CPython: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 6.0
  CVE-2026-3446

  Base64 decoding stops at first padded quad by default

  When calling base64.b64decode() or related functions the decoding process would stop after encountering the first padded quad regardless of whether there was more information to be processed. This can lead to data being accepted which may be processed differe…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Wolfi
  Apr 10, 2026
• Medium 5.7
  CVE-2026-1502

  HTTP client proxy tunnel headers not validated for CR/LF

  CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 10, 2026

Revision history

1. 2026-10-20 #39

   Neue Updates von SUSE aufgenommen

2. 2026-10-19 #38

   Neue Updates von SUSE aufgenommen

3. 2026-10-07 #37

   Neue Updates von Debian aufgenommen

4. 2026-10-06 #36

   Neue Updates von SUSE aufgenommen

5. 2026-09-20 #35

   Neue Updates von SUSE aufgenommen

6. 2026-09-03 #34

   Neue Updates von Dell und SUSE aufgenommen

7. 2026-08-31 #33

   Neue Updates von Dell und F5 aufgenommen

8. 2026-08-27 #32

   Neue Updates von Red Hat aufgenommen

9. 2026-08-26 #31

   Neue Updates von SUSE aufgenommen

10. 2026-08-24 #30

    Neue Updates von SUSE aufgenommen

11. 2026-08-23 #29

    Neue Updates von Red Hat aufgenommen

12. 2026-08-19 #28

    Neue Updates von SUSE aufgenommen

13. 2026-08-04 #27

    Neue Updates von Amazon aufgenommen

14. 2026-08-03 #26

    Neue Updates von SUSE aufgenommen

15. 2026-07-30 #25

    Neue Updates von openSUSE aufgenommen

16. 2026-07-20 #24

    Neue Updates von SUSE aufgenommen

17. 2026-07-19 #23

    Neue Updates von SUSE aufgenommen

18. 2026-07-09 #22

    Neue Updates von IBM aufgenommen

19. 2026-07-06 #21

    Neue Updates von Ubuntu aufgenommen

20. 2026-07-01 #20

    Neue Updates von SUSE aufgenommen

21. 2026-06-28 #19

    Neue Updates von SUSE aufgenommen

22. 2026-06-25 #18

    Neue Updates von openSUSE aufgenommen

23. 2026-06-22 #17

    Neue Updates von Oracle Linux aufgenommen

24. 2026-06-21 #16

    Neue Updates von SUSE und openSUSE aufgenommen

25. 2026-06-08 #15

    Neue Updates von SUSE aufgenommen

References

• SUSE Security Update SUSE-SU-2026:2723-1 vom 2026-07-02
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027165.html
• Python Advisory vom 2026-04-12
  https://mail.python.org/archives/list/security-announce@python.org/thread/2IVPAEQWUJBCTQZEJEVTYCIKSMQPGRZ3/
• OSS Security Mailing List vom 2026-04-12
  https://seclists.org/oss-sec/2026/q2/98
• CVERecord vom 2026-04-12
  https://www.cve.org/CVERecord?id=CVE-2026-1502
• Python Advisory vom 2026-04-12
  https://mail.python.org/archives/list/security-announce@python.org/thread/F5ZT5ICGJ6CKXVUJ34YBVY7WOZ5SHG53/
• OSS Security Mailing List vom 2026-04-12
  https://seclists.org/oss-sec/2026/q2/99
• CVERecord vom 2026-04-12
  https://www.cve.org/CVERecord?id=CVE-2026-3446
• Fedora Security Advisory FEDORA-2026-6EF614F23C vom 2026-04-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-6ef614f23c
• Fedora Security Advisory FEDORA-2026-E20864D099 vom 2026-04-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-e20864d099
• Fedora Security Advisory FEDORA-2026-F15653A0AA vom 2026-04-14
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f15653a0aa
• Fedora Security Advisory FEDORA-2026-A5BA8297FD vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-a5ba8297fd
• Fedora Security Advisory FEDORA-2026-763E814AFA vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-763e814afa
• Fedora Security Advisory FEDORA-2026-2DFCF9D705 vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-2dfcf9d705
• Fedora Security Advisory FEDORA-2026-841A2250E4 vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-841a2250e4
• Fedora Security Advisory FEDORA-2026-97A8EB204A vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-97a8eb204a
