SUSE-SU-2024:0947-1

Details

Description of the patch:

This update for python-uamqp fixes the following issues:

CVE-2024-27099: Fixed potential double-free in link_frame_received() (bsc#1220535).

Bug fixes:

Fixed compatibility with OpenSSL 3.x (bsc#1217782)

Affected Packages

python3-uamqp

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP4

Fixed in:

1.5.3-150100.4.18.1

References

ADVISORY

https://bugzilla.suse.com/1217782

ADVISORY

https://bugzilla.suse.com/1220535

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2024-March/018197.html

ADVISORY

https://www.suse.com/security/cve/CVE-2024-27099/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2024/suse-su-20240947-1/