SUSE-SU-2024:0591-1

Details

Description of the patch:

This update for python-uamqp fixes the following issues:

CVE-2024-25110: Fixed a use-after-free in open_get_offered_capabilities() (bsc#1219867).

Affected Packages

python3-uamqp

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP4

Fixed in:

1.5.3-150100.4.13.1

References

ADVISORY

https://bugzilla.suse.com/1219867

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2024-February/017995.html

ADVISORY

https://www.suse.com/security/cve/CVE-2024-25110/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2024/suse-su-20240591-1/