Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:4153-1

Опубликовано: 03 дек. 2024
Источник: suse-cvrf

Описание

Security update for python310

This update for python310 fixes the following issues:

  • CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307)

Bug fixes:

  • Remove -IVendor/ from python-config. (bsc#1231795)
  • Include renaming :noindex: option to :no-index: in Sphinx 7.2. (bsc#1232750)

Список пакетов

openSUSE Leap 15.5
libpython3_10-1_0-3.10.15-150400.4.63.1
libpython3_10-1_0-32bit-3.10.15-150400.4.63.1
python310-3.10.15-150400.4.63.1
python310-32bit-3.10.15-150400.4.63.1
python310-base-3.10.15-150400.4.63.1
python310-base-32bit-3.10.15-150400.4.63.1
python310-curses-3.10.15-150400.4.63.1
python310-dbm-3.10.15-150400.4.63.1
python310-devel-3.10.15-150400.4.63.1
python310-doc-3.10.15-150400.4.63.1
python310-doc-devhelp-3.10.15-150400.4.63.1
python310-idle-3.10.15-150400.4.63.1
python310-testsuite-3.10.15-150400.4.63.1
python310-tk-3.10.15-150400.4.63.1
python310-tools-3.10.15-150400.4.63.1
openSUSE Leap 15.6
libpython3_10-1_0-3.10.15-150400.4.63.1
libpython3_10-1_0-32bit-3.10.15-150400.4.63.1
python310-3.10.15-150400.4.63.1
python310-32bit-3.10.15-150400.4.63.1
python310-base-3.10.15-150400.4.63.1
python310-base-32bit-3.10.15-150400.4.63.1
python310-curses-3.10.15-150400.4.63.1
python310-dbm-3.10.15-150400.4.63.1
python310-devel-3.10.15-150400.4.63.1
python310-doc-3.10.15-150400.4.63.1
python310-doc-devhelp-3.10.15-150400.4.63.1
python310-idle-3.10.15-150400.4.63.1
python310-testsuite-3.10.15-150400.4.63.1
python310-tk-3.10.15-150400.4.63.1
python310-tools-3.10.15-150400.4.63.1

Ссылки

Описание

The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one URL parser.

Затронутые продукты
openSUSE Leap 15.5:libpython3_10-1_0-3.10.15-150400.4.63.1
openSUSE Leap 15.5:libpython3_10-1_0-32bit-3.10.15-150400.4.63.1
openSUSE Leap 15.5:python310-3.10.15-150400.4.63.1
openSUSE Leap 15.5:python310-32bit-3.10.15-150400.4.63.1
Ссылки