Описание
Security update for python
This update for python fixes the following issues:
- CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
Список пакетов
Image SLES12-SP5-Azure-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-Azure-Basic-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-Azure-HPC-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-Azure-HPC-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-Azure-SAP-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-Azure-SAP-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-Azure-Standard-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-EC2-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-EC2-ECS-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-EC2-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-EC2-SAP-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-EC2-SAP-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-GCE-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-GCE-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-GCE-SAP-BYOS
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-GCE-SAP-On-Demand
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.18-33.35.1
python-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
SUSE Linux Enterprise Server 12 SP5
libpython2_7-1_0-2.7.18-33.35.1
libpython2_7-1_0-32bit-2.7.18-33.35.1
python-2.7.18-33.35.1
python-32bit-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-base-32bit-2.7.18-33.35.1
python-curses-2.7.18-33.35.1
python-demo-2.7.18-33.35.1
python-devel-2.7.18-33.35.1
python-doc-2.7.18-33.35.1
python-doc-pdf-2.7.18-33.35.1
python-gdbm-2.7.18-33.35.1
python-idle-2.7.18-33.35.1
python-tk-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libpython2_7-1_0-2.7.18-33.35.1
libpython2_7-1_0-32bit-2.7.18-33.35.1
python-2.7.18-33.35.1
python-32bit-2.7.18-33.35.1
python-base-2.7.18-33.35.1
python-base-32bit-2.7.18-33.35.1
python-curses-2.7.18-33.35.1
python-demo-2.7.18-33.35.1
python-devel-2.7.18-33.35.1
python-doc-2.7.18-33.35.1
python-doc-pdf-2.7.18-33.35.1
python-gdbm-2.7.18-33.35.1
python-idle-2.7.18-33.35.1
python-tk-2.7.18-33.35.1
python-xml-2.7.18-33.35.1
SUSE Linux Enterprise Workstation Extension 12 SP5
python-devel-2.7.18-33.35.1
Ссылки
- Link for SUSE-SU-2024:1844-1
- E-Mail link for SUSE-SU-2024:1844-1
- SUSE Security Ratings
- SUSE Bug 1221854
- SUSE CVE CVE-2024-0450 page
Описание
An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to "quoted-overlap" zip-bombs which exploit the zip format to create a zip-bomb with a high compression ratio. The fixed versions of CPython makes the zipfile module reject zip archives which overlap entries in the archive.
Затронутые продукты
Image SLES12-SP5-Azure-BYOS:libpython2_7-1_0-2.7.18-33.35.1
Image SLES12-SP5-Azure-BYOS:python-2.7.18-33.35.1
Image SLES12-SP5-Azure-BYOS:python-base-2.7.18-33.35.1
Image SLES12-SP5-Azure-BYOS:python-xml-2.7.18-33.35.1
Ссылки
- CVE-2024-0450
- SUSE Bug 1221854