p PatchFirst

SUSE-SU-2024:3470-1

SUSE-SU-2024:3470-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-5642: Fixed buffer overread when NPN is used and invalid values are sent to the OpenSSL API (bsc#1227233). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596). - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) Bug fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999). - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). - Remove %suse_update_desktop_file macro as it is not useful any more.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Micro 5.5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Module for Basesystem 15 SP5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Module for Development Tools 15 SP5

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Module for Development Tools 15 SP6

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3 SUSE:Linux Enterprise Server for SAP Applications 15 SP3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

  • python3-core SUSE:Linux Enterprise Server for SAP Applications 15 SP3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-150300.10.72.1

    Update to 3.6.15-150300.10.72.1

Original sources

Check your server →