This update for python311 fixes the following issues:
Security issues fixed:
* CVE-2026-3446: base64 decoding stops at first padded quad by default and
ignores other information that could be processed (bsc#1261970).
Other updates and bugfixes:
* Rewrite structure of Python interpreter packages. `python3*` symbols should
be now provided by real `python3` packages and its subpackages instead of
the virtual provides (bsc#1258364).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* Public Cloud Module 15-SP4
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-2723=1
* openSUSE Leap 15.4
zypper in -t patch SUSE-2026-2723=1
* openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64)
* python311-core-debugsource-3.11.15-150400.9.88.1
* python311-testsuite-3.11.15-150400.9.88.1
* python311-curses-debuginfo-3.11.15-150400.9.88.1
* python311-doc-devhelp-3.11.15-150400.9.88.1
* python311-dbm-3.11.15-150400.9.88.1
* python311-testsuite-debuginfo-3.11.15-150400.9.88.1
* python311-idle-3.11.15-150400.9.88.1
* python311-debugsource-3.11.15-150400.9.88.1
* python311-tools-3.11.15-150400.9.88.1
* libpython3_11-1_0-3.11.15-150400.9.88.1
* python311-base-3.11.15-150400.9.88.1
* python311-doc-3.11.15-150400.9.88.1
* python311-curses-3.11.15-150400.9.88.1
* python311-devel-3.11.15-150400.9.88.1
* libpython3_11-1_0-debuginfo-3.11.15-150400.9.88.1
* python311-3.11.15-150400.9.88.1
* python311-tk-debuginfo-3.11.15-150400.9.88.1
* python311-tk-3.11.15-150400.9.88.1
* python311-dbm-debuginfo-3.11.15-150400.9.88.1
* python311-debuginfo-3.11.15-150400.9.88.1
* python311-base-debuginfo-3.11.15-150400.9.88.1
* openSUSE Leap 15.4 (x86_64)
*...
Read the Full Advisory* bsc#1258364
* bsc#1261970
## References:
* https://www.suse.com/security/cve/CVE-2026-3446.html
* https://bugzilla.suse.com/show_bug.cgi?id=1258364
* https://bugzilla.suse.com/show_bug.cgi?id=1261970
Get the latest Linux and open source security news straight to your inbox.