This update for python fixes the following issues:

- CVE-2022-48566: Fixed a potential timing side channel due to
  inadequate checking during HMAC comparison (bsc#1214691).


              

References

---

• CVE: CVE-2023-27043
• CVE: CVE-2022-48566
• CVE: CVE-2022-48565
• Bugzilla: 1214691 VUL-0: CVE-2022-48566: python-base,python36,python3,python: Use CRYPTO_memcmp() for compare_digest
• Bugzilla: 1214685 VUL-0: CVE-2022-48565: python3,python,python3: Avoid plistlib XML vulnerabilities by rejecting entity directives
• Bugzilla: 1210638 VUL-0: CVE-2023-27043: python39,python310,python27,python,python36,python3,python311: The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character

Packages

---

• python-2.7.18-150000.57.1

• python-base-2.7.18-150000.57.1