SUSE-SU-2025:20025-1
SUSE-SU-2025:20025-1 · Security update for python311, python-rpm-macros
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
This update for python311, python-rpm-macros fixes the following issues: python311: - CVE-2024-0450: Fixed zipfile module vulnerability with "quoted-overlap" zipbomb (bsc#1221854) - CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448) - CVE-2024-0397: Fixed memory race condition in ssl.SSLContext certificate store methods (bsc#1226447) - CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780) - Fixed executable bits for /usr/bin/idle* (bsc#1227378). python-rpm-macros: - Update to version 20240618.c146b29: * Add %FLAVOR_pytest and %FLAVOR_pyunittest variants - Update to version 20240618.1e386da: * Fix python_clone sed regex - Update to version 20240614.02920b8: * Make sure that RPM_BUILD_ROOT env is set * don't eliminate any cmdline arguments in the shebang line * Create python313 macros - Update to version 20240415.c664b45: * Fix typo 310 -> 312 in default-prjconf - Update to version 20240202.501440e: * SPEC0: Drop python39, add python312 to buildset (#169) - Update to version 20231220.98427f3: * fix python2_compile macro - Update to version 20231207.46c2ec3: * make FLAVOR_compile compatible with python2 - Update to version 20231204.dd64e74: * Combine fix_shebang in one line * New macro FLAVOR_fix_shebang_path * Use realpath in %python_clone macro shebang replacement * Compile and fix_shebang in %python_install macros - Update to version 20231010.0a1f0d9: * Revert "Compile and fix_shebang in %python_install macros" * gh#openSUSE/python-rpm-macros#163 - Update to version 20231010.a32e110: * Compile and fix_shebang in %python_install macros - Update to version 20231005.bf2d3ab: * Fix shebang also in sbin with macro _fix_shebang
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
python311 SUSE:Linux Micro 6.0
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.11.8-3.1
Auf 3.11.8-3.1 aktualisieren
python311-core SUSE:Linux Micro 6.0
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3.11.8-3.1
Auf 3.11.8-3.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2025/suse-su-202520025-1/
- https://bugzilla.suse.com/1174091
- https://bugzilla.suse.com/1189495
- https://bugzilla.suse.com/1221854
- https://bugzilla.suse.com/1226447
- https://bugzilla.suse.com/1226448
- https://bugzilla.suse.com/1227378
- https://bugzilla.suse.com/1228780
- https://bugzilla.suse.com/831629
- https://www.suse.com/security/cve/CVE-2019-20907
- https://www.suse.com/security/cve/CVE-2019-9947
- https://www.suse.com/security/cve/CVE-2020-15523
- https://www.suse.com/security/cve/CVE-2020-15801
- https://www.suse.com/security/cve/CVE-2022-25236
- https://www.suse.com/security/cve/CVE-2023-52425
- https://www.suse.com/security/cve/CVE-2024-0397
- https://www.suse.com/security/cve/CVE-2024-0450
- https://www.suse.com/security/cve/CVE-2024-4032
- https://www.suse.com/security/cve/CVE-2024-6923
- https://osv.dev/vulnerability/SUSE-SU-2025:20025-1