Security update for python36
This update for python36 fixes the following issues: - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227)
- Update to 3.6.15-150000.3.161.1
Published Updated
PatchFirst · Latest vulnerabilities
python3-core vulnerabilities
Vulnerabilities published for python3-core in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 10
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596) Bug fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999) - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). - Remove %suse_update_desktop_file macro as it is not useful any more.
- Update to 3.6.15-150000.3.155.2
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
- Update to 3.6.15-150000.3.147.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).
- Update to 3.6.15-150000.3.141.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
- Update to 3.6.15-150000.3.135.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bugs were fixed: - Fixed a crash in the garbage collection (bsc#1188607) - Fixed email.generator.py to not replace a non-existent header (bsc#1208443, gh#python/cpython#71508).
- Update to 3.6.15-150000.3.124.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
- Update to 3.6.15-150000.3.119.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
- Update to 3.6.15-150000.3.116.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
- Update to 3.6.15-150000.3.109.1
Published UpdatedSecurity update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2021-3572: Update bundled pip wheel to the latest SLE version (bsc#1186819) - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). Other bugs fixed: - Remove shebangs from from python-base libraries in _libdir (bsc#1193179, bsc#1192249).
- Update to 3.6.15-150000.3.106.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.