Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

SUSE-SU-2023:0223-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2023:0223-1

SUSE-SU-2023:0223-1

UNKNOWN

Security update for python-setuptools

Published Feb 1, 2023

Modified 3 years ago

Fix available

Details

This update for python-setuptools fixes the following issues:

CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

Affected Packages

python-setuptools

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Real Time 15 SP3openSUSE Leap Micro 5.2

Fixed in:

40.5.0-150100.6.6.1

python3-setuptools

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Real Time 15 SP3openSUSE Leap Micro 5.2

Fixed in:

40.5.0-150100.6.6.1

python-setuptools-test

SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

40.5.0-150100.6.6.1

python-setuptools-wheel

SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

40.5.0-150100.6.6.1

python3-setuptools-test

SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

40.5.0-150100.6.6.1

python3-setuptools-wheel

SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

40.5.0-150100.6.6.1

References

REPORT

https://bugzilla.suse.com/1206667

WEB

https://www.suse.com/security/cve/CVE-2022-40897

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230223-1/

Upstream

CVE-2022-40897

Ecosystems

SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Real Time 15 SP3 openSUSE Leap Micro 5.2

Timeline

PublishedFeb 1, 2023

ModifiedFeb 1, 2023