SUSE-SU-2023:2897-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:2897-1

MEDIUM4.7

Security update for python-azure-core, python-azure-storage-blob

Published Jul 20, 2023

Modified 2 years ago

Fix available

Details

Description of the patch:

This update for python-azure-core, python-azure-storage-blob fixes the following issues:

Security fixes:

CVE-2022-30187: Fixed information disclosure vulnerability (bsc#1202088).

Recommended fixes:

New upstream release version 1.23.1 to SLE 15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629).

Affected Packages

python2-azure-core

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise Module for Public Cloud 15 SP1

Fixed in:

1.23.1-150100.3.13.1

python2-azure-storage-blob

Fixed in:

12.13.1-150100.3.10.1

python2-typing_extensions

Fixed in:

3.10.0.0-150100.3.5.1

python3-azure-core

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

1.23.1-150100.3.13.1

python3-azure-storage-blob

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

12.13.1-150100.3.10.1

python3-typing_extensions

SUSE Enterprise Storage 6SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP1SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

3.10.0.0-150100.3.5.1

References

ADVISORY

https://bugzilla.suse.com/1199282

ADVISORY

https://bugzilla.suse.com/1202088

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2024-February/034403.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-30187/

WEB