An update that solves one vulnerability and has one security fix can now be installed.. # Security update for python312 Announcement ID: SUSE-SU-2026:1502-1 Release Date: 2026-04-20T16:17:01Z Rating: moderate References: * bsc#1258364 * bsc#1261970 Cross-References: * CVE-2026-3446 CVSS scores: * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1502=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python312-3.12.13-150600.3.56.1 * python312-debuginfo-3.12.13-150600.3.56.1 * python312-base-3.12.13-150600.3.56.1 * python312-core-debugsource-3.12.13-150600.3.56.1 * python312-doc-devhelp-3.12.13-150600.3.56.1 * python312-testsuite-3.12.13-150600.3.56.1 * python312-tk-3.12.13-150600.3.56.1 * python312-dbm-debuginfo-3.12.13-150600.3.56.1 * libpython3_12-1_0-debuginfo-3.12.13-150600.3.56.1 * python312-tools-3.12.13-150600.3.56.1 * python312-devel-3.12.13-150600.3.56.1 * python312-base-debuginfo-3.12.13-150600.3.56.1 * python312-tk-debuginfo-3.12.13-150600.3.56.1 * libpython3_12-1_0-3.12.13-150600.3.56.1 *python312-debugsource-3.12.13-150600.3.56.1 * python312-dbm-3.12.13-150600.3.56.1 * python312-testsuite-debuginfo-3.12.13-150600.3.56.1 * python312-curses-3.12.13-150600.3.56.1 * python312-curses-debuginfo-3.12.13-150600.3.56.1 * python312-idle-3.12.13-150600.3.56.1 * python312-doc-3.12.13-150600.3.56.1 * openSUSE Leap 15.6 (x86_64) * libpython3_12-1_0-32bit-3.12.13-150600.3.56.1 * python312-32bit-debuginfo-3.12.13-150600.3.56.1 * python312-base-32bit-3.12.13-150600.3.56.1 * python312-32bit-3.12.13-150600.3.56.1 * python312-base-32bit-debuginfo-3.12.13-150600.3.56.1 * libpython3_12-1_0-32bit-debuginfo-3.12.13-150600.3.56.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-base-64bit-debuginfo-3.12.13-150600.3.56.1 * libpython3_12-1_0-64bit-3.12.13-150600.3.56.1 * python312-64bit-3.12.13-150600.3.56.1 * python312-base-64bit-3.12.13-150600.3.56.1 * libpython3_12-1_0-64bit-debuginfo-3.12.13-150600.3.56.1 * python312-64bit-debuginfo-3.12.13-150600.3.56.1 ## References: * https://www.suse.com/security/cve/CVE-2026-3446.html * https://bugzilla.suse.com/show_bug.cgi?id=1258364 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 . SUSE 2026 advisory for python312 tackles a major issue with Base64 decoder and requires user action.. openSUSE security, python312 patch, security advisory SUSE, CVE-2026-3446, python package security. . LinuxSecurity.com Team
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-7236-1 January 28, 2025 linux, linux-azure, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-lowlatency, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-lowlatency: Linux low latency kernel - linux-nvidia: Linux kernel for NVIDIA systems - linux-nvidia-lowlatency: Linux low latency kernel for NVIDIA systems - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-gcp-6.8: Linux kernel for Google Cloud Platform (GCP) systems - linux-hwe-6.8: Linux hardware enablement (HWE) kernel - linux-nvidia-6.8: Linux kernel for NVIDIA systems - linux-oracle-6.8: Linux kernel for Oracle Cloud systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; - VMware vSockets driver; (CVE-2024-53164, CVE-2024-53103, CVE-2024-53141) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS linux-image-6.8.0-1004-gkeop 6.8.0-1004.6 linux-image-6.8.0-1017-gke 6.8.0-1017.21 linux-image-6.8.0-1018-raspi 6.8.0-1018.20 linux-image-6.8.0-1019-ibm 6.8.0-1019.19 linux-image-6.8.0-1019-oracle 6.8.0-1019.20 linux-image-6.8.0-1019-oracle-64k 6.8.0-1019.20 linux-image-6.8.0-1021-azure 6.8.0-1021.25 linux-image-6.8.0-1021-azure-fde 6.8.0-1021.25 linux-image-6.8.0-1021-gcp 6.8.0-1021.23 linux-image-6.8.0-1021-nvidia 6.8.0-1021.23 linux-image-6.8.0-1021-nvidia-64k 6.8.0-1021.23 linux-image-6.8.0-1021-nvidia-lowlatency 6.8.0-1021.23.1 linux-image-6.8.0-1021-nvidia-lowlatency-64k 