gpp_maybe Security update for python311

SUSE-SLE-Module-Public-Cloud-15-SP4-2024-3418

This update for python311 fixes the following issues: - Update python311 to version 3.11.10. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) - CVE-2024-7592: quadratic algorithm used when parsing cookies leads to excessive resource consumption. (bsc#1229596) - CVE-2024-8088: lack of name validation when extracting a zip archive leads to infinite loops. (bsc#1229704)

• Release Date
  Sep 24 2024
• References
  Bugzilla: 1230227, 1229596, 1229704
  CVEs: CVE-2024-6232, CVE-2024-7592, CVE-2024-8088
• Type
  security
• Severity
  important

cloud_download Downloads

Public Cloud Module 15.4 aarch64

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150400.9.35.1 lock rpm

  python311
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock rpm lock src

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150400.9.35.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock src

Public Cloud Module 15.4 ppc64le

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150400.9.35.1 lock rpm

  python311
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock rpm lock src

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150400.9.35.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock src

Public Cloud Module 15.4 s390x

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150400.9.35.1 lock rpm

  python311
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock rpm lock src

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150400.9.35.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock src

Public Cloud Module 15.4 x86_64

• Packages
  libpython3_11-1_0
  Python Interpreter shared library

  3.11.10-150400.9.35.1 lock rpm

  python311
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock rpm lock src

  python311-base
  Python 3 Interpreter and Stdlib Core

  3.11.10-150400.9.35.1 lock rpm

  python311-core
  Python 3 Interpreter

  3.11.10-150400.9.35.1 lock src