Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
202
security advisorysoftware patchsecurity fixopenSUSE 15.6: 2025:0521-1 important: python312 memory issue
An update that solves two vulnerabilities and has one security fix can now be installed.. # Security update for python312 Announcement ID: SUSE-SU-2025:0521-1 Release Date: 2025-02-13T16:11:53Z Rating: important References: * bsc#1228165 * bsc#1234290 * bsc#1236705 Cross-References: * CVE-2024-12254 * CVE-2025-0938 CVSS scores: * CVE-2024-12254 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-12254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-12254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-12254 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-0938 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2025-0938 ( SUSE ): 4.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2025-0938 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2025-0938: Functions `urllib.parse.urlsplit` and `urlparse` accept domain names including square brackets (bsc#1236705). * CVE-2024-12254: Unbounded memory buffering in SelectorSocketTransport.writelines() (bsc#1234290). Other bugfixes: * Position of SUSE Python interpreters on Externally managedenvironments (bsc#1228165). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-521=1 openSUSE-SLE-15.6-2025-521=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2025-521=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * libpython3_12-1_0-debuginfo-3.12.9-150600.3.18.1 * python312-tk-3.12.9-150600.3.18.1 * python312-curses-3.12.9-150600.3.18.1 * python312-debugsource-3.12.9-150600.3.18.1 * python312-idle-3.12.9-150600.3.18.1 * python312-base-3.12.9-150600.3.18.1 * python312-doc-devhelp-3.12.9-150600.3.18.1 * python312-tk-debuginfo-3.12.9-150600.3.18.1 * python312-debuginfo-3.12.9-150600.3.18.1 * libpython3_12-1_0-3.12.9-150600.3.18.1 * python312-base-debuginfo-3.12.9-150600.3.18.1 * python312-testsuite-3.12.9-150600.3.18.1 * python312-testsuite-debuginfo-3.12.9-150600.3.18.1 * python312-dbm-3.12.9-150600.3.18.1 * python312-curses-debuginfo-3.12.9-150600.3.18.1 * python312-doc-3.12.9-150600.3.18.1 * python312-3.12.9-150600.3.18.1 * python312-devel-3.12.9-150600.3.18.1 * python312-dbm-debuginfo-3.12.9-150600.3.18.1 * python312-core-debugsource-3.12.9-150600.3.18.1 * python312-tools-3.12.9-150600.3.18.1 * openSUSE Leap 15.6 (x86_64) * python312-32bit-3.12.9-150600.3.18.1 * python312-base-32bit-3.12.9-150600.3.18.1 * libpython3_12-1_0-32bit-debuginfo-3.12.9-150600.3.18.1 * python312-base-32bit-debuginfo-3.12.9-150600.3.18.1 * libpython3_12-1_0-32bit-3.12.9-150600.3.18.1 * python312-32bit-debuginfo-3.12.9-150600.3.18.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-base-64bit-debuginfo-3.12.9-150600.3.18.1 * libpython3_12-1_0-64bit-debuginfo-3.12.9-150600.3.18.1 * python312-64bit-3.12.9-150600.3.18.1 *libpython3_12-1_0-64bit-3.12.9-150600.3.18.1 * python312-64bit-debuginfo-3.12.9-150600.3.18.1 * python312-base-64bit-3.12.9-150600.3.18.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libpython3_12-1_0-debuginfo-3.12.9-150600.3.18.1 * python312-3.12.9-150600.3.18.1 * python312-devel-3.12.9-150600.3.18.1 * python312-idle-3.12.9-150600.3.18.1 * python312-dbm-debuginfo-3.12.9-150600.3.18.1 * python312-curses-3.12.9-150600.3.18.1 * python312-tk-3.12.9-150600.3.18.1 * python312-tk-debuginfo-3.12.9-150600.3.18.1 * python312-debugsource-3.12.9-150600.3.18.1 * libpython3_12-1_0-3.12.9-150600.3.18.1 * python312-base-debuginfo-3.12.9-150600.3.18.1 * python312-base-3.12.9-150600.3.18.1 * python312-debuginfo-3.12.9-150600.3.18.1 * python312-core-debugsource-3.12.9-150600.3.18.1 * python312-tools-3.12.9-150600.3.18.1 * python312-dbm-3.12.9-150600.3.18.1 * python312-curses-debuginfo-3.12.9-150600.3.18.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12254.html * https://www.suse.com/security/cve/CVE-2025-0938.html * https://bugzilla.suse.com/show_bug.cgi?id=1228165 * https://bugzilla.suse.com/show_bug.cgi?id=1234290 * https://bugzilla.suse.com/show_bug.cgi?id=1236705 . Critical security notice for openSUSE Python 3.12 addressing severe memory flaws and domain verification vulnerabilities. Immediate updates are recommended for system integrity.. Python Security Update, openSUSE Patch, Important Advisory. . Severity: Important. LinuxSecurity.com Team
Feb 13, 2025
•Important
OpenSUSE
89
security advisoryupdateFedoraFedora 40 Updates: FEDORA-2024-82a696ca59 Critical Python 3 Security Fix
Update to 3.12.8. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-82a696ca59 2024-12-24 01:40:42.154047+00:00 -------------------------------------------------------------------------------- Name : python3-docs Product : Fedora 40 Version : 3.12.8 Release : 1.fc40 URL : https://www.python.org/ Summary : Documentation for the Python 3 programming language Description : The python3-docs package contains documentation on the Python 3 programming language and interpreter. -------------------------------------------------------------------------------- Update Information: Update to 3.12.8 -------------------------------------------------------------------------------- ChangeLog: * Tue Dec 3 2024 Charalampos Stratakis - 3.12.8-1 - Update to Python 3.12.8 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2321656 - CVE-2024-9287 python3.12: Virtual environment (venv) activation scripts don't quote paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2321656 [ 2 ] Bug #2330926 - CVE-2024-12254 python3.12: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330926 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-82a696ca59' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 24, 2024
•Critical
Fedora
89
security advisoryupdateFedoraFedora 40: 2024-82a696ca59 high: python3.12 unbounded memory issues
