SUSE-SU-2024:2959-1

Details

Description of the patch:

This update for python3 fixes the following issues:

CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448).
Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378).

Affected Packages

libpython3_4m1_0

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.133.1

python3

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.133.1

python3-base

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.133.1

python3-curses

SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.133.1

libpython3_4m1_0-32bit

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.133.1

python3-devel

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

3.4.10-25.133.1

python3-tk

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

3.4.10-25.133.1

python3-dbm

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

3.4.10-25.133.1

References

ADVISORY

https://bugzilla.suse.com/1226448

ADVISORY

https://bugzilla.suse.com/1227378

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2024-August/036499.html

ADVISORY

https://www.suse.com/security/cve/CVE-2024-4032/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2024/suse-su-20242959-1/