SUSE-SU-2024:0785-1

Details

Description of the patch:

This update for python3 fixes the following issues:

CVE-2023-40217: Fixed bypass TLS handshake on closed sockets (bsc#1214692).
CVE-2023-6597: Fixed symlink bug in cleanup (bsc#1219666).

Affected Packages

libpython3_4m1_0

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.124.1

python3

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.124.1

python3-base

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.124.1

python3-curses

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.124.1

libpython3_4m1_0-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.124.1

python3-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

3.4.10-25.124.1

python3-tk

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.124.1

python3-dbm

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

3.4.10-25.124.1

References

ADVISORY

https://bugzilla.suse.com/1214692

ADVISORY

https://bugzilla.suse.com/1219666

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2024-March/018102.html

ADVISORY

https://www.suse.com/security/cve/CVE-2023-40217/

ADVISORY

https://www.suse.com/security/cve/CVE-2023-6597/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2024/suse-su-20240785-1/