Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02089-1

Опубликовано: 24 июн. 2025
Источник: suse-cvrf

Описание

Security update for python311

This update for python311 fixes the following issues:

Security issues fixed:

  • CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780)
  • CVE-2024-0397: Fixed memory race condition in ssl.SSLContext certificate store methods (bsc#1226447)
  • CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448)

Non-security issues fixed:

  • Fixed executable bits for /usr/bin/idle* (bsc#1227378).
  • Improve python reproducible builds (bsc#1227999)
  • Make pip and modern tools install directly in /usr/local when used by the user (bsc#1225660)
  • %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP6
libpython3_11-1_0-3.11.9-150600.3.3.1
python311-base-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-3.11.9-150600.3.3.1
python311-curses-3.11.9-150600.3.3.1
python311-dbm-3.11.9-150600.3.3.1
python311-devel-3.11.9-150600.3.3.1
python311-idle-3.11.9-150600.3.3.1
python311-tk-3.11.9-150600.3.3.1
python311-tools-3.11.9-150600.3.3.1
openSUSE Leap 15.6
libpython3_11-1_0-3.11.9-150600.3.3.1
libpython3_11-1_0-32bit-3.11.9-150600.3.3.1
python311-3.11.9-150600.3.3.1
python311-32bit-3.11.9-150600.3.3.1
python311-base-3.11.9-150600.3.3.1
python311-base-32bit-3.11.9-150600.3.3.1
python311-curses-3.11.9-150600.3.3.1
python311-dbm-3.11.9-150600.3.3.1
python311-devel-3.11.9-150600.3.3.1
python311-doc-3.11.9-150600.3.3.1
python311-doc-devhelp-3.11.9-150600.3.3.1
python311-idle-3.11.9-150600.3.3.1
python311-testsuite-3.11.9-150600.3.3.1
python311-tk-3.11.9-150600.3.3.1
python311-tools-3.11.9-150600.3.3.1

Ссылки

Описание

A defect was discovered in the Python "ssl" module where there is a memory race condition with the ssl.SSLContext methods "cert_store_stats()" and "get_ca_certs()". The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libpython3_11-1_0-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:python311-base-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-curses-3.11.9-150600.3.3.1
Ссылки

Описание

The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn't be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libpython3_11-1_0-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:python311-base-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-curses-3.11.9-150600.3.3.1
Ссылки

Описание

There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:libpython3_11-1_0-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:python311-base-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-3.11.9-150600.3.3.1
SUSE Linux Enterprise Module for Python 3 15 SP6:python311-curses-3.11.9-150600.3.3.1
Ссылки
Уязвимость SUSE-SU-2025:02089-1