• Fedora Security Advisory FEDORA-2026-30FBC5A8B2 vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-30fbc5a8b2
• Fedora Security Advisory FEDORA-2026-DD34C4467B vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-dd34c4467b
• Fedora Security Advisory FEDORA-2026-6E657E937A vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-6e657e937a
• Fedora Security Advisory FEDORA-2026-43577DC43B vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-43577dc43b
• Fedora Security Advisory FEDORA-2026-BB0E94C26C vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-bb0e94c26c
• Fedora Security Advisory FEDORA-2026-F684007460 vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f684007460
• Fedora Security Advisory FEDORA-2026-952616F3D6 vom 2026-04-17
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-952616f3d6
• Fedora Security Advisory FEDORA-2026-1FD21102D1 vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-1fd21102d1
• Fedora Security Advisory FEDORA-2026-F04915EBFD vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-f04915ebfd
• Fedora Security Advisory FEDORA-2026-382DF0CFCE vom 2026-04-18
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-382df0cfce
• openSUSE Security Update OPENSUSE-SU-2026:10579-1 vom 2026-04-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JCWIETNQPG6OCNXKENXCDCU3OHOAPGL5/
• openSUSE Security Update OPENSUSE-SU-2026:10580-1 vom 2026-04-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EEDMKCDARG3O6P6UQTK52TGAOTANPT7D/
• SUSE Security Update SUSE-SU-2026:1503-1 vom 2026-04-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025476.html
• SUSE Security Update SUSE-SU-2026:1502-1 vom 2026-04-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025477.html
• Red Hat Security Advisory RHSA-2026:10118 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:10118
• Red Hat Security Advisory RHSA-2026:10117 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:10117
• Red Hat Security Advisory RHSA-2026:7443 vom 2026-04-24
  https://access.redhat.com/errata/RHSA-2026:7443
• Rocky Linux Security Advisory RLSA-2026:10950 vom 2026-04-28
  https://errata.build.resf.org/RLSA-2026:10950
• Red Hat Security Advisory RHSA-2026:10950 vom 2026-04-27
  https://access.redhat.com/errata/RHSA-2026:10950
• Oracle Linux Security Advisory ELSA-2026-10950 vom 2026-04-28
  https://linux.oracle.com/errata/ELSA-2026-10950.html
• openSUSE Security Update OPENSUSE-SU-2026:10648-1 vom 2026-04-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OXHGJMXUDOCG2I5BPJZODVN2BZU3NZKD/
• SUSE Security Update SUSE-SU-2026:21415-1 vom 2026-04-30
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025775.html
• SUSE Security Update SUSE-SU-2026:21447-1 vom 2026-05-04
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025807.html
• SUSE Security Update SUSE-SU-2026:1715-1 vom 2026-05-06
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025888.html
• SUSE Security Update SUSE-SU-2026:1818-1 vom 2026-05-13
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026020.html
• SUSE Security Update SUSE-SU-2026:1937-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026118.html
• SUSE Security Update SUSE-SU-2026:1947-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026108.html
• Red Hat Security Advisory RHSA-2026:19177 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19177
• Red Hat Security Advisory RHSA-2026:19019 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19019
• Red Hat Security Advisory RHSA-2026:19064 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19064
• Red Hat Security Advisory RHSA-2026:19176 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19176
• Red Hat Security Advisory RHSA-2026:21275 vom 2026-05-27
  https://access.redhat.com/errata/RHSA-2026:21275
• Rocky Linux Security Advisory RLSA-2026:19177 vom 2026-05-28
