Security update for python3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3294-1 Final 1 1 2024-09-18T06:39:50Z current 2024-09-18T06:39:50Z 2024-09-18T06:39:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python3 This update for python3 fixes the following issues: - CVE-2024-6923: email header injection due to unquoted newlines. (bsc#1228780) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2024-3294,Image SLES12-SP5-Azure-HPC-BYOS-2024-3294,Image SLES12-SP5-Azure-HPC-On-Demand-2024-3294,Image SLES12-SP5-Azure-SAP-BYOS-2024-3294,Image SLES12-SP5-Azure-SAP-On-Demand-2024-3294,Image SLES12-SP5-Azure-Standard-On-Demand-2024-3294,Image SLES12-SP5-EC2-BYOS-2024-3294,Image SLES12-SP5-EC2-ECS-On-Demand-2024-3294,Image SLES12-SP5-EC2-On-Demand-2024-3294,Image SLES12-SP5-EC2-SAP-BYOS-2024-3294,Image SLES12-SP5-EC2-SAP-On-Demand-2024-3294,Image SLES12-SP5-GCE-BYOS-2024-3294,Image SLES12-SP5-GCE-On-Demand-2024-3294,Image SLES12-SP5-GCE-SAP-BYOS-2024-3294,Image SLES12-SP5-GCE-SAP-On-Demand-2024-3294,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2024-3294,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2024-3294,SUSE-2024-3294,SUSE-SLE-Module-Web-Scripting-12-2024-3294,SUSE-SLE-SDK-12-SP5-2024-3294,SUSE-SLE-SERVER-12-SP5-2024-3294 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243294-1/ Link for SUSE-SU-2024:3294-1 https://lists.suse.com/pipermail/sle-updates/2024-September/036934.html E-Mail link for SUSE-SU-2024:3294-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1228780 SUSE Bug 1228780 https://www.suse.com/security/cve/CVE-2024-6923/ SUSE CVE CVE-2024-6923 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 libpython3_4m1_0-3.4.10-25.136.1 python3-3.4.10-25.136.1 python3-base-3.4.10-25.136.1 python3-curses-3.4.10-25.136.1 libpython3_4m1_0-32bit-3.4.10-25.136.1 libpython3_4m1_0-64bit-3.4.10-25.136.1 python3-32bit-3.4.10-25.136.1 python3-64bit-3.4.10-25.136.1 python3-base-32bit-3.4.10-25.136.1 python3-base-64bit-3.4.10-25.136.1 python3-dbm-3.4.10-25.136.1 python3-devel-3.4.10-25.136.1 python3-doc-3.4.10-25.136.1 python3-doc-pdf-3.4.10-25.136.1 python3-idle-3.4.10-25.136.1 python3-testsuite-3.4.10-25.136.1 python3-tk-3.4.10-25.136.1 python3-tools-3.4.10-25.136.1 libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libpython3_4m1_0-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-base-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-curses-3.4.10-25.136.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libpython3_4m1_0-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-base-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-curses-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 libpython3_4m1_0-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_4m1_0-32bit-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-base-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-curses-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-devel-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-tk-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_4m1_0-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpython3_4m1_0-32bit-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-base-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-curses-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-devel-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-tk-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-dbm-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 python3-devel-3.4.10-25.136.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized. CVE-2024-6923 Image SLES12-SP5-Azure-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-Azure-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-Azure-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-Azure-HPC-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-Azure-HPC-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-Azure-HPC-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-Azure-HPC-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-Azure-HPC-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-Azure-HPC-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-BYOS:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-Azure-SAP-On-Demand:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-Azure-Standard-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-Azure-Standard-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-Azure-Standard-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-EC2-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-EC2-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-EC2-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-EC2-ECS-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-EC2-ECS-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-EC2-ECS-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-EC2-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-EC2-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-EC2-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-BYOS:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-EC2-SAP-On-Demand:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-GCE-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-GCE-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-GCE-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-GCE-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-GCE-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-GCE-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-BYOS:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-BYOS:python3-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-BYOS:python3-base-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-BYOS:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-On-Demand:python3-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-On-Demand:python3-base-3.4.10-25.136.1 Image SLES12-SP5-GCE-SAP-On-Demand:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-base-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-curses-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libpython3_4m1_0-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-base-3.4.10-25.136.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-curses-3.4.10-25.136.1 SUSE Linux Enterprise Module for Web and Scripting 12:libpython3_4m1_0-3.4.10-25.136.1 SUSE Linux Enterprise Module for Web and Scripting 12:python3-3.4.10-25.136.1 SUSE Linux Enterprise Module for Web and Scripting 12:python3-base-3.4.10-25.136.1 SUSE Linux Enterprise Module for Web and Scripting 12:python3-curses-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:python3-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:python3-base-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:python3-curses-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:python3-devel-3.4.10-25.136.1 SUSE Linux Enterprise Server 12 SP5:python3-tk-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-base-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-curses-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-devel-3.4.10-25.136.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-tk-3.4.10-25.136.1 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-dbm-3.4.10-25.136.1 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-devel-3.4.10-25.136.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243294-1/ https://www.suse.com/security/cve/CVE-2024-6923.html CVE-2024-6923 https://bugzilla.suse.com/1228780 SUSE Bug 1228780