This update for python3 fixes the following issues:
CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227)
CVE-2024-7592: quadratic algorithm used when parsing cookies leads to excessive resource consumption. (bsc#1229596)
Affected Packages
libpython3_4m1_0
SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5
Fixed in:
3.4.10-25.139.1
python3
SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5
Fixed in:
3.4.10-25.139.1
python3-base
SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5
Fixed in:
3.4.10-25.139.1
python3-curses
SUSE Linux Enterprise Module for Web and Scripting 12SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5
Fixed in:
3.4.10-25.139.1
libpython3_4m1_0-32bit
SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5
Fixed in:
3.4.10-25.139.1
python3-devel
SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5
Fixed in:
3.4.10-25.139.1
python3-tk
SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5
Fixed in:
3.4.10-25.139.1
python3-dbm
SUSE Linux Enterprise Software Development Kit 12 SP5