SUSE-SU-2023:2639-1

Опубликовано: 26 июн. 2023

Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

CVE-2023-24329: Fixed urllib.parse bypass when supplying a URL that starts with blank characters (bsc#1208471).

Список пакетов

Image SLES12-SP5-Azure-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-Azure-Basic-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-Azure-HPC-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-Azure-HPC-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-Azure-SAP-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-Azure-SAP-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-Azure-Standard-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-EC2-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-EC2-ECS-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-EC2-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-EC2-SAP-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-EC2-SAP-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-GCE-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-GCE-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-GCE-SAP-BYOS

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-GCE-SAP-On-Demand

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.18-33.20.2

python-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE Linux Enterprise Server 12 SP4-ESPOS

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE Linux Enterprise Server 12 SP4-LTSS

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE Linux Enterprise Server 12 SP5

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE Linux Enterprise Server for SAP Applications 12 SP4

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE Linux Enterprise Workstation Extension 12 SP5

python-devel-2.7.18-33.20.2

SUSE OpenStack Cloud 9

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

SUSE OpenStack Cloud Crowbar 9

libpython2_7-1_0-2.7.18-33.20.2

libpython2_7-1_0-32bit-2.7.18-33.20.2

python-2.7.18-33.20.2

python-32bit-2.7.18-33.20.2

python-base-2.7.18-33.20.2

python-base-32bit-2.7.18-33.20.2

python-curses-2.7.18-33.20.2

python-demo-2.7.18-33.20.2

python-devel-2.7.18-33.20.2

python-doc-2.7.18-33.20.2

python-doc-pdf-2.7.18-33.20.2

python-gdbm-2.7.18-33.20.2

python-idle-2.7.18-33.20.2

python-tk-2.7.18-33.20.2

python-xml-2.7.18-33.20.2

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20232639-1/
Link for SUSE-SU-2023:2639-1
https://lists.suse.com/pipermail/sle-updates/2023-July/030301.html
E-Mail link for SUSE-SU-2023:2639-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1208471
SUSE Bug 1208471
https://www.suse.com/security/cve/CVE-2023-24329/
SUSE CVE CVE-2023-24329 page

Описание

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:libpython2_7-1_0-2.7.18-33.20.2

Image SLES12-SP5-Azure-BYOS:python-2.7.18-33.20.2

Image SLES12-SP5-Azure-BYOS:python-base-2.7.18-33.20.2

Image SLES12-SP5-Azure-BYOS:python-xml-2.7.18-33.20.2

Ссылки

https://www.suse.com/security/cve/CVE-2023-24329.html
CVE-2023-24329
https://bugzilla.suse.com/1208471
SUSE Bug 1208471
https://bugzilla.suse.com/1213553
SUSE Bug 1213553
https://bugzilla.suse.com/1213554
SUSE Bug 1213554
https://bugzilla.suse.com/1213839
SUSE Bug 1213839
https://bugzilla.suse.com/1225672
SUSE Bug 1225672

SUSE-SU-2023:2639-1

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP4-ESPOS

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Workstation Extension 12 SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2023-24329

Описание

Затронутые продукты

Ссылки