Security update for python36 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3353-1 Final 1 1 2024-09-20T09:32:01Z current 2024-09-20T09:32:01Z 2024-09-20T09:32:01Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python36 This update for python36 fixes the following issues: - CVE-2024-5642: Fixed invalid value sent to underlying OpenSSL API may cause a buffer overread when NPN is used (bsc#1227233) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2024-3353,Image SLES12-SP5-Azure-HPC-BYOS-2024-3353,Image SLES12-SP5-Azure-HPC-On-Demand-2024-3353,Image SLES12-SP5-Azure-SAP-BYOS-2024-3353,Image SLES12-SP5-Azure-SAP-On-Demand-2024-3353,Image SLES12-SP5-Azure-Standard-On-Demand-2024-3353,Image SLES12-SP5-EC2-BYOS-2024-3353,Image SLES12-SP5-EC2-ECS-On-Demand-2024-3353,Image SLES12-SP5-EC2-On-Demand-2024-3353,Image SLES12-SP5-EC2-SAP-BYOS-2024-3353,Image SLES12-SP5-EC2-SAP-On-Demand-2024-3353,Image SLES12-SP5-GCE-BYOS-2024-3353,Image SLES12-SP5-GCE-On-Demand-2024-3353,Image SLES12-SP5-GCE-SAP-BYOS-2024-3353,Image SLES12-SP5-GCE-SAP-On-Demand-2024-3353,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2024-3353,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2024-3353,SUSE-2024-3353,SUSE-SLE-SDK-12-SP5-2024-3353,SUSE-SLE-SERVER-12-SP5-2024-3353 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243353-1/ Link for SUSE-SU-2024:3353-1 https://lists.suse.com/pipermail/sle-security-updates/2024-September/019480.html E-Mail link for SUSE-SU-2024:3353-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1227233 SUSE Bug 1227233 https://www.suse.com/security/cve/CVE-2024-5642/ SUSE CVE CVE-2024-5642 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 libpython3_6m1_0-3.6.15-64.1 python36-base-3.6.15-64.1 libpython3_6m1_0-32bit-3.6.15-64.1 libpython3_6m1_0-64bit-3.6.15-64.1 python36-3.6.15-64.1 python36-32bit-3.6.15-64.1 python36-64bit-3.6.15-64.1 python36-base-32bit-3.6.15-64.1 python36-base-64bit-3.6.15-64.1 python36-curses-3.6.15-64.1 python36-dbm-3.6.15-64.1 python36-devel-3.6.15-64.1 python36-idle-3.6.15-64.1 python36-testsuite-3.6.15-64.1 python36-tk-3.6.15-64.1 python36-tools-3.6.15-64.1 libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libpython3_6m1_0-3.6.15-64.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python36-base-3.6.15-64.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libpython3_6m1_0-3.6.15-64.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_6m1_0-32bit-3.6.15-64.1 as a component of SUSE Linux Enterprise Server 12 SP5 python36-3.6.15-64.1 as a component of SUSE Linux Enterprise Server 12 SP5 python36-base-3.6.15-64.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_6m1_0-3.6.15-64.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpython3_6m1_0-32bit-3.6.15-64.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python36-3.6.15-64.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python36-base-3.6.15-64.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python36-devel-3.6.15-64.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured). CVE-2024-5642 Image SLES12-SP5-Azure-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-Azure-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-Azure-HPC-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-Azure-HPC-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-Azure-HPC-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-Azure-HPC-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-Azure-SAP-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-Azure-SAP-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-Azure-SAP-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-Azure-SAP-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-Azure-Standard-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-Azure-Standard-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-EC2-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-EC2-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-EC2-ECS-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-EC2-ECS-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-EC2-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-EC2-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-EC2-SAP-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-EC2-SAP-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-EC2-SAP-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-EC2-SAP-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-GCE-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-GCE-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-GCE-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-GCE-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-GCE-SAP-BYOS:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-GCE-SAP-BYOS:python36-base-3.6.15-64.1 Image SLES12-SP5-GCE-SAP-On-Demand:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-GCE-SAP-On-Demand:python36-base-3.6.15-64.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python36-base-3.6.15-64.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libpython3_6m1_0-3.6.15-64.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python36-base-3.6.15-64.1 SUSE Linux Enterprise Server 12 SP5:libpython3_6m1_0-3.6.15-64.1 SUSE Linux Enterprise Server 12 SP5:libpython3_6m1_0-32bit-3.6.15-64.1 SUSE Linux Enterprise Server 12 SP5:python36-3.6.15-64.1 SUSE Linux Enterprise Server 12 SP5:python36-base-3.6.15-64.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_6m1_0-3.6.15-64.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_6m1_0-32bit-3.6.15-64.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python36-3.6.15-64.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python36-base-3.6.15-64.1 SUSE Linux Enterprise Software Development Kit 12 SP5:python36-devel-3.6.15-64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243353-1/ https://www.suse.com/security/cve/CVE-2024-5642.html CVE-2024-5642 https://bugzilla.suse.com/1227233 SUSE Bug 1227233