Release date:
2026-05-07 14:25:26 UTC
Description:
* SECURITY UPDATE: binascii.a2b_base64 / base64.b64decode stop decoding
after the first padded quad, silently dropping any excess data. The
behaviour can lead to data being accepted that other implementations
process differently.
- debian/patches/CVE-2026-3446.patch: backport of upstream commits
4561f6418a (main), e31c55121620 (3.14), 1f9958f909c1 (3.13). Treats
the pad character as non-alphabet data per RFC 4648 section 3.3:
the loop in binascii_a2b_base64 no longer breaks out on a pad
sequence; a `pads` counter is added so post-loop validation still
raises "Incorrect padding" for inputs that do not satisfy
`quad_pos + pads == 4`. The unused `binascii_find_valid` helper
is removed.
- CVE-2026-3446
Updated packages:
-
alt-python27_2.7.18-18_amd64.deb
sha:3ef7894df0d3e8b4c9fa4d6b11359cd2287da85f
-
alt-python27-debug_2.7.18-18_amd64.deb
sha:a4de11302222b15d18d707474907ed62d72a6b94
-
alt-python27-devel_2.7.18-18_amd64.deb
sha:d1dffba8042b66236eef75d95a617c4fdd9bd7b9
-
alt-python27-idle_2.7.18-18_amd64.deb
sha:b30a09bf80010f1c7e3f82c3ee7110b89fa15827
-
alt-python27-libs_2.7.18-18_amd64.deb
sha:3edbaafdc4f63be5ab38f0a598fc4b2f8068f2fd
-
alt-python27-test_2.7.18-18_amd64.deb
sha:844ee497126f75d218ca93f7a75ea7893385d9fd
-
alt-python27-tkinter_2.7.18-18_amd64.deb
sha:0aeaa910db3ab4ce4ed828ecddc2681bf59da097
-
alt-python27-tools_2.7.18-18_amd64.deb
sha:85d26a8e1d22015920d125e4d0ff6a1bc4c36c97
-
alt-python27_2.7.18-18_arm64.deb
sha:726f77e6107d9cbe8917f0e674c0a69b108d81fe
-
alt-python27-debug_2.7.18-18_arm64.deb
sha:7194deb947a4666cae1a32cec74a80b7387d3c93
-
alt-python27-devel_2.7.18-18_arm64.deb
sha:3c851ccabd79ba66dbaa0b1cc54c27bdad0b5da0
-
alt-python27-idle_2.7.18-18_arm64.deb
sha:2bf01c751f587c0fa0294b153dfd8782f0215589
-
alt-python27-libs_2.7.18-18_arm64.deb
sha:1c070944c5890b8f4680c3cb2e044e63528f97d9
-
alt-python27-test_2.7.18-18_arm64.deb
sha:3b9b0ffe8bb7b49329ba602bfeedf24f1818a053
-
alt-python27-tkinter_2.7.18-18_arm64.deb
sha:985e1b64bb74c51b70b19b09d0cc6bf52fc255cb
-
alt-python27-tools_2.7.18-18_arm64.deb
sha:07ce06cae36b49ba7336e6956a5d760732a8196e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
