Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2655-1

Опубликовано: 30 июл. 2024
Источник: suse-cvrf

Описание

Security update for python-dnspython

This update for python-dnspython fixes the following issues:

  • CVE-2023-29483: Fixed an issue that allowed remote attackers to interfere with DNS name resolution (bsc#1222693).

Список пакетов

Container suse/manager/5.0/x86_64/server:latest
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-HPC-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-SAP-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-SAPCAL-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-HPC-BYOS
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-HPC-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Hardened-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-Azure-llc
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-Azure-ltd
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-BYOS
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-EC2-llc
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Manager-Server-4-3-EC2-ltd
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Micro-5-3-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-Micro-5-4-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAP
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAP-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAP-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAP-Hardened
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAP-Hardened-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAPCAL
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP4-SAPCAL-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Azure-3P
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Azure-Basic
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Azure-Standard
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-HPC-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-HPC-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Hardened-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Server-5-0
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Micro-5-5-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Micro-5-5-BYOS
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-SAP-Azure-3P
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-SAP-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-SAP-Hardened-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP5-SAPCAL-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-Azure-Basic
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-Azure-Standard
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-HPC
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-HPC-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-HPC-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-Hardened-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-SAP-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-SAP-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-SAP-Hardened
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-SAP-Hardened-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP6-SAPCAL-Azure
python3-dnspython-1.15.0-150000.3.5.1
Image server-image
python3-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Micro 5.3
python3-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Micro 5.4
python3-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Micro 5.5
python3-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
python3-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
python3-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP5
python2-dnspython-1.15.0-150000.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
python2-dnspython-1.15.0-150000.3.5.1
openSUSE Leap 15.5
python3-dnspython-1.15.0-150000.3.5.1
openSUSE Leap Micro 5.5
python3-dnspython-1.15.0-150000.3.5.1

Ссылки

Описание

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in which the DNS name resolution algorithm would proceed, within the full time window, in order to wait for a valid packet. NOTE: dnspython 2.6.0 is unusable for a different reason that was addressed in 2.6.1.

Затронутые продукты
Container suse/manager/5.0/x86_64/server:latest:python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-BYOS-Azure:python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-HPC-BYOS-Azure:python3-dnspython-1.15.0-150000.3.5.1
Image SLES15-SP3-SAP-BYOS-Azure:python3-dnspython-1.15.0-150000.3.5.1
Ссылки