SUSE-SU-2024:2982-1

Опубликовано: 20 авг. 2024

Источник: suse-cvrf

Описание

Security update for python311

This update for python311 fixes the following issues:

Security issues fixed:

CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780)
CVE-2024-5642: Removed support for anything but OpenSSL 1.1.1 or newer (bsc#1227233)
CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448)

Non-security issues fixed:

Fixed executable bits for /usr/bin/idle* (bsc#1227378).
Improve python reproducible builds (bsc#1227999)
Make pip and modern tools install directly in /usr/local when used by the user (bsc#1225660)
%{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999)

Список пакетов

Container containers/apache-pulsar:3.3

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Container containers/open-webui:0

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Container containers/python:3.11

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

python311-devel-3.11.9-150600.3.3.1

Container containers/pytorch:2-nvidia

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Container containers/pytorch:2.5.0

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-Azure-Basic

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-Azure-Standard

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-BYOS-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-BYOS-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-EC2-ECS-HVM

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-HPC

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-HPC-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-HPC-BYOS-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-HPC-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-Hardened-BYOS-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-Hardened-BYOS-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-BYOS-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-BYOS-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAP-Hardened-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAPCAL

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAPCAL-Azure

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image SLES15-SP6-SAPCAL-EC2

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

Image ai_15_6

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libpython3_11-1_0-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

SUSE Linux Enterprise Module for Python 3 15 SP6

python311-3.11.9-150600.3.3.1

python311-curses-3.11.9-150600.3.3.1

python311-dbm-3.11.9-150600.3.3.1

python311-devel-3.11.9-150600.3.3.1

python311-idle-3.11.9-150600.3.3.1

python311-tk-3.11.9-150600.3.3.1

python311-tools-3.11.9-150600.3.3.1

openSUSE Leap 15.6

libpython3_11-1_0-3.11.9-150600.3.3.1

libpython3_11-1_0-32bit-3.11.9-150600.3.3.1

python311-3.11.9-150600.3.3.1

python311-32bit-3.11.9-150600.3.3.1

python311-base-3.11.9-150600.3.3.1

python311-base-32bit-3.11.9-150600.3.3.1

python311-curses-3.11.9-150600.3.3.1

python311-dbm-3.11.9-150600.3.3.1

python311-devel-3.11.9-150600.3.3.1

python311-doc-3.11.9-150600.3.3.1

python311-doc-devhelp-3.11.9-150600.3.3.1

python311-idle-3.11.9-150600.3.3.1

python311-testsuite-3.11.9-150600.3.3.1

python311-tk-3.11.9-150600.3.3.1

python311-tools-3.11.9-150600.3.3.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242982-1/
Link for SUSE-SU-2024:2982-1
https://lists.suse.com/pipermail/sle-updates/2024-August/036645.html
E-Mail link for SUSE-SU-2024:2982-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1225660
SUSE Bug 1225660
https://bugzilla.suse.com/1226447
SUSE Bug 1226447
https://bugzilla.suse.com/1226448
SUSE Bug 1226448
https://bugzilla.suse.com/1227378
SUSE Bug 1227378
https://bugzilla.suse.com/1227999
SUSE Bug 1227999
https://bugzilla.suse.com/1228780
SUSE Bug 1228780
https://www.suse.com/security/cve/CVE-2023-27043/
SUSE CVE CVE-2023-27043 page
https://www.suse.com/security/cve/CVE-2024-0397/
SUSE CVE CVE-2024-0397 page
https://www.suse.com/security/cve/CVE-2024-4032/
SUSE CVE CVE-2024-4032 page
https://www.suse.com/security/cve/CVE-2024-6923/
SUSE CVE CVE-2024-6923 page

Описание

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.

Затронутые продукты

Container containers/apache-pulsar:3.3:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/apache-pulsar:3.3:python311-base-3.11.9-150600.3.3.1

Container containers/open-webui:0:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/open-webui:0:python311-3.11.9-150600.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-27043.html
CVE-2023-27043
https://bugzilla.suse.com/1210638
SUSE Bug 1210638
https://bugzilla.suse.com/1222537
SUSE Bug 1222537

Описание

A defect was discovered in the Python "ssl" module where there is a memory race condition with the ssl.SSLContext methods "cert_store_stats()" and "get_ca_certs()". The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

Затронутые продукты

Container containers/apache-pulsar:3.3:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/apache-pulsar:3.3:python311-base-3.11.9-150600.3.3.1

Container containers/open-webui:0:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/open-webui:0:python311-3.11.9-150600.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-0397.html
CVE-2024-0397
https://bugzilla.suse.com/1226447
SUSE Bug 1226447

Описание

The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn't be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

Затронутые продукты

Container containers/apache-pulsar:3.3:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/apache-pulsar:3.3:python311-base-3.11.9-150600.3.3.1

Container containers/open-webui:0:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/open-webui:0:python311-3.11.9-150600.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-4032.html
CVE-2024-4032
https://bugzilla.suse.com/1226448
SUSE Bug 1226448

Описание

There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

Затронутые продукты

Container containers/apache-pulsar:3.3:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/apache-pulsar:3.3:python311-base-3.11.9-150600.3.3.1

Container containers/open-webui:0:libpython3_11-1_0-3.11.9-150600.3.3.1

Container containers/open-webui:0:python311-3.11.9-150600.3.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-6923.html
CVE-2024-6923
https://bugzilla.suse.com/1228780
SUSE Bug 1228780

SUSE-SU-2024:2982-1

Описание

Список пакетов

Container containers/apache-pulsar:3.3

Container containers/open-webui:0

Container containers/python:3.11

Container containers/pytorch:2-nvidia

Container containers/pytorch:2.5.0

Image SLES15-SP6-Azure-Basic

Image SLES15-SP6-Azure-Standard

Image SLES15-SP6-BYOS-Azure

Image SLES15-SP6-BYOS-EC2

Image SLES15-SP6-EC2

Image SLES15-SP6-EC2-ECS-HVM

Image SLES15-SP6-HPC

Image SLES15-SP6-HPC-Azure

Image SLES15-SP6-HPC-BYOS

Image SLES15-SP6-HPC-BYOS-Azure

Image SLES15-SP6-HPC-BYOS-EC2

Image SLES15-SP6-HPC-EC2

Image SLES15-SP6-Hardened-BYOS-Azure

Image SLES15-SP6-Hardened-BYOS-EC2

Image SLES15-SP6-SAP

Image SLES15-SP6-SAP-Azure

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-EC2

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAPCAL

Image SLES15-SP6-SAPCAL-Azure

Image SLES15-SP6-SAPCAL-EC2

Image ai_15_6

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Python 3 15 SP6

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2023-27043

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-0397

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-4032

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-6923

Описание

Затронутые продукты

Ссылки