SUSE-SU-2023:2144-1

Details

Description of the patch:

This update for python-cryptography fixes the following issues:

CVE-2023-23931: Fixed memory corruption in Cipher.update_into (bsc#1208036).

Affected Packages(23 packages)

python-cryptography

SUSE OpenStack Cloud 8SUSE OpenStack Cloud Crowbar 8

Fixed in:

2.0.3-3.14.2

venv-openstack-aodh-x86_64

SUSE OpenStack Cloud 8

Fixed in:

5.1.1~dev7-12.44.1

venv-openstack-barbican-x86_64

SUSE OpenStack Cloud 8

Fixed in:

5.0.2~dev3-12.47.1

venv-openstack-ceilometer-x86_64

SUSE OpenStack Cloud 8

Fixed in:

9.0.8~dev7-12.42.1

venv-openstack-cinder-x86_64

SUSE OpenStack Cloud 8

Fixed in:

11.2.3~dev29-14.46.1

venv-openstack-designate-x86_64

SUSE OpenStack Cloud 8

Fixed in:

5.0.3~dev7-12.43.1

venv-openstack-freezer-x86_64

SUSE OpenStack Cloud 8

Fixed in:

5.0.0.0~xrc2~dev2-10.40.1

venv-openstack-glance-x86_64

SUSE OpenStack Cloud 8

Fixed in:

15.0.3~dev3-12.43.1

venv-openstack-heat-x86_64

SUSE OpenStack Cloud 8

Fixed in:

9.0.8~dev22-12.49.1

venv-openstack-horizon-x86_64

SUSE OpenStack Cloud 8

Fixed in:

12.0.5~dev6-14.52.1

References

ADVISORY

https://bugzilla.suse.com/1208036

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2023-May/029303.html

ADVISORY

https://www.suse.com/security/cve/CVE-2023-23931/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20232144-1/