SUSE-SU-2024:2900-1

HIGH7.0

Security update for python-setuptools

Published Aug 14, 2024

Modified 1 years ago

Fix available

Details

Description of the patch:

This update for python-setuptools fixes the following issues:

CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)

Affected Packages

python-setuptools

SUSE Linux Enterprise Module for Containers 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

40.6.2-4.24.1

python3-setuptools

SUSE Linux Enterprise Module for Public Cloud 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

40.6.2-4.24.1

References

ADVISORY

https://bugzilla.suse.com/1228105

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2024-August/036445.html

ADVISORY

https://www.suse.com/security/cve/CVE-2024-6345/

WEB

https://www.suse.com/support/security/rating/

ADVISORY