shield Security update for python

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-1862

This update for python fixes the following issues: - CVE-2023-52425: Fixed using the system libexpat (bsc#1219559). - CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr() (bsc#1222537). - CVE-2022-48560: Fixed use-after-free in Python via heappushpop in heapq (bsc#1214675). - CVE-2024-0450: Detect the vulnerability of the "quoted-overlap" zipbomb (bsc#1221854). Bug fixes: - Switch off tests. ONLY FOR FACTORY!!! (bsc#1219306). - Build with -std=gnu89 to build correctly with gcc14 (bsc#1220970). - Switch from %patchN style to the %patch -P N one.

• Release Date
  May 30 2024
• References
  Bugzilla: 1220970, 1219559, 1214675, 1219306, 1222537, 1221854
  CVEs: CVE-2023-27043, CVE-2022-48560, CVE-2023-52425, CVE-2024-0450
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Package Hub 15.5 aarch64

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.65.1 lock rpm

  python
  Python Interpreter

  2.7.18-150000.65.1 lock rpm lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.65.1 lock rpm lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.65.1 lock rpm

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.18-150000.65.1 lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.65.1 lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.65.1 lock rpm

SUSE Package Hub 15.5 ppc64le

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.65.1 lock rpm

  python
  Python Interpreter

  2.7.18-150000.65.1 lock rpm lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.65.1 lock rpm lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.65.1 lock rpm

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.18-150000.65.1 lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.65.1 lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.65.1 lock rpm

SUSE Package Hub 15.5 s390x

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.65.1 lock rpm

  python
  Python Interpreter

  2.7.18-150000.65.1 lock rpm lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.65.1 lock rpm lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.65.1 lock rpm

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.18-150000.65.1 lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.65.1 lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.65.1 lock rpm

SUSE Package Hub 15.5 x86_64

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.18-150000.65.1 lock rpm

  python
  Python Interpreter

  2.7.18-150000.65.1 lock rpm lock src

  python-base
  Python Interpreter base package

  2.7.18-150000.65.1 lock rpm lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.18-150000.65.1 lock rpm

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.18-150000.65.1 lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.18-150000.65.1 lock rpm

  python-xml
  A Python XML Interface

  2.7.18-150000.65.1 lock rpm