p PatchFirst

SUSE-SU-2023:2937-1

SUSE-SU-2023:2937-1 · Security update for python311

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python311 fixes the following issues: python was updated to version 3.11.4: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750). - Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. Bugfixes: - trace.__main__ now uses io.open_code() for files to be executed instead of raw open().

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python311 SUSE:Linux Enterprise Module for Python 3 15 SP4

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.1

    Update to 3.11.4-150400.9.15.1

  • python311-core SUSE:Linux Enterprise Module for Python 3 15 SP4

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.3

    Update to 3.11.4-150400.9.15.3

  • python311-documentation SUSE:Linux Enterprise Module for Python 3 15 SP4

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.2

    Update to 3.11.4-150400.9.15.2

  • python311 SUSE:Linux Enterprise Module for Python 3 15 SP5

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.1

    Update to 3.11.4-150400.9.15.1

  • python311-core SUSE:Linux Enterprise Module for Python 3 15 SP5

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.3

    Update to 3.11.4-150400.9.15.3

  • python311-documentation SUSE:Linux Enterprise Module for Python 3 15 SP5

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.2

    Update to 3.11.4-150400.9.15.2

  • python311 openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.1

    Update to 3.11.4-150400.9.15.1

  • python311-core openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.3

    Update to 3.11.4-150400.9.15.3

  • python311-documentation openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.2

    Update to 3.11.4-150400.9.15.2

  • python311 openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.1

    Update to 3.11.4-150400.9.15.1

  • python311-core openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.3

    Update to 3.11.4-150400.9.15.3

  • python311-documentation openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 3.11.4-150400.9.15.2

    Update to 3.11.4-150400.9.15.2

Original sources

Check your server →