September 2024 - openSUSE Security Announce

SUSE-SU-2024:3500-1: important: Security update for openssl-3
by OPENSUSE-SECURITY-UPDATES 30 Sep '24

30 Sep '24

# Security update for openssl-3 Announcement ID: SUSE-SU-2024:3500-1 Release Date: 2024-09-30T14:14:23Z Rating: important References: * bsc#1230698 Cross-References: * CVE-2024-41996 CVSS scores: * CVE-2024-41996 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-41996 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2024-41996: Validating the order of the public keys in the Diffie- Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE (bsc#1230698) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3500=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-3500=1 openSUSE-SLE-15.5-2024-3500=1 ## Package List: * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150500.5.45.1 * libopenssl3-3.0.8-150500.5.45.1 * openssl-3-debugsource-3.0.8-150500.5.45.1 * libopenssl3-debuginfo-3.0.8-150500.5.45.1 * libopenssl-3-devel-3.0.8-150500.5.45.1 * openssl-3-3.0.8-150500.5.45.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586) * openssl-3-debuginfo-3.0.8-150500.5.45.1 * libopenssl3-3.0.8-150500.5.45.1 * openssl-3-debugsource-3.0.8-150500.5.45.1 * libopenssl3-debuginfo-3.0.8-150500.5.45.1 * libopenssl-3-devel-3.0.8-150500.5.45.1 * openssl-3-3.0.8-150500.5.45.1 * openSUSE Leap 15.5 (x86_64) * libopenssl-3-devel-32bit-3.0.8-150500.5.45.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.45.1 * libopenssl3-32bit-3.0.8-150500.5.45.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.45.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150500.5.45.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.45.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.45.1 ## References: * https://www.suse.com/security/cve/CVE-2024-41996.html * https://bugzilla.suse.com/show_bug.cgi?id=1230698

1 0

openSUSE-SU-2024:14376-1: moderate: php8-8.3.12-1.1 on GA media
by meissner＠suse.com 30 Sep '24

30 Sep '24

# php8-8.3.12-1.1 on GA media Announcement ID: openSUSE-SU-2024:14376-1 Rating: moderate Cross-References: * CVE-2024-4577 * CVE-2024-8925 * CVE-2024-8927 * CVE-2024-9026 CVSS scores: * CVE-2024-4577 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. ## Description: These are all security issues fixed in the php8-8.3.12-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * php8 8.3.12-1.1 * php8-bcmath 8.3.12-1.1 * php8-bz2 8.3.12-1.1 * php8-calendar 8.3.12-1.1 * php8-cli 8.3.12-1.1 * php8-ctype 8.3.12-1.1 * php8-curl 8.3.12-1.1 * php8-dba 8.3.12-1.1 * php8-devel 8.3.12-1.1 * php8-dom 8.3.12-1.1 * php8-enchant 8.3.12-1.1 * php8-exif 8.3.12-1.1 * php8-ffi 8.3.12-1.1 * php8-fileinfo 8.3.12-1.1 * php8-ftp 8.3.12-1.1 * php8-gd 8.3.12-1.1 * php8-gettext 8.3.12-1.1 * php8-gmp 8.3.12-1.1 * php8-iconv 8.3.12-1.1 * php8-intl 8.3.12-1.1 * php8-ldap 8.3.12-1.1 * php8-mbstring 8.3.12-1.1 * php8-mysql 8.3.12-1.1 * php8-odbc 8.3.12-1.1 * php8-opcache 8.3.12-1.1 * php8-openssl 8.3.12-1.1 * php8-pcntl 8.3.12-1.1 * php8-pdo 8.3.12-1.1 * php8-pgsql 8.3.12-1.1 * php8-phar 8.3.12-1.1 * php8-posix 8.3.12-1.1 * php8-readline 8.3.12-1.1 * php8-shmop 8.3.12-1.1 * php8-snmp 8.3.12-1.1 * php8-soap 8.3.12-1.1 * php8-sockets 8.3.12-1.1 * php8-sodium 8.3.12-1.1 * php8-sqlite 8.3.12-1.1 * php8-sysvmsg 8.3.12-1.1 * php8-sysvsem 8.3.12-1.1 * php8-sysvshm 8.3.12-1.1 * php8-tidy 8.3.12-1.1 * php8-tokenizer 8.3.12-1.1 * php8-xmlreader 8.3.12-1.1 * php8-xmlwriter 8.3.12-1.1 * php8-xsl 8.3.12-1.1 * php8-zip 8.3.12-1.1 * php8-zlib 8.3.12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-4577.html * https://www.suse.com/security/cve/CVE-2024-8925.html * https://www.suse.com/security/cve/CVE-2024-8927.html * https://www.suse.com/security/cve/CVE-2024-9026.html

