Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-1862


Security update for python


Type: security
Severity: moderate
Issued: 2024-05-30
Description:
This update for python fixes the following issues:

- CVE-2023-52425: Fixed using the system libexpat (bsc#1219559).
- CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr() (bsc#1222537).
- CVE-2022-48560: Fixed use-after-free in Python via heappushpop in heapq (bsc#1214675).
- CVE-2024-0450: Detect the vulnerability of the "quoted-overlap" zipbomb (bsc#1221854).

Bug fixes:

- Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306).
- Build with -std=gnu89 to build correctly with gcc14 (bsc#1220970).
- Switch from %patchN style to the %patch -P N one.


              

Packages


  • python-2.7.18-150000.65.1
  • python-base-2.7.18-150000.65.1