Skip to content
OpenAdvisories
Medium RHSA-2026:60511 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 28, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python3.11 0:3.11.16-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.11-debug 0:3.11.16-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.11-devel 0:3.11.16-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.11-idle 0:3.11.16-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.11-libs 0:3.11.16-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.11-test 0:3.11.16-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.11-tkinter 0:3.11.16-1.1.hum1

Vulnerabilities 1

  • Medium 6.0
    CVE-2026-3446

    Base64 decoding stops at first padded quad by default

    When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differe…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-3446
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60511.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2457410
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-3446
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-3446
  • article
    https://github.com/python/cpython/commit/1f9958f909c1b41a4ffc0b613ef8ec8fa5e7c474
  • article
    https://github.com/python/cpython/commit/4561f6418a691b3e89aef0901f53fe0dfb7f7c0e
  • article
    https://github.com/python/cpython/commit/e31c55121620189a0d1a07b689762d8ca9c1b7fa
  • article
    https://github.com/python/cpython/issues/145264
  • article
    https://github.com/python/cpython/pull/145267
  • article
    https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/