SUSE-SU-2023:4220-1

UNKNOWN

Security update for python

Published Oct 26, 2023

Modified 2 years ago

Fix available

Details

This update for python fixes the following issues:

CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).

Affected Packages(15 packages)

python-base

SUSE Linux Enterprise Module for Package Hub 15 SP4SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Proxy 4.2SUSE Manager Server 4.2openSUSE Leap 15.4

Fixed in:

2.7.18-150000.57.1

python-devel

SUSE Linux Enterprise Module for Package Hub 15 SP4SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Server 4.2openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

libpython2_7-1_0

SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Proxy 4.2SUSE Manager Server 4.2openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

python

SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Proxy 4.2SUSE Manager Server 4.2openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

python-curses

SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Server 4.2openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

python-gdbm

SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Server 4.2openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

python-xml

SUSE Linux Enterprise Module for Package Hub 15 SP5SUSE Manager Server 4.2openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

libpython2_7-1_0-32bit

openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

python-32bit

openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

python-base-32bit

openSUSE Leap 15.4openSUSE Leap 15.5

Fixed in:

2.7.18-150000.57.1

References

https://bugzilla.suse.com/1210638

https://bugzilla.suse.com/1214685

https://bugzilla.suse.com/1214691

https://www.suse.com/security/cve/CVE-2022-48565

https://www.suse.com/security/cve/CVE-2022-48566

https://www.suse.com/security/cve/CVE-2023-27043

https://www.suse.com/support/update/announcement/2023/suse-su-20234220-1/

Upstream

CVE-2022-48565 CVE-2022-48566 CVE-2023-27043

Related

CVE-2022-48565 CVE-2022-48566 CVE-2023-27043

Ecosystems(6)

SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Manager Proxy 4.2 SUSE Manager Server 4.2 openSUSE Leap 15.4

Timeline

PublishedOct 26, 2023

ModifiedOct 26, 2023

SUSE-SU-2023:4220-1 | Mondoo Vulnerability Intelligence