Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:03354-1

Опубликовано: 25 сент. 2025
Источник: suse-cvrf

Описание

Security update for python-pycares

This update for python-pycares fixes the following issues:

Update to version 4.10.0 (jsc#PED-13442):

  • CVE-2025-48945: Fixed use-after-free vulnerability may have led to a crash (bsc#1244691).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise Module for Python 3 15 SP6
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise Module for Python 3 15 SP7
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise Server 15 SP4-LTSS
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise Server 15 SP5-LTSS
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
python311-pycares-4.10.0-150400.9.8.1
openSUSE Leap 15.6
python311-pycares-4.10.0-150400.9.8.1

Ссылки

Описание

pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS queries are still pending. This results in a fatal Python error and interpreter crash. The vulnerability has been fixed in pycares 4.9.0 by implementing a safe channel destruction mechanism.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-pycares-4.10.0-150400.9.8.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-pycares-4.10.0-150400.9.8.1
Ссылки