1 0

openSUSE-SU-2024:14375-1: moderate: kyverno-1.12.6-1.1 on GA media
by meissner＠suse.com 30 Sep '24

30 Sep '24

# kyverno-1.12.6-1.1 on GA media Announcement ID: openSUSE-SU-2024:14375-1 Rating: moderate Cross-References: * CVE-2024-34156 CVSS scores: * CVE-2024-34156 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the kyverno-1.12.6-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * kyverno 1.12.6-1.1 * kyverno-bash-completion 1.12.6-1.1 * kyverno-fish-completion 1.12.6-1.1 * kyverno-zsh-completion 1.12.6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-34156.html

1 0

openSUSE-SU-2024:14373-1: moderate: OpenIPMI-2.0.36.4+git.c114912-1.1 on GA media
by meissner＠suse.com 30 Sep '24

30 Sep '24

# OpenIPMI-2.0.36.4+git.c114912-1.1 on GA media Announcement ID: openSUSE-SU-2024:14373-1 Rating: moderate Cross-References: * CVE-2024-42934 CVSS scores: * CVE-2024-42934 ( SUSE ): 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2024-42934 ( SUSE ): 2.3 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the OpenIPMI-2.0.36.4+git.c114912-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * OpenIPMI 2.0.36.4+git.c114912-1.1 * OpenIPMI-devel 2.0.36.4+git.c114912-1.1 * OpenIPMI-python3 2.0.36.4+git.c114912-1.1 * libOpenIPMI0 2.0.36.4+git.c114912-1.1 * libOpenIPMIui1 2.0.36.4+git.c114912-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-42934.html

1 0

openSUSE-SU-2024:14374-1: moderate: argocd-cli-2.12.4-1.1 on GA media
by meissner＠suse.com 30 Sep '24

30 Sep '24

# argocd-cli-2.12.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14374-1 Rating: moderate Cross-References: * CVE-2024-45296 Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the argocd-cli-2.12.4-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * argocd-cli 2.12.4-1.1 * argocd-cli-bash-completion 2.12.4-1.1 * argocd-cli-zsh-completion 2.12.4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-45296.html

1 0

openSUSE-SU-2024:0320-1: important: Security update for chromium
by opensuse-security＠opensuse.org 30 Sep '24

30 Sep '24

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0320-1 Rating: important References: #1230964 Cross-References: CVE-2024-9120 CVE-2024-9121 CVE-2024-9122 CVE-2024-9123 Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for chromium fixes the following issues: Chromium 129.0.6668.70 (stable released 2024-09-24) (boo#1230964) * CVE-2024-9120: Use after free in Dawn * CVE-2024-9121: Inappropriate implementation in V8 * CVE-2024-9122: Type Confusion in V8 * CVE-2024-9123: Integer overflow in Skia Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-320=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 x86_64): chromedriver-129.0.6668.70-bp155.2.120.1 chromium-129.0.6668.70-bp155.2.120.1 References: https://www.suse.com/security/cve/CVE-2024-9120.html https://www.suse.com/security/cve/CVE-2024-9121.html https://www.suse.com/security/cve/CVE-2024-9122.html https://www.suse.com/security/cve/CVE-2024-9123.html https://bugzilla.suse.com/1230964

