p PatchFirst

SUSE-SU-2024:3302-1

SUSE-SU-2024:3302-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596) Bug fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999) - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). - Remove %suse_update_desktop_file macro as it is not useful any more.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3-core SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3 SUSE:Linux Enterprise Server 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3-core SUSE:Linux Enterprise Server 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3 SUSE:Linux Enterprise Server for SAP Applications 15 SP2

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3-core SUSE:Linux Enterprise Server for SAP Applications 15 SP2

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3 SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

  • python3-core SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150000.3.155.2

    Update to 3.6.15-150000.3.155.2

Original sources

Check your server →