exploitDog

SUSE-SU-2026:2723-1

Опубликовано: 01 июл. 2026

Источник: suse-cvrf

Описание

Security update for python311

This update for python311 fixes the following issues:

Security issues fixed:

CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970).

Other updates and bugfixes:

Rewrite structure of Python interpreter packages. python3* symbols should be now provided by real python3 packages and its subpackages instead of the virtual provides (bsc#1258364).

Список пакетов

Image SLES15-SP4-CHOST-BYOS

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-CHOST-BYOS-EC2

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-SAP

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-SAP-Azure

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-SAPCAL

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-SAPCAL-Azure

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP5-SAPCAL-Azure

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Image SLES15-SP5-SAPCAL-EC2

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

SUSE Linux Enterprise Module for Public Cloud 15 SP4

libpython3_11-1_0-3.11.15-150400.9.88.1

python311-3.11.15-150400.9.88.1

python311-base-3.11.15-150400.9.88.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262723-1/
Link for SUSE-SU-2026:2723-1
https://lists.suse.com/pipermail/sle-updates/2026-July/047852.html
E-Mail link for SUSE-SU-2026:2723-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1258364
SUSE Bug 1258364
https://bugzilla.suse.com/1261970
SUSE Bug 1261970
https://www.suse.com/security/cve/CVE-2026-3446/
SUSE CVE CVE-2026-3446 page

Описание

When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differently by other implementations. Use "validate=True" to enable stricter processing of base64 data.

Затронутые продукты

Image SLES15-SP4-CHOST-BYOS-EC2:libpython3_11-1_0-3.11.15-150400.9.88.1

Image SLES15-SP4-CHOST-BYOS-EC2:python311-3.11.15-150400.9.88.1

Image SLES15-SP4-CHOST-BYOS-EC2:python311-base-3.11.15-150400.9.88.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud:libpython3_11-1_0-3.11.15-150400.9.88.1

Ссылки