p PatchFirst

SUSE-SU-2024:3303-1

SUSE-SU-2024:3303-1 · Security update for python312

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python312 fixes the following issues: - Update to 3.12.6 - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module. (bsc#1228780). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines. (bsc#1229596) - CVE-2024-6232: Fixed ReDos via excessive backtracking while parsing header values. (bsc#1230227) - CVE-2024-8088: Fixed denial of service in zipfile. (bsc#1229704)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python312 SUSE:Linux Enterprise Module for Python 3 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.12.6-150600.3.6.1

    Update to 3.12.6-150600.3.6.1

  • python312-core SUSE:Linux Enterprise Module for Python 3 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.12.6-150600.3.6.1

    Update to 3.12.6-150600.3.6.1

  • python312 openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 3.12.6-150600.3.6.1

    Update to 3.12.6-150600.3.6.1

  • python312-core openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 3.12.6-150600.3.6.1

    Update to 3.12.6-150600.3.6.1

  • python312-documentation openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 3.12.6-150600.3.6.1

    Update to 3.12.6-150600.3.6.1

Original sources

Check your server →