Security update for python-docker SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:1937-1 Final 1 1 2024-06-07T10:57:14Z current 2024-06-07T10:57:14Z 2024-06-07T10:57:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python-docker This update for python-docker fixes the following issues: - CVE-2024-35195: Fixed missing certificate verification (bsc#1224788). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP4-BYOS-Azure-2024-1937,Image SLES15-SP4-HPC-BYOS-2024-1937,Image SLES15-SP4-HPC-BYOS-Azure-2024-1937,Image SLES15-SP4-Hardened-BYOS-Azure-2024-1937,Image SLES15-SP4-SAP-2024-1937,Image SLES15-SP4-SAP-Azure-2024-1937,Image SLES15-SP4-SAP-BYOS-Azure-2024-1937,Image SLES15-SP4-SAP-Hardened-2024-1937,Image SLES15-SP4-SAP-Hardened-Azure-2024-1937,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2024-1937,Image SLES15-SP4-SAPCAL-2024-1937,Image SLES15-SP4-SAPCAL-Azure-2024-1937,Image SLES15-SP5-Azure-3P-2024-1937,Image SLES15-SP5-Azure-Basic-2024-1937,Image SLES15-SP5-Azure-Standard-2024-1937,Image SLES15-SP5-BYOS-Azure-2024-1937,Image SLES15-SP5-HPC-Azure-2024-1937,Image SLES15-SP5-HPC-BYOS-Azure-2024-1937,Image SLES15-SP5-Hardened-BYOS-Azure-2024-1937,Image SLES15-SP5-SAP-Azure-3P-2024-1937,Image SLES15-SP5-SAP-BYOS-Azure-2024-1937,Image SLES15-SP5-SAP-Hardened-Azure-2024-1937,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2024-1937,Image SLES15-SP5-SAPCAL-Azure-2024-1937,Image SLES15-SP6-Azure-Basic-2024-1937,Image SLES15-SP6-Azure-Standard-2024-1937,Image SLES15-SP6-BYOS-Azure-2024-1937,Image SLES15-SP6-HPC-2024-1937,Image SLES15-SP6-HPC-Azure-2024-1937,Image SLES15-SP6-HPC-BYOS-Azure-2024-1937,Image SLES15-SP6-Hardened-BYOS-Azure-2024-1937,Image SLES15-SP6-SAP-Azure-2024-1937,Image SLES15-SP6-SAP-BYOS-Azure-2024-1937,Image SLES15-SP6-SAP-Hardened-2024-1937,Image SLES15-SP6-SAP-Hardened-Azure-2024-1937,Image SLES15-SP6-SAP-Hardened-BYOS-Azure-2024-1937,Image SLES15-SP6-SAPCAL-Azure-2024-1937,SUSE-2024-1937,SUSE-SLE-Module-Public-Cloud-15-SP4-2024-1937,SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1937 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20241937-1/ Link for SUSE-SU-2024:1937-1 https://lists.suse.com/pipermail/sle-security-updates/2024-June/018657.html E-Mail link for SUSE-SU-2024:1937-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1224788 SUSE Bug 1224788 https://www.suse.com/security/cve/CVE-2024-35195/ SUSE CVE CVE-2024-35195 page Image SLES15-SP4-BYOS-Azure Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-Azure Image SLES15-SP4-Hardened-BYOS-Azure Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Azure Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAPCAL-Azure SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP5 python311-docker-7.0.0-150400.8.7.1 python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-HPC-BYOS python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-HPC-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-Hardened-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAP python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAP-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAP-Hardened python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAPCAL python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP4-SAPCAL-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-Azure-3P python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-Azure-Basic python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-Azure-Standard python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-HPC-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-SAP-Azure-3P python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP5-SAPCAL-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-Azure-Basic python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-Azure-Standard python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-HPC python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-HPC-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-HPC-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-Hardened-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-SAP-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-SAP-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-SAP-Hardened python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-SAP-Hardened-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-Azure python311-docker-7.0.0-150400.8.7.1 as a component of Image SLES15-SP6-SAPCAL-Azure python311-docker-7.0.0-150400.8.7.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 python311-docker-7.0.0-150400.8.7.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0. CVE-2024-35195 Image SLES15-SP4-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-HPC-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-HPC-BYOS:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-Hardened-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAP-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAP-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAP-Hardened-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAP-Hardened:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAP:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAPCAL-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP4-SAPCAL:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-Azure-3P:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-Azure-Basic:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-Azure-Standard:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-HPC-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-HPC-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-Hardened-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-SAP-Azure-3P:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-SAP-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-SAP-Hardened-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP5-SAPCAL-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-Azure-Basic:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-Azure-Standard:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-HPC-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-HPC-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-HPC:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-Hardened-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-SAP-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-SAP-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-SAP-Hardened-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-SAP-Hardened-BYOS-Azure:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-SAP-Hardened:python311-docker-7.0.0-150400.8.7.1 Image SLES15-SP6-SAPCAL-Azure:python311-docker-7.0.0-150400.8.7.1 SUSE Linux Enterprise Module for Public Cloud 15 SP4:python311-docker-7.0.0-150400.8.7.1 SUSE Linux Enterprise Module for Public Cloud 15 SP5:python311-docker-7.0.0-150400.8.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20241937-1/ https://www.suse.com/security/cve/CVE-2024-35195.html CVE-2024-35195 https://bugzilla.suse.com/1224788 SUSE Bug 1224788