Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:3932-1

Опубликовано: 03 сент. 2026
Источник: suse-cvrf

Описание

Security update for python-msgpack

This update for python-msgpack fixes the following issue:

  • CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python311-msgpack-1.0.7-150400.10.9.1

Ссылки

Описание

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack. If the Unpacker is used repeatedly after an error occurs, the process may crash with a SEGV. This issue has been fixed in version 1.2.1.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-msgpack-1.0.7-150400.10.9.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-msgpack-1.0.7-150400.10.9.1
Ссылки