Security update for python312 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:2572-1 Final 1 1 2024-07-22T10:34:49Z current 2024-07-22T10:34:49Z 2024-07-22T10:34:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python312 This update for python312 fixes the following issues: - CVE-2024-4032: Corrected information about public and private IPv4 and IPv6 address ranges (bsc#1226448). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container bci/python:latest-2024-2572,SUSE-2024-2572,SUSE-SLE-Module-Python3-15-SP6-2024-2572,openSUSE-SLE-15.6-2024-2572 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20242572-1/ Link for SUSE-SU-2024:2572-1 https://lists.suse.com/pipermail/sle-updates/2024-July/036102.html E-Mail link for SUSE-SU-2024:2572-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1225660 SUSE Bug 1225660 https://bugzilla.suse.com/1226447 SUSE Bug 1226447 https://bugzilla.suse.com/1226448 SUSE Bug 1226448 https://bugzilla.suse.com/1227152 SUSE Bug 1227152 https://bugzilla.suse.com/1227378 SUSE Bug 1227378 https://www.suse.com/security/cve/CVE-2024-0397/ SUSE CVE CVE-2024-0397 page https://www.suse.com/security/cve/CVE-2024-4030/ SUSE CVE CVE-2024-4030 page https://www.suse.com/security/cve/CVE-2024-4032/ SUSE CVE CVE-2024-4032 page Container bci/python:latest SUSE Linux Enterprise Module for Python 3 15 SP6 openSUSE Leap 15.6 libpython3_12-1_0-3.12.4-150600.3.3.1 python312-3.12.4-150600.3.3.1 python312-base-3.12.4-150600.3.3.1 python312-devel-3.12.4-150600.3.3.1 libpython3_12-1_0-32bit-3.12.4-150600.3.3.1 libpython3_12-1_0-64bit-3.12.4-150600.3.3.1 python312-32bit-3.12.4-150600.3.3.1 python312-64bit-3.12.4-150600.3.3.1 python312-base-32bit-3.12.4-150600.3.3.1 python312-base-64bit-3.12.4-150600.3.3.1 python312-curses-3.12.4-150600.3.3.1 python312-dbm-3.12.4-150600.3.3.1 python312-doc-3.12.4-150600.3.3.1 python312-doc-devhelp-3.12.4-150600.3.3.1 python312-idle-3.12.4-150600.3.3.1 python312-testsuite-3.12.4-150600.3.3.1 python312-tk-3.12.4-150600.3.3.1 python312-tools-3.12.4-150600.3.3.1 libpython3_12-1_0-3.12.4-150600.3.3.1 as a component of Container bci/python:latest python312-3.12.4-150600.3.3.1 as a component of Container bci/python:latest python312-base-3.12.4-150600.3.3.1 as a component of Container bci/python:latest python312-devel-3.12.4-150600.3.3.1 as a component of Container bci/python:latest libpython3_12-1_0-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-base-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-curses-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-dbm-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-devel-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-idle-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-tk-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python312-tools-3.12.4-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 libpython3_12-1_0-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 libpython3_12-1_0-32bit-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-32bit-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-base-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-base-32bit-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-curses-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-dbm-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-devel-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-doc-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-doc-devhelp-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-idle-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-testsuite-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-tk-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 python312-tools-3.12.4-150600.3.3.1 as a component of openSUSE Leap 15.6 A defect was discovered in the Python "ssl" module where there is a memory race condition with the ssl.SSLContext methods "cert_store_stats()" and "get_ca_certs()". The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5. CVE-2024-0397 Container bci/python:latest:libpython3_12-1_0-3.12.4-150600.3.3.1 Container bci/python:latest:python312-3.12.4-150600.3.3.1 Container bci/python:latest:python312-base-3.12.4-150600.3.3.1 Container bci/python:latest:python312-devel-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:libpython3_12-1_0-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-base-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-curses-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-dbm-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-devel-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-idle-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-tk-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-tools-3.12.4-150600.3.3.1 openSUSE Leap 15.6:libpython3_12-1_0-3.12.4-150600.3.3.1 openSUSE Leap 15.6:libpython3_12-1_0-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-base-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-base-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-curses-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-dbm-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-devel-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-doc-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-doc-devhelp-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-idle-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-testsuite-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-tk-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-tools-3.12.4-150600.3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242572-1/ https://www.suse.com/security/cve/CVE-2024-0397.html CVE-2024-0397 https://bugzilla.suse.com/1226447 SUSE Bug 1226447 On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writing to the temporary directory by other users, instead usually inheriting the correct permissions from the default location. Alternate configurations or users without a profile directory may not have the intended permissions. If you're not using Windows or haven't changed the temporary directory location then you aren't affected by this vulnerability. On other platforms the returned directory is consistently readable and writable only by the current user. This issue was caused by Python not supporting Unix permissions on Windows. The fix adds support for Unix "700" for the mkdir function on Windows which is used by mkdtemp() to ensure the newly created directory has the proper permissions. CVE-2024-4030 Container bci/python:latest:libpython3_12-1_0-3.12.4-150600.3.3.1 Container bci/python:latest:python312-3.12.4-150600.3.3.1 Container bci/python:latest:python312-base-3.12.4-150600.3.3.1 Container bci/python:latest:python312-devel-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:libpython3_12-1_0-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-base-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-curses-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-dbm-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-devel-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-idle-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-tk-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-tools-3.12.4-150600.3.3.1 openSUSE Leap 15.6:libpython3_12-1_0-3.12.4-150600.3.3.1 openSUSE Leap 15.6:libpython3_12-1_0-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-base-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-base-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-curses-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-dbm-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-devel-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-doc-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-doc-devhelp-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-idle-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-testsuite-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-tk-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-tools-3.12.4-150600.3.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242572-1/ https://www.suse.com/security/cve/CVE-2024-4030.html CVE-2024-4030 https://bugzilla.suse.com/1227152 SUSE Bug 1227152 The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn't be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior. CVE-2024-4032 Container bci/python:latest:libpython3_12-1_0-3.12.4-150600.3.3.1 Container bci/python:latest:python312-3.12.4-150600.3.3.1 Container bci/python:latest:python312-base-3.12.4-150600.3.3.1 Container bci/python:latest:python312-devel-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:libpython3_12-1_0-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-base-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-curses-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-dbm-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-devel-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-idle-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-tk-3.12.4-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python312-tools-3.12.4-150600.3.3.1 openSUSE Leap 15.6:libpython3_12-1_0-3.12.4-150600.3.3.1 openSUSE Leap 15.6:libpython3_12-1_0-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-base-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-base-32bit-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-curses-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-dbm-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-devel-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-doc-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-doc-devhelp-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-idle-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-testsuite-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-tk-3.12.4-150600.3.3.1 openSUSE Leap 15.6:python312-tools-3.12.4-150600.3.3.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242572-1/ https://www.suse.com/security/cve/CVE-2024-4032.html CVE-2024-4032 https://bugzilla.suse.com/1226448 SUSE Bug 1226448