Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3113-1

Опубликовано: 17 июл. 2026
Источник: suse-cvrf

Описание

Security update for python-msgpack

This update for python-msgpack fixes the following issue

  • CVE-2026-57585: Unpacker reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Micro 5.3
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Micro 5.4
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Micro 5.5
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Module for Public Cloud 15 SP7
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Server 15 SP6-LTSS
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
python3-msgpack-0.5.6-150100.3.6.1

Ссылки

Описание

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack. If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. This issue has been fixed in version 1.2.1.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python3-msgpack-0.5.6-150100.3.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python3-msgpack-0.5.6-150100.3.6.1
Ссылки