Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0850-1

Опубликовано: 12 мар. 2024
Источник: suse-cvrf

Описание

Security update for python3

This update for python3 fixes the following issues:

  • CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).

Список пакетов

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libpython3_6m1_0-3.6.15-150000.3.141.1
python3-3.6.15-150000.3.141.1
python3-base-3.6.15-150000.3.141.1
python3-curses-3.6.15-150000.3.141.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libpython3_6m1_0-3.6.15-150000.3.141.1
python3-3.6.15-150000.3.141.1
python3-base-3.6.15-150000.3.141.1
python3-curses-3.6.15-150000.3.141.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libpython3_6m1_0-3.6.15-150000.3.141.1
python3-3.6.15-150000.3.141.1
python3-base-3.6.15-150000.3.141.1
python3-curses-3.6.15-150000.3.141.1
python3-dbm-3.6.15-150000.3.141.1
python3-devel-3.6.15-150000.3.141.1
python3-idle-3.6.15-150000.3.141.1
python3-tk-3.6.15-150000.3.141.1
python3-tools-3.6.15-150000.3.141.1
SUSE Linux Enterprise Micro 5.1
libpython3_6m1_0-3.6.15-150000.3.141.1
python3-3.6.15-150000.3.141.1
python3-base-3.6.15-150000.3.141.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libpython3_6m1_0-3.6.15-150000.3.141.1
python3-3.6.15-150000.3.141.1
python3-base-3.6.15-150000.3.141.1
python3-curses-3.6.15-150000.3.141.1
python3-dbm-3.6.15-150000.3.141.1
python3-devel-3.6.15-150000.3.141.1
python3-idle-3.6.15-150000.3.141.1
python3-tk-3.6.15-150000.3.141.1
python3-tools-3.6.15-150000.3.141.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libpython3_6m1_0-3.6.15-150000.3.141.1
python3-3.6.15-150000.3.141.1
python3-base-3.6.15-150000.3.141.1
python3-curses-3.6.15-150000.3.141.1
python3-dbm-3.6.15-150000.3.141.1
python3-devel-3.6.15-150000.3.141.1
python3-idle-3.6.15-150000.3.141.1
python3-tk-3.6.15-150000.3.141.1
python3-tools-3.6.15-150000.3.141.1

Ссылки

Описание

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:libpython3_6m1_0-3.6.15-150000.3.141.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:python3-3.6.15-150000.3.141.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:python3-base-3.6.15-150000.3.141.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:python3-curses-3.6.15-150000.3.141.1
Ссылки