Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

openSUSE: SUSE-SU-2023:3829-1 High: Python3 Security Vulnerability

opensuse
Calendar Grey September 27, 2023
Scroller Opensuse
The latest python3 security patch for openSUSE resolves a severe vulnerability concerning a TLS handshake bypass, along with detailed patching guidance.
This update for python3 fixes the following issues: CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).

Description

This update for python3 fixes the following issues:

* CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).

Topics%20covered

Topics Covered

security advisory python important update openSUSE TLS bypass

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch openSUSE-SLE-15.4-2023-3828=1

* openSUSE Leap 15.5

zypper in -t patch openSUSE-SLE-15.5-2023-3828=1

* SUSE Linux Enterprise Micro for Rancher 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2023-3828=1

* SUSE Linux Enterprise Micro 5.3

zypper in -t patch SUSE-SLE-Micro-5.3-2023-3828=1

* SUSE Linux Enterprise Micro for Rancher 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2023-3828=1

* SUSE Linux Enterprise Micro 5.4

zypper in -t patch SUSE-SLE-Micro-5.4-2023-3828=1

* Basesystem Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3828=1

* Basesystem Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3828=1

* Development Tools Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3828=1

* Development Tools Module...

Read the Full Advisory

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

* python3-3.6.15-150300.10.51.1

* python3-doc-devhelp-3.6.15-150300.10.51.1

* python3-base-3.6.15-150300.10.51.1

* python3-tools-3.6.15-150300.10.51.1

* python3-core-debugsource-3.6.15-150300.10.51.1

* python3-idle-3.6.15-150300.10.51.1

* python3-testsuite-3.6.15-150300.10.51.1

* python3-devel-debuginfo-3.6.15-150300.10.51.1

* python3-dbm-3.6.15-150300.10.51.1

* libpython3_6m1_0-debuginfo-3.6.15-150300.10.51.1

* python3-dbm-debuginfo-3.6.15-150300.10.51.1

* python3-debuginfo-3.6.15-150300.10.51.1

* python3-devel-3.6.15-150300.10.51.1

* libpython3_6m1_0-3.6.15-150300.10.51.1

* python3-base-debuginfo-3.6.15-150300.10.51.1

* python3-curses-debuginfo-3.6.15-150300.10.51.1

* python3-tk-debuginfo-3.6.15-150300.10.51.1

* python3-curses-3.6.15-150300.10.51.1

* python3-testsuite-debuginfo-3.6.15-150300.10.51.1

* python3-debugsource-3.6.15-150300.10.51.1

* python3-doc-3.6.15-150300.10.51.1

* python3-tk-3.6.15-150300.10.51.1

* openSUSE Leap 15.4 (x86_64)

*...

Read the Full Advisory

References

* #1214692

## References:

* https://www.suse.com/security/cve/CVE-2023-40217.html

* https://bugzilla.suse.com/show_bug.cgi?id=1214692

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:3828-1
Rating: important

Topics%20covered

Topics Covered

security advisory python important update openSUSE TLS bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.