Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2024:0149-1

Опубликовано: 03 июн. 2024
Источник: suse-cvrf

Описание

Security update for python-python-jose

This update for python-python-jose fixes the following issues:

  • CVE-2024-33664: Fixed a denial of service via decoding of a JSON Web Encryption token with a high compression ratio (boo#1223422)

Список пакетов

SUSE Package Hub 15 SP5
python3-python-jose-3.0.1-bp155.3.6.1
openSUSE Leap 15.5
python3-python-jose-3.0.1-bp155.3.6.1

Ссылки

Описание

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT bomb." This is similar to CVE-2024-21319.

Затронутые продукты
SUSE Package Hub 15 SP5:python3-python-jose-3.0.1-bp155.3.6.1
openSUSE Leap 15.5:python3-python-jose-3.0.1-bp155.3.6.1
Ссылки