gpp_maybe Security update for python311

SUSE-SLE-Module-Basesystem-15-SP6-2024-3427

This update for python311 fixes the following issues: Update python311 to version 3.11.10. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) - CVE-2024-7592: quadratic algorithm used when parsing cookies leads to excessive resource consumption. (bsc#1229596) - CVE-2024-8088: lack of name validation when extracting a zip archive leads to infinite loops. (bsc#1229704)

• Release Date
  Sep 24 2024
• References
  Bugzilla: 1230227, 1229596, 1229704
  CVEs: CVE-2024-6232, CVE-2024-7592, CVE-2024-8088
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.6 aarch64

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150600.3.6.1 lock rpm

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150600.3.6.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150600.3.6.1 lock src

Basesystem Module 15.6 s390x

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150600.3.6.1 lock rpm

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150600.3.6.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150600.3.6.1 lock src

Basesystem Module 15.6 ppc64le

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150600.3.6.1 lock rpm

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150600.3.6.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150600.3.6.1 lock src

Basesystem Module 15.6 x86_64

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150600.3.6.1 lock rpm

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150600.3.6.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150600.3.6.1 lock src