SUSE-SU-2024:1556-1

Опубликовано: 08 мая 2024

Источник: suse-cvrf

Описание

Security update for python311

This update for python311 fixes the following issues:

CVE-2024-0450: Fixed 'quoted-overlap' issue inside the zipfile module (bsc#1221854).
CVE-2023-6597: Fixed removing tempfile.TemporaryDirectory in some edge cases related to symlinks (bsc#1219666).
CVE-2023-52425: Fixed denial of service (resource consumption) caused by processing large tokens (bsc#1219559).

Bug fixes:

Eliminate ResourceWarning which broke the test suite in test_asyncio (bsc#1221260).
Revert use of %autopatch (bsc#1189495).
Use the system-wide crypto-policies (bsc#1211301).

Список пакетов

Container bci/python:latest

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

Image SLES15-SP4-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-HPC-BYOS

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-HPC-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-HPC-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-HPC-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-Hardened-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-Hardened-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-Manager-Server-4-3

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-Hardened

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-Hardened-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-Hardened-BYOS

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAPCAL

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAPCAL-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP4-SAPCAL-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Azure-3P

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Azure-Basic

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Azure-Standard

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-HPC-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-HPC-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-HPC-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Hardened-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Hardened-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Manager-Server-5-0

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAP-Azure-3P

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAP-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAP-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAP-Hardened-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAPCAL-Azure

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

Image SLES15-SP5-SAPCAL-EC2

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-curses-3.11.9-150400.9.26.1

python311-dbm-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

python311-doc-3.11.9-150400.9.26.1

python311-doc-devhelp-3.11.9-150400.9.26.1

python311-idle-3.11.9-150400.9.26.1

python311-tk-3.11.9-150400.9.26.1

python311-tools-3.11.9-150400.9.26.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-curses-3.11.9-150400.9.26.1

python311-dbm-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

python311-doc-3.11.9-150400.9.26.1

python311-doc-devhelp-3.11.9-150400.9.26.1

python311-idle-3.11.9-150400.9.26.1

python311-tk-3.11.9-150400.9.26.1

python311-tools-3.11.9-150400.9.26.1

SUSE Linux Enterprise Module for Public Cloud 15 SP4

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

SUSE Linux Enterprise Module for Python 3 15 SP5

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-curses-3.11.9-150400.9.26.1

python311-dbm-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

python311-doc-3.11.9-150400.9.26.1

python311-doc-devhelp-3.11.9-150400.9.26.1

python311-idle-3.11.9-150400.9.26.1

python311-tk-3.11.9-150400.9.26.1

python311-tools-3.11.9-150400.9.26.1

SUSE Linux Enterprise Server 15 SP4-LTSS

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-curses-3.11.9-150400.9.26.1

python311-dbm-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

python311-doc-3.11.9-150400.9.26.1

python311-doc-devhelp-3.11.9-150400.9.26.1

python311-idle-3.11.9-150400.9.26.1

python311-tk-3.11.9-150400.9.26.1

python311-tools-3.11.9-150400.9.26.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libpython3_11-1_0-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-curses-3.11.9-150400.9.26.1

