SUSE-SU-2026:2723-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2026:2723-1

MEDIUM5.3

Security update for python311

Published Jul 1, 2026

Modified 3 weeks ago

Fix available

Details

Description of the patch:

This update for python311 fixes the following issues:

Security issues fixed:

CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970).

Other updates and bugfixes:

Rewrite structure of Python interpreter packages. python3* symbols should be now provided by real python3 packages and its subpackages instead of the virtual provides (bsc#1258364).

Affected Packages

libpython3_11-1_0

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server for SAP Applications 15 SP4SUSE Manager Proxy 4.3

Fixed in:

3.11.15-150400.9.88.1

python311

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server for SAP Applications 15 SP4SUSE Manager Proxy 4.3

Fixed in:

3.11.15-150400.9.88.1

python311-base

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise Module for Public Cloud 15 SP4SUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server for SAP Applications 15 SP4SUSE Manager Proxy 4.3

Fixed in:

3.11.15-150400.9.88.1

References

https://bugzilla.suse.com/1258364

https://bugzilla.suse.com/1261970

https://lists.suse.com/pipermail/sle-updates/2026-July/047852.html

https://www.suse.com/security/cve/CVE-2026-3446/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2026/suse-su-20262723-1/

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

HighI:H

Availability

NoneA:N

5.3/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Upstream

Ecosystems(7)

SUSE Linux Enterprise High Performance Computing 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy 4.3

Timeline

PublishedJul 1, 2026

ModifiedJul 1, 2026