p PatchFirst

SUSE-SU-2024:1774-1

SUSE-SU-2024:1774-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3-core SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3 SUSE:Linux Enterprise Server 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3-core SUSE:Linux Enterprise Server 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3 SUSE:Linux Enterprise Server for SAP Applications 15 SP2

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3-core SUSE:Linux Enterprise Server for SAP Applications 15 SP2

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3 SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

  • python3-core SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.147.1

    Update to 3.6.15-150000.3.147.1

Original sources

Check your server →