python311-dbm-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

python311-doc-3.11.9-150400.9.26.1

python311-doc-devhelp-3.11.9-150400.9.26.1

python311-idle-3.11.9-150400.9.26.1

python311-tk-3.11.9-150400.9.26.1

python311-tools-3.11.9-150400.9.26.1

openSUSE Leap 15.5

libpython3_11-1_0-3.11.9-150400.9.26.1

libpython3_11-1_0-32bit-3.11.9-150400.9.26.1

python311-3.11.9-150400.9.26.1

python311-32bit-3.11.9-150400.9.26.1

python311-base-3.11.9-150400.9.26.1

python311-base-32bit-3.11.9-150400.9.26.1

python311-curses-3.11.9-150400.9.26.1

python311-dbm-3.11.9-150400.9.26.1

python311-devel-3.11.9-150400.9.26.1

python311-doc-3.11.9-150400.9.26.1

python311-doc-devhelp-3.11.9-150400.9.26.1

python311-idle-3.11.9-150400.9.26.1

python311-testsuite-3.11.9-150400.9.26.1

python311-tk-3.11.9-150400.9.26.1

python311-tools-3.11.9-150400.9.26.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20241556-1/
Link for SUSE-SU-2024:1556-1
https://lists.suse.com/pipermail/sle-updates/2024-May/035199.html
E-Mail link for SUSE-SU-2024:1556-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1189495
SUSE Bug 1189495
https://bugzilla.suse.com/1211301
SUSE Bug 1211301
https://bugzilla.suse.com/1219559
SUSE Bug 1219559
https://bugzilla.suse.com/1219666
SUSE Bug 1219666
https://bugzilla.suse.com/1221260
SUSE Bug 1221260
https://bugzilla.suse.com/1221854
SUSE Bug 1221854
https://www.suse.com/security/cve/CVE-2023-52425/
SUSE CVE CVE-2023-52425 page
https://www.suse.com/security/cve/CVE-2023-6597/
SUSE CVE CVE-2023-6597 page
https://www.suse.com/security/cve/CVE-2024-0450/
SUSE CVE CVE-2024-0450 page

Описание

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

Затронутые продукты

Container bci/python:latest:libpython3_11-1_0-3.11.9-150400.9.26.1

Container bci/python:latest:python311-3.11.9-150400.9.26.1

Container bci/python:latest:python311-base-3.11.9-150400.9.26.1

Container bci/python:latest:python311-devel-3.11.9-150400.9.26.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-52425.html
CVE-2023-52425
https://bugzilla.suse.com/1219559
SUSE Bug 1219559

Описание

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances.

Затронутые продукты

Container bci/python:latest:libpython3_11-1_0-3.11.9-150400.9.26.1

Container bci/python:latest:python311-3.11.9-150400.9.26.1

Container bci/python:latest:python311-base-3.11.9-150400.9.26.1

Container bci/python:latest:python311-devel-3.11.9-150400.9.26.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-6597.html
CVE-2023-6597
https://bugzilla.suse.com/1219666
SUSE Bug 1219666
https://bugzilla.suse.com/1221854
SUSE Bug 1221854
https://bugzilla.suse.com/1224879
SUSE Bug 1224879
https://bugzilla.suse.com/1225185
SUSE Bug 1225185

Описание

An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to "quoted-overlap" zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.

Затронутые продукты

Container bci/python:latest:libpython3_11-1_0-3.11.9-150400.9.26.1

Container bci/python:latest:python311-3.11.9-150400.9.26.1

Container bci/python:latest:python311-base-3.11.9-150400.9.26.1

Container bci/python:latest:python311-devel-3.11.9-150400.9.26.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-0450.html
CVE-2024-0450
https://bugzilla.suse.com/1221854
SUSE Bug 1221854

SUSE-SU-2024:1556-1

Описание

Список пакетов

Container bci/python:latest

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP5-Azure-3P

Image SLES15-SP5-Azure-Basic

Image SLES15-SP5-Azure-Standard

Image SLES15-SP5-BYOS-Azure

Image SLES15-SP5-BYOS-EC2

Image SLES15-SP5-EC2

Image SLES15-SP5-HPC-Azure

Image SLES15-SP5-HPC-BYOS-Azure

Image SLES15-SP5-HPC-BYOS-EC2

Image SLES15-SP5-Hardened-BYOS-Azure

Image SLES15-SP5-Hardened-BYOS-EC2

Image SLES15-SP5-Manager-Server-5-0

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

Image SLES15-SP5-SAP-Azure-3P

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAPCAL-Azure

Image SLES15-SP5-SAPCAL-EC2

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Public Cloud 15 SP4

SUSE Linux Enterprise Module for Python 3 15 SP5

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-52425

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-6597

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-0450

Описание

Затронутые продукты

Ссылки