1 0

openSUSE-SU-2024:14372-1: moderate: maven-archetype-3.3.0-1.1 on GA media
by meissner＠suse.com 28 Sep '24

28 Sep '24

# maven-archetype-3.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14372-1 Rating: moderate Cross-References: * CVE-2024-47197 CVSS scores: * CVE-2024-47197 ( SUSE ): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the maven-archetype-3.3.0-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * maven-archetype 3.3.0-1.1 * maven-archetype-catalog 3.3.0-1.1 * maven-archetype-common 3.3.0-1.1 * maven-archetype-descriptor 3.3.0-1.1 * maven-archetype-javadoc 3.3.0-1.1 * maven-archetype-packaging 3.3.0-1.1 * maven-archetype-plugin 3.3.0-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-47197.html

1 0

openSUSE-SU-2024:14371-1: moderate: json-java-20240303-1.1 on GA media
by meissner＠suse.com 28 Sep '24

28 Sep '24

# json-java-20240303-1.1 on GA media Announcement ID: openSUSE-SU-2024:14371-1 Rating: moderate Cross-References: * CVE-2022-45688 Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the json-java-20240303-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * json-java 20240303-1.1 * json-java-javadoc 20240303-1.1 ## References: * https://www.suse.com/security/cve/CVE-2022-45688.html

1 0

openSUSE-SU-2024:0319-1: moderate: Security update for coredns
by opensuse-security＠opensuse.org 27 Sep '24

