SUSE-SU-2024:2479-1

MEDIUM6.2

Security update for python3

Published Jul 15, 2024

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for python3 fixes the following issues:

CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559).
CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448)
CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447)

Affected Packages(13 packages)

libpython3_6m1_0

SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP5SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

0:3.6.15-150300.10.65.1

python3

Fixed in:

0:3.6.15-150300.10.65.2

python3-base

Fixed in:

0:3.6.15-150300.10.65.1

python3-curses

Fixed in:

0:3.6.15-150300.10.65.2

python3-dbm

Fixed in:

0:3.6.15-150300.10.65.2

python3-devel

Fixed in:

0:3.6.15-150300.10.65.1

python3-idle

Fixed in:

0:3.6.15-150300.10.65.2

python3-tk

Fixed in:

0:3.6.15-150300.10.65.2

python3-tools

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

Fixed in:

0:3.6.15-150300.10.65.1

libpython3_6m1_0-32bit

openSUSE Leap 15.5openSUSE Leap 15.6

Fixed in:

0:3.6.15-150300.10.65.1

References

ADVISORY

https://bugzilla.suse.com/1219559

ADVISORY

https://bugzilla.suse.com/1220664

ADVISORY