p PatchFirst

SUSE-SU-2024:1862-1

SUSE-SU-2024:1862-1 · Security update for python

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python fixes the following issues: - CVE-2023-52425: Fixed using the system libexpat (bsc#1219559). - CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr() (bsc#1222537). - CVE-2022-48560: Fixed use-after-free in Python via heappushpop in heapq (bsc#1214675). - CVE-2024-0450: Detect the vulnerability of the 'quoted-overlap' zipbomb (bsc#1221854). Bug fixes: - Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306). - Build with -std=gnu89 to build correctly with gcc14 (bsc#1220970). - Switch from %patchN style to the %patch -P N one.

Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • python SUSE:Linux Enterprise Module for Package Hub 15 SP5

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python-base SUSE:Linux Enterprise Module for Package Hub 15 SP5

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python SUSE:Linux Enterprise Module for Package Hub 15 SP6

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python-base SUSE:Linux Enterprise Module for Package Hub 15 SP6

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python-base openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python-doc openSUSE:Leap 15.5

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python-base openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

  • python-doc openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 2.7.18-150000.65.1

    Update to 2.7.18-150000.65.1

Original sources

Check your server →