Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3447-1

Опубликовано: 26 сент. 2024
Источник: suse-cvrf

Описание

Security update for python36

This update for python36 fixes the following issues:

  • CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227)

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
libpython3_6m1_0-3.6.15-150000.3.161.1
python3-3.6.15-150000.3.161.1
python3-base-3.6.15-150000.3.161.1
python3-curses-3.6.15-150000.3.161.1
python3-dbm-3.6.15-150000.3.161.1
python3-devel-3.6.15-150000.3.161.1
python3-idle-3.6.15-150000.3.161.1
python3-tk-3.6.15-150000.3.161.1
python3-tools-3.6.15-150000.3.161.1
SUSE Linux Enterprise Micro 5.1
libpython3_6m1_0-3.6.15-150000.3.161.1
python3-3.6.15-150000.3.161.1
python3-base-3.6.15-150000.3.161.1
SUSE Linux Enterprise Server 15 SP2-LTSS
libpython3_6m1_0-3.6.15-150000.3.161.1
python3-3.6.15-150000.3.161.1
python3-base-3.6.15-150000.3.161.1
python3-curses-3.6.15-150000.3.161.1
python3-dbm-3.6.15-150000.3.161.1
python3-devel-3.6.15-150000.3.161.1
python3-idle-3.6.15-150000.3.161.1
python3-tk-3.6.15-150000.3.161.1
python3-tools-3.6.15-150000.3.161.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
libpython3_6m1_0-3.6.15-150000.3.161.1
python3-3.6.15-150000.3.161.1
python3-base-3.6.15-150000.3.161.1
python3-curses-3.6.15-150000.3.161.1
python3-dbm-3.6.15-150000.3.161.1
python3-devel-3.6.15-150000.3.161.1
python3-idle-3.6.15-150000.3.161.1
python3-tk-3.6.15-150000.3.161.1
python3-tools-3.6.15-150000.3.161.1

Ссылки

Описание

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libpython3_6m1_0-3.6.15-150000.3.161.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-3.6.15-150000.3.161.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-base-3.6.15-150000.3.161.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-curses-3.6.15-150000.3.161.1
Ссылки
Уязвимость SUSE-SU-2024:3447-1