p PatchFirst

SUSE-SU-2023:2783-1

SUSE-SU-2023:2783-1 · Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues: grpc: - Update in SLE-15 (bsc#1197726, bsc#1144068) protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681 - Fix a potential DoS issue when parsing with binary data in protobuf-java, CVE-2022-3171, bsc#1204256 - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530 - Add missing dependency of python subpackages on python-six (bsc#1177127) - Updated to version 3.9.2 (bsc#1162343) * Remove OSReadLittle* due to alignment requirements. * Don't use unions and instead use memcpy for the type swaps. - Disable LTO (bsc#1133277) python-aiocontextvars: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-avro: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-cryptography: - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331) * SECURITY ISSUE: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. CVE-2020-36242 python-cryptography-vectors: - update to 3.2 (bsc#1178168, CVE-2020-25659): * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability. * Support for OpenSSL 1.0.2 has been removed. * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder. - update to 3.3.2 (bsc#1198331) python-Deprecated: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 1.2.13: python-google-api-core: - Update to 1.14.2 python-googleapis-common-protos: - Update to 1.6.0 python-grpcio-gcp: - Initial spec for v0.2.2 python-humanfriendly: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 10.0 python-jsondiff: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.0 python-knack: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 0.9.0 python-opencensus: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Disable Python2 build - Update to 0.8.0 python-opencensus-context: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-opencensus-ext-threading: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial build version 0.1.2 python-opentelemetry-api: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Version update to 1.5.0 python-psutil: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 5.9.1 - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753) - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-PyGithub: - Update to 1.43.5: python-pytest-asyncio: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial release of python-pytest-asyncio 0.8.0 python-requests: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-websocket-client: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.2 python-websockets: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 9.1:

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • protobuf SUSE:Linux Enterprise Installer Updates 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 3.9.2-150100.8.3.3

    Mettez à jour vers 3.9.2-150100.8.3.3

  • python-websocket-client SUSE:Linux Enterprise Module for Basesystem 15 SP4

    Plages de versions concernées
    • ECOSYSTEM: < 1.3.2-150100.6.7.3

    Mettez à jour vers 1.3.2-150100.6.7.3

  • python-websocket-client SUSE:Linux Enterprise Module for Basesystem 15 SP5

    Plages de versions concernées
    • ECOSYSTEM: < 1.3.2-150100.6.7.3

    Mettez à jour vers 1.3.2-150100.6.7.3

  • python-humanfriendly SUSE:Linux Enterprise Module for Package Hub 15 SP5

    Plages de versions concernées
    • ECOSYSTEM: < 10.0-150100.6.3.3

    Mettez à jour vers 10.0-150100.6.3.3

  • azure-cli-core SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 2.17.1-150100.6.18.1

    Mettez à jour vers 2.17.1-150100.6.18.1

  • grpc SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.25.0-150100.3.3.3

    Mettez à jour vers 1.25.0-150100.3.3.3

  • protobuf SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 3.9.2-150100.8.3.3

    Mettez à jour vers 3.9.2-150100.8.3.3

  • python-deprecated SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.2.13-150100.3.3.3

    Mettez à jour vers 1.2.13-150100.3.3.3

  • python-pygithub SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.43.5-150100.3.3.3

    Mettez à jour vers 1.43.5-150100.3.3.3

  • python-twisted SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 17.9.0-150000.3.8.1

    Mettez à jour vers 17.9.0-150000.3.8.1

  • python-aiocontextvars SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 0.2.2-150100.3.3.3

    Mettez à jour vers 0.2.2-150100.3.3.3

  • python-avro SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.11.0-150100.3.3.3

    Mettez à jour vers 1.11.0-150100.3.3.3

  • python-cryptography SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 3.3.2-150100.7.15.3

    Mettez à jour vers 3.3.2-150100.7.15.3

  • python-cryptography-vectors SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 3.3.2-150100.3.11.3

    Mettez à jour vers 3.3.2-150100.3.11.3

  • python-google-api-core SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.14.2-150100.3.3.3

    Mettez à jour vers 1.14.2-150100.3.3.3

  • python-googleapis-common-protos SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.6.0-150100.3.3.3

    Mettez à jour vers 1.6.0-150100.3.3.3

  • python-grpcio-gcp SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 0.2.2-150100.3.3.3

    Mettez à jour vers 0.2.2-150100.3.3.3

  • python-humanfriendly SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 10.0-150100.6.3.3

    Mettez à jour vers 10.0-150100.6.3.3

  • python-jsondiff SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.3.0-150100.3.6.3

    Mettez à jour vers 1.3.0-150100.3.6.3

  • python-knack SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 0.9.0-150100.3.7.3

    Mettez à jour vers 0.9.0-150100.3.7.3

  • python-opencensus SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 0.8.0-150100.3.3.3

    Mettez à jour vers 0.8.0-150100.3.3.3

  • python-opencensus-context SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 0.1.2-150100.3.3.3

    Mettez à jour vers 0.1.2-150100.3.3.3

  • python-opencensus-ext-threading SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 0.1.2-150100.3.3.3

    Mettez à jour vers 0.1.2-150100.3.3.3

  • python-opentelemetry-api SUSE:Linux Enterprise Module for Public Cloud 15 SP1

    Plages de versions concernées
    • ECOSYSTEM: < 1.5.0-150100.3.3.3

    Mettez à jour vers 1.5.0-150100.3.3.3

Sources originales

Vérifiez votre serveur →