Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:0226-1

Опубликовано: 22 янв. 2026
Источник: suse-cvrf

Описание

Security update for python-marshmallow

This update for python-marshmallow fixes the following issues:

  • CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).

Список пакетов

Image SLES15-SP6
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-Azure-3P
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-BYOS
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-BYOS-Azure
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-SAP-Azure-3P
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-Azure-3P
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-Azure-Basic
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-Azure-Standard
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-BYOS-Azure
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-HPC-Azure
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-Hardened-BYOS-Azure
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-SAP-Azure
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-SAP-Azure-3P
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-SAP-Hardened-Azure
python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP7-SAPCAL-Azure
python311-marshmallow-3.20.2-150400.9.10.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4
python311-marshmallow-3.20.2-150400.9.10.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5
python311-marshmallow-3.20.2-150400.9.10.1
SUSE Linux Enterprise Module for Public Cloud 15 SP6
python311-marshmallow-3.20.2-150400.9.10.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7
python311-marshmallow-3.20.2-150400.9.10.1
openSUSE Leap 15.6
python311-marshmallow-3.20.2-150400.9.10.1

Ссылки

Описание

Marshmallow is a lightweight library for converting complex objects to and from simple Python datatypes. In versions from 3.0.0rc1 to before 3.26.2 and from 4.0.0 to before 4.1.2, Schema.load(data, many=True) is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. This issue has been patched in version 3.26.2 and 4.1.2.

Затронутые продукты
Image SLES15-SP6-Azure-3P:python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-BYOS-Azure:python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-BYOS:python311-marshmallow-3.20.2-150400.9.10.1
Image SLES15-SP6-SAP-Azure-3P:python311-marshmallow-3.20.2-150400.9.10.1
Ссылки