  https://errata.build.resf.org/RLSA-2026:19177
• Rocky Linux Security Advisory RLSA-2026:19176 vom 2026-05-30
  https://errata.build.resf.org/RLSA-2026:19176
• Rocky Linux Security Advisory RLSA-2026:19019 vom 2026-05-29
  https://errata.build.resf.org/RLSA-2026:19019
• SUSE Security Update SUSE-SU-2026:2298-1 vom 2026-06-08
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026606.html
• SUSE Security Update SUSE-SU-2026:2464-1 vom 2026-06-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/026846.html
• openSUSE Security Update OPENSUSE-SU-2026:11068-1 vom 2026-06-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2XFM5F5CQOFOUSJNVLMJEHFT7CGVINP7/
• Oracle Linux Security Advisory ELSA-2026-19176 vom 2026-06-23
  https://linux.oracle.com/errata/ELSA-2026-19176.html
• Oracle Linux Security Advisory ELSA-2026-19177 vom 2026-06-23
  https://linux.oracle.com/errata/ELSA-2026-19177.html
• openSUSE Security Update OPENSUSE-SU-2026:11100-1 vom 2026-06-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/32WFQRJOFQVQSHB7Y3OVEXRFBMGBNV2F/
• SUSE Security Update SUSE-SU-2026:2664-1 vom 2026-06-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-June/027020.html
• Ubuntu Security Notice USN-8509-1 vom 2026-07-06
  https://ubuntu.com/security/notices/USN-8509-1
• IBM Security Bulletin 7279712 vom 2026-07-10
  https://www.ibm.com/support/pages/node/7279712
• SUSE Security Update SUSE-SU-2026:3104-1 vom 2026-07-17
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027620.html
• SUSE Security Update SUSE-SU-2026:3132-1 vom 2026-07-20
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/027671.html
• openSUSE Security Update OPENSUSE-SU-2026:21459-1 vom 2026-07-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4F7TUOGVJJPRH5HJJ3XXZA6FEJ227FQE/
• SUSE Security Update SUSE-SU-2026:22959-1 vom 2026-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028103.html
• Amazon Linux Security Advisory ALAS2-2026-3852 vom 2026-08-05
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3852.html
• Amazon Linux Security Advisory ALAS2-2026-3845 vom 2026-08-05
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3845.html
• SUSE Security Update SUSE-SU-2026:3649-1 vom 2026-08-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028393.html
• Red Hat Security Advisory RHSA-2026:58420 vom 2026-08-21
  https://access.redhat.com/errata/RHSA-2026:58420
• SUSE Security Update SUSE-SU-2026:23191-1 vom 2026-08-24
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028465.html
• SUSE Security Update SUSE-SU-2026:23212-1 vom 2026-08-26
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028501.html
• Red Hat Security Advisory RHSA-2026:60511 vom 2026-08-27
  https://access.redhat.com/errata/RHSA-2026:60511
• Dell Security Advisory DSA-2026-386 vom 2026-09-01
  https://www.dell.com/support/kbdoc/000503504/dsa-2026-386-security-update-f
• F5 Security Advisory K000163140 vom 2026-08-31
  https://my.f5.com/manage/s/article/K000163140
• Dell Security Advisory DSA-2026-313 vom 2026-09-04
  https://www.dell.com/support/kbdoc/de-de/000505510/dsa-2026-313-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities
• SUSE Security Update SUSE-SU-2026:3855-1 vom 2026-09-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028654.html
• SUSE Security Update SUSE-SU-2026:23743-1 vom 2026-09-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029285.html
• SUSE Security Update SUSE-SU-2026:4534-1 vom 2026-10-06
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029610.html
• Debian Security Advisory DLA-4827 vom 2026-10-08
  https://lists.debian.org/debian-lts-announce/2026/10/msg00020.html
• SUSE Security Update SUSE-SU-2026:4743-1 vom 2026-10-19
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029901.html
• SUSE Security Update SUSE-SU-2026:4754-1 vom 2026-10-20
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029913.html