

# python313-joserfc-1.7.2-2.1 on GA media

Announcement ID: openSUSE-SU-2026:11183-1
Rating: moderate

Cross-References:

* CVE-2026-49852

Affected Products:

* openSUSE Tumbleweed

An update that solves one vulnerability can now be installed.

## Description:

These are all security issues fixed in the python313-joserfc-1.7.2-2.1 package on the GA media of openSUSE Tumbleweed.

## Package List:

* openSUSE Tumbleweed:
* python313-joserfc 1.7.2-2.1
* python314-joserfc 1.7.2-2.1

## References:

* https://www.suse.com/security/cve/CVE-2026-49852.html