6.8.0-1021.23.1 linux-image-6.8.0-52-generic 6.8.0-52.53 linux-image-6.8.0-52-generic-64k 6.8.0-52.53 linux-image-6.8.0-52-lowlatency 6.8.0-52.53.1 linux-image-6.8.0-52-lowlatency-64k 6.8.0-52.53.1 linux-image-azure 6.8.0-1021.25 linux-image-azure-fde 6.8.0-1021.25 linux-image-gcp 6.8.0-1021.23 linux-image-generic 6.8.0-52.53 linux-image-generic-64k 6.8.0-52.53 linux-image-generic-64k-hwe-24.04 6.8.0-52.53 linux-image-generic-hwe-24.04 6.8.0-52.53 linux-image-generic-lpae 6.8.0-52.53 linux-image-gke 6.8.0-1017.21 linux-image-gkeop 6.8.0-1004.6 linux-image-gkeop-6.8 6.8.0-1004.6 linux-image-ibm 6.8.0-1019.19 linux-image-ibm-classic 6.8.0-1019.19 linux-image-ibm-lts-24.04 6.8.0-1019.19 linux-image-kvm 6.8.0-52.53 linux-image-lowlatency 6.8.0-52.53.1 linux-image-lowlatency-64k 6.8.0-52.53.1 linux-image-lowlatency-64k-hwe-24.04 6.8.0-52.53.1 linux-image-lowlatency-hwe-24.04 6.8.0-52.53.1 linux-image-nvidia 6.8.0-1021.23 linux-image-nvidia-64k 6.8.0-1021.23 linux-image-nvidia-lowlatency 6.8.0-1021.23.1 linux-image-nvidia-lowlatency-64k 6.8.0-1021.23.1 linux-image-oracle 6.8.0-1019.20 linux-image-oracle-64k 6.8.0-1019.20 linux-image-raspi 6.8.0-1018.20 linux-image-virtual 6.8.0-52.53 linux-image-virtual-hwe-24.04 6.8.0-52.53 Ubuntu 22.04 LTS linux-image-6.8.0-1019-oracle 6.8.0-1019.20~22.04.1 linux-image-6.8.0-1019-oracle-64k 6.8.0-1019.20~22.04.1 linux-image-6.8.0-1021-gcp 6.8.0-1021.23~22.04.1 linux-image-6.8.0-1021-nvidia 6.8.0-1021.23~22.04.1 linux-image-6.8.0-1021-nvidia-64k 6.8.0-1021.23~22.04.1 linux-image-6.8.0-52-generic 6.8.0-52.53~22.04.1 linux-image-6.8.0-52-generic-64k 6.8.0-52.53~22.04.1 linux-image-gcp 6.8.0-1021.23~22.04.1 linux-image-generic-64k-hwe-22.04 6.8.0-52.53~22.04.1 linux-image-generic-hwe-22.04 6.8.0-52.53~22.04.1 linux-image-nvidia-6.8 6.8.0-1021.23~22.04.1 linux-image-nvidia-64k-6.8 6.8.0-1021.23~22.04.1 linux-image-nvidia-64k-hwe-22.04 6.8.0-1021.23~22.04.1 linux-image-nvidia-hwe-22.04 6.8.0-1021.23~22.04.1 linux-image-oem-22.04 6.8.0-52.53~22.04.1 linux-image-oem-22.04a 6.8.0-52.53~22.04.1 linux-image-oem-22.04b 6.8.0-52.53~22.04.1 linux-image-oem-22.04c 6.8.0-52.53~22.04.1 linux-image-oem-22.04d 6.8.0-52.53~22.04.1 linux-image-oracle 6.8.0-1019.20~22.04.1 linux-image-oracle-64k 6.8.0-1019.20~22.04.1 linux-image-oracle-edge 6.8.0-1019.20~22.04.1 linux-image-virtual-hwe-22.04 6.8.0-52.53~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc),a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7236-1 CVE-2024-53103, CVE-2024-53141, CVE-2024-53164 Package Information: https://launchpad.net/ubuntu/+source/linux/6.8.0-52.53 https://launchpad.net/ubuntu/+source/linux-azure/6.8.0-1021.25 https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1021.23 https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1017.21 https://launchpad.net/ubuntu/+source/linux-gkeop/6.8.0-1004.6 https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1019.19 https://launchpad.net/ubuntu/+source/linux-lowlatency/6.8.0-52.53.1 https://launchpad.net/ubuntu/+source/linux-nvidia/6.8.0-1021.23 https://launchpad.net/ubuntu/+source/linux-nvidia-lowlatency/6.8.0-1021.23.1 https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1019.20 https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1018.20 https://launchpad.net/ubuntu/+source/linux-gcp-6.8/6.8.0-1021.23~22.04.1 https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-52.53~22.04.1 https://launchpad.net/ubuntu/+source/linux-nvidia-6.8/6.8.0-1021.23~22.04.1 https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8.0-1019.20~22.04.1 . Multiple vulnerabilities have been addressed in the Linux kernel for Ubuntu systems. Quick update is advised.. Ubuntu Kernel Security, Linux Kernel Update, Security Advisory, Ubuntu Security Fixes. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.