27 Sep '24

openSUSE Security Update: Security update for coredns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2024:0319-1 Rating: moderate References: Cross-References: CVE-2022-27191 CVE-2022-28948 CVE-2023-28452 CVE-2023-30464 CVE-2024-0874 CVE-2024-22189 CVSS scores: CVE-2022-27191 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-28948 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2024-22189 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for coredns fixes the following issues: Update to version 1.11.3: * optimize the performance for high qps (#6767) * bump deps * Fix zone parser error handling (#6680) * Add alternate option to forward plugin (#6681) * fix: plugin/file: return error when parsing the file fails (#6699) * [fix:documentation] Clarify autopath README (#6750) * Fix outdated test (#6747) * Bump go version from 1.21.8 to 1.21.11 (#6755) * Generate zplugin.go correctly with third-party plugins (#6692) * dnstap: uses pointer receiver for small response writer (#6644) * chore: fix function name in comment (#6608) * [plugin/forward] Strip local zone from IPV6 nameservers (#6635) - fixes CVE-2023-30464 - fixes CVE-2023-28452 Update to upstream head (git commit #5a52707): * bump deps to address security issue CVE-2024-22189 * Return RcodeServerFailure when DNS64 has no next plugin (#6590) * add plusserver to adopters (#6565) * Change the log flags to be a variable that can be set prior to calling Run (#6546) * Enable Prometheus native histograms (#6524) * forward: respect context (#6483) * add client labels to k8s plugin metadata (#6475) * fix broken link in webpage (#6488) * Repo controlled Go version (#6526) * removed the mutex locks with atomic bool (#6525) Update to version 1.11.2: * rewrite: fix multi request concurrency issue in cname rewrite (#6407) * plugin/tls: respect the path specified by root plugin (#6138) * plugin/auto: warn when auto is unable to read elements of the directory tree (#6333) * fix: make the codeowners link relative (#6397) * plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (#6351) * plugin/cache: key cache on Checking Disabled (CD) bit (#6354) * Use the correct root domain name in the proxy plugin's TestHealthX tests (#6395) * Add PITS Global Data Recovery Services as an adopter (#6304) * Handle UDP responses that overflow with TC bit with test case (#6277) * plugin/rewrite: add rcode as a rewrite option (#6204) - CVE-2024-0874: coredns: CD bit response is cached and served later - Update to version 1.11.1: * Revert “plugin/forward: Continue waiting after receiving malformed responses * plugin/dnstap: add support for “extra” field in payload * plugin/cache: fix keepttl parsing - Update to version 1.11.0: * Adds support for accepting DNS connections over QUIC (doq). * Adds CNAME target rewrites to the rewrite plugin. * Plus many bug fixes, and some security improvements. * This release introduces the following backward incompatible changes: + In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta, since all supported K8s versions now use Endpointslice. + The bufsize plugin changed its default size limit value to 1232 + Some changes to forward plugin metrics. - Update to version 1.10.1: * Corrected architecture labels in multi-arch image manifest * A new plugin timeouts that allows configuration of server listener timeout durations * acl can drop queries as an action * template supports creating responses with extended DNS errors * New weighted policy in loadbalance * Option to serve original record TTLs from cache - Update to version 1.10.0: * core: add log listeners for k8s_event plugin (#5451) * core: log DoH HTTP server error logs in CoreDNS format (#5457) * core: warn when domain names are not in RFC1035 preferred syntax (#5414) * plugin/acl: add support for extended DNS errors (#5532) * plugin/bufsize: do not expand query UDP buffer size if already set to a smaller value (#5602) * plugin/cache: add cache disable option (#5540) * plugin/cache: add metadata for wildcard record responses (#5308) * plugin/cache: add option to adjust SERVFAIL response cache TTL (#5320) * plugin/cache: correct responses to Authenticated Data requests (#5191) * plugin/dnstap: add identity and version support for the dnstap plugin (#5555) * plugin/file: add metadata for wildcard record responses (#5308) * plugin/forward: enable multiple forward declarations (#5127) * plugin/forward: health_check needs to normalize a specified domain name (#5543) * plugin/forward: remove unused coredns_forward_sockets_open metric (#5431) * plugin/header: add support for query modification (#5556) * plugin/health: bypass proxy in self health check (#5401) * plugin/health: don't go lameduck when reloading (#5472) * plugin/k8s_external: add support for PTR requests (#5435) * plugin/k8s_external: resolve headless services (#5505) * plugin/kubernetes: make kubernetes client log in CoreDNS format (#5461) * plugin/ready: reset list of readiness plugins on startup (#5492) * plugin/rewrite: add PTR records to supported types (#5565) * plugin/rewrite: fix a crash in rewrite plugin when rule type is missing (#5459) * plugin/rewrite: fix out-of-index issue in rewrite plugin (#5462) * plugin/rewrite: support min and max TTL values (#5508) * plugin/trace : make zipkin HTTP reporter more configurable using Corefile (#5460) * plugin/trace: read trace context info from headers for DOH (#5439) * plugin/tsig: add new plugin TSIG for validating TSIG requests and signing responses (#4957) * core: update gopkg.in/yaml.v3 to fix CVE-2022-28948 * core: update golang.org/x/crypto to fix CVE-2022-27191 * plugin/acl: adding a check to parse out zone info * plugin/dnstap: support FQDN TCP endpoint * plugin/errors: add stacktrace option to log a stacktrace during panic recovery * plugin/template: return SERVFAIL for zone-match regex-no-match case Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2024-319=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 x86_64): coredns-1.11.3-bp156.4.3.1 - openSUSE Backports SLE-15-SP6 (noarch): coredns-extras-1.11.3-bp156.4.3.1 References: https://www.suse.com/security/cve/CVE-2022-27191.html https://www.suse.com/security/cve/CVE-2022-28948.html https://www.suse.com/security/cve/CVE-2023-28452.html https://www.suse.com/security/cve/CVE-2023-30464.html https://www.suse.com/security/cve/CVE-2024-0874.html https://www.suse.com/security/cve/CVE-2024-22189.html

1 0

SUSE-SU-2024:3470-1: important: Security update for python3
by OPENSUSE-SECURITY-UPDATES 27 Sep '24

