SUSE-RU-2024:3600-1

Опубликовано: 11 окт. 2024

Источник: suse-cvrf

Описание

Recommended update for python-requests

This update for python-requests fixes the following issue:

Update CVE-2024-35195.patch to allow the usage of 'verify' parameter as a directory (bsc#1225912)

Список пакетов

Image SLES15-SP4-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-HPC-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-HPC-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-HPC-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-Hardened

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-Hardened-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-Hardened-BYOS

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAPCAL-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-SAPCAL-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Azure-3P

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Azure-Basic

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Azure-Standard

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-HPC-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-HPC-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-HPC-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAP-Azure-3P

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAP-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAP-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAP-Hardened-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAPCAL-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP5-SAPCAL-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-Azure-3P

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-Azure-Basic

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-Azure-Standard

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-EC2-ECS-HVM

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-HPC

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-HPC-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-HPC-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-HPC-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-HPC-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-Azure-3P

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-Hardened-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAP-Hardened-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAPCAL-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP6-SAPCAL-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-Azure-3P

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-Azure-Basic

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-Azure-Standard

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-BYOS-GCE

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-EC2-ECS-HVM

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-HPC-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-HPC-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-HPC-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-HPC-BYOS-GCE

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-Hardened-BYOS-GCE

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-Azure-3P

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-BYOS-GCE

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-Hardened-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAPCAL-Azure

python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP7-SAPCAL-EC2

python311-requests-2.31.0-150400.6.15.1

Image server-image

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise Module for Public Cloud 15 SP4

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise Module for Python 3 15 SP5

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise Module for Python 3 15 SP6

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise Server 15 SP4-LTSS

python311-requests-2.31.0-150400.6.15.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

python311-requests-2.31.0-150400.6.15.1

openSUSE Leap 15.5

python311-requests-2.31.0-150400.6.15.1

openSUSE Leap 15.6

python311-requests-2.31.0-150400.6.15.1

Ссылки

https://www.suse.com/support/update/announcement/-2024-3600/suse-ru-20243600-1/
Link for SUSE-RU-2024:3600-1
https://lists.suse.com/pipermail/sle-updates/2024-October/037214.html
E-Mail link for SUSE-RU-2024:3600-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1225912
SUSE Bug 1225912
https://www.suse.com/security/cve/CVE-2024-35195/
SUSE CVE CVE-2024-35195 page

Описание

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-BYOS-EC2:python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-HPC-BYOS-Azure:python311-requests-2.31.0-150400.6.15.1

Image SLES15-SP4-HPC-BYOS-EC2:python311-requests-2.31.0-150400.6.15.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-35195.html
CVE-2024-35195
https://bugzilla.suse.com/1224788
SUSE Bug 1224788