Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1503-1

Опубликовано: 20 апр. 2026
Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issue:

  • CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970).

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP7
libpython2_7-1_0-2.7.18-150000.117.1
python-2.7.18-150000.117.1
python-base-2.7.18-150000.117.1
python-curses-2.7.18-150000.117.1
python-gdbm-2.7.18-150000.117.1
python-xml-2.7.18-150000.117.1

Ссылки

Описание

When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP7:libpython2_7-1_0-2.7.18-150000.117.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:python-2.7.18-150000.117.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:python-base-2.7.18-150000.117.1
SUSE Linux Enterprise Module for Package Hub 15 SP7:python-curses-2.7.18-150000.117.1
Ссылки