27 Sep '24

# Security update for python3 Announcement ID: SUSE-SU-2024:3470-1 Rating: important References: * bsc#1227233 * bsc#1227378 * bsc#1227999 * bsc#1228780 * bsc#1229596 * bsc#1230227 Cross-References: * CVE-2024-5642 * CVE-2024-6232 * CVE-2024-6923 * CVE-2024-7592 CVSS scores: * CVE-2024-5642 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2024-6232 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-6232 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-6232 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-6923 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2024-7592 ( SUSE ): 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2024-7592 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Development Tools Module 15-SP5 * Development Tools Module 15-SP6 * openSUSE Leap 15.3 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.2 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities and has two security fixes can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). * CVE-2024-5642: Fixed buffer overread when NPN is used and invalid values are sent to the OpenSSL API (bsc#1227233). * CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596). * CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) Bug fixes: * %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999). * Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). * Remove %suse_update_desktop_file macro as it is not useful any more. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2024-3470=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3470=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3470=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2024-3470=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3470=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2024-3470=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3470=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2024-3470=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3470=1 * Basesystem Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-3470=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3470=1 * Development Tools Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-3470=1 * Development Tools Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP6-2024-3470=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3470=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-3470=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-3470=1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-3470=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3470=1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-3470=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3470=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-3470=1 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-3470=1 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.3-2024-3470=1 * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-3470=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2024-3470=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3470=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-3470=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-doc-3.6.15-150300.10.72.1 * python3-testsuite-debuginfo-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-testsuite-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * python3-doc-devhelp-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * openSUSE Leap 15.3 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.72.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.72.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_6m1_0-64bit-3.6.15-150300.10.72.1 * libpython3_6m1_0-64bit-debuginfo-3.6.15-150300.10.72.1 * openSUSE Leap Micro 5.5 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-doc-3.6.15-150300.10.72.1 * python3-testsuite-debuginfo-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-testsuite-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * python3-doc-devhelp-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * openSUSE Leap 15.5 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.72.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.72.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-doc-3.6.15-150300.10.72.1 * python3-testsuite-debuginfo-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-testsuite-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * python3-doc-devhelp-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * openSUSE Leap 15.6 (x86_64) * libpython3_6m1_0-32bit-3.6.15-150300.10.72.1 * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * Development Tools Module 15-SP5 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * Development Tools Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Manager Proxy 4.3 (x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Manager Retail Branch Server 4.3 (x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Manager Server 4.3 (ppc64le s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-curses-debuginfo-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-dbm-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * python3-curses-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * python3-devel-debuginfo-3.6.15-150300.10.72.1 * python3-tk-3.6.15-150300.10.72.1 * python3-dbm-debuginfo-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-idle-3.6.15-150300.10.72.1 * python3-tools-3.6.15-150300.10.72.1 * python3-devel-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * python3-tk-debuginfo-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * python3-core-debugsource-3.6.15-150300.10.72.1 * python3-debuginfo-3.6.15-150300.10.72.1 * python3-base-debuginfo-3.6.15-150300.10.72.1 * python3-base-3.6.15-150300.10.72.1 * libpython3_6m1_0-3.6.15-150300.10.72.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.72.1 * python3-debugsource-3.6.15-150300.10.72.1 * python3-3.6.15-150300.10.72.1 ## References: * https://www.suse.com/security/cve/CVE-2024-5642.html * https://www.suse.com/security/cve/CVE-2024-6232.html * https://www.suse.com/security/cve/CVE-2024-6923.html * https://www.suse.com/security/cve/CVE-2024-7592.html * https://bugzilla.suse.com/show_bug.cgi?id=1227233 * https://bugzilla.suse.com/show_bug.cgi?id=1227378 * https://bugzilla.suse.com/show_bug.cgi?id=1227999 * https://bugzilla.suse.com/show_bug.cgi?id=1228780 * https://bugzilla.suse.com/show_bug.cgi?id=1229596 * https://bugzilla.suse.com/show_bug.cgi?id=1230227

1 0