SUSE-SU-2023:0088-2

Details

This update for python-wheel fixes the following issues:

CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).

Affected Packages

python-wheel

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Fixed in:

0.32.3-150100.6.5.1

python3-wheel

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSSUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

Fixed in:

0.32.3-150100.6.5.1

References

REPORT

https://bugzilla.suse.com/1206670

WEB

https://www.suse.com/security/cve/CVE-2022-40898

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230088-2/