Update to 3.12.8. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-82a696ca59 2024-12-24 01:40:42.154047+00:00 -------------------------------------------------------------------------------- Name : python3.12 Product : Fedora 40 Version : 3.12.8 Release : 2.fc40 URL : https://www.python.org/ Summary : Version 3.12 of the Python interpreter Description : Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. -------------------------------------------------------------------------------- Update Information: Update to 3.12.8 -------------------------------------------------------------------------------- ChangeLog: * Fri Dec 6 2024 Charalampos Stratakis - 3.12.8-2 - Security fix for CVE-2024-12254 - Fixes: rhbz#2330926 * Tue Dec 3 2024 Charalampos Stratakis - 3.12.8-1 - Update to 3.12.8 - Security fix for CVE-2024-9287 - Fixes: rhbz#2321656 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2321656 - CVE-2024-9287 python3.12: Virtual environment (venv) activation scripts don't quote paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2321656 [ 2 ] Bug #2330926 - CVE-2024-12254 python3.12: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330926 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-82a696ca59' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages aresigned with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Dec 24, 2024
Fedora
89
security advisoryFedoraDoSFedora 40: FEDORA-2024-be6ea1ce44 critical: python3.13 update
This is the first maintenance release of Python 3.13 Python 3.13 is the newest major release of the Python programming language, and it contains many new features and optimizations compared to Python 3.12. 3.13.1 is the latest maintenance release, containing almost 400 bugfixes, build improvements and documentation changes since 3.13.0.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-be6ea1ce44 2024-12-19 03:59:44.538953+00:00 -------------------------------------------------------------------------------- Name : python3.13 Product : Fedora 40 Version : 3.13.1 Release : 2.fc40 URL : https://www.python.org/ Summary : Version 3.13 of the Python interpreter Description : Python 3.13 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.13 package provides the "python3.13" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.13-libs package, which should be installed automatically along with python3.13. The remaining parts of the Python standard library are broken out into the python3.13-tkinter and python3.13-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.13-docs package. Packages containing additional libraries for Python are generally named with the "python3.13-" prefix. -------------------------------------------------------------------------------- Update Information: This is the first maintenance release of Python 3.13 Python 3.13 is the newest major release of the Python programming language, and it contains many new features and optimizations compared to Python 3.12. 3.13.1 is the latest maintenance release, containing almost 400 bugfixes, build improvements anddocumentation changes since 3.13.0. Security content in this release gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the mapped IPv4 address value for deciding properties. Properties which have their behavior fixed are is_multicast, is_reserved, is_link_local, is_global, and is_unspecified. CVE-2024-9287: gh-124651: Properly quote template strings in venv activation scripts. gh-125140: Remove the current directory from sys.path when using PyREPL. CVE-2024-12254: Unbounded memory buffering in SelectorSocketTransport.writelines() fixed. -------------------------------------------------------------------------------- ChangeLog: * Mon Dec 9 2024 Miro HronÄok - 3.13.1-2 - Security fix for CVE-2024-12254 - Fixes: rhbz#2330927 * Tue Dec 3 2024 Charalampos Stratakis - 3.13.1-1 - Update to 3.13.1 - Security fix for CVE-2024-9287 - Fixes: rhbz#2321657 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2321657 - CVE-2024-9287 python3.13: Virtual environment (venv) activation scripts don't quote paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2321657 [ 2 ] Bug #2330927 - CVE-2024-12254 python3.13: Unbounded memory buffering in SelectorSocketTransport.writelines() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2330927 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-be6ea1ce44' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Stay up-to-date with urgent security patches for Python 3.13 on Fedora, focusingon memory buffering vulnerabilities and activation script issues to ensure safety. Fedora python security update, python 3.13 advisory, Fedora security fixes. . Severity: Critical. LinuxSecurity.com Team
Dec 19, 2024
•Critical
Fedora
202
security advisoryimportantthreat fixopenSUSE: 2024:4291-1 important: python312 memory buffer fix
An update that solves one vulnerability and has one security fix can now be installed.. # Security update for python312 Announcement ID: SUSE-SU-2024:4291-1 Release Date: 2024-12-11T11:24:51Z Rating: important References: * bsc#1231795 * bsc#1234290 Cross-References: * CVE-2024-12254 CVSS scores: * CVE-2024-12254 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-12254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-12254 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2024-12254: Fixed unbounded memory buffering in SelectorSocketTransport.writelines() (bsc#1234290) Other fixes: \- Updated to version 3.12.8 \- Remove -IVendor/ from python-config (bsc#1231795) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2024-4291=1 openSUSE-SLE-15.6-2024-4291=1 * Python 3 Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Python3-15-SP6-2024-4291=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * python312-doc-devhelp-3.12.8-150600.3.12.1 * python312-tools-3.12.8-150600.3.12.1 * libpython3_12-1_0-debuginfo-3.12.8-150600.3.12.1 * python312-dbm-debuginfo-3.12.8-150600.3.12.1 * python312-tk-3.12.8-150600.3.12.1 * python312-idle-3.12.8-150600.3.12.1 * python312-base-3.12.8-150600.3.12.1 * python312-curses-3.12.8-150600.3.12.1 * python312-testsuite-debuginfo-3.12.8-150600.3.12.1 * python312-debugsource-3.12.8-150600.3.12.1 * libpython3_12-1_0-3.12.8-150600.3.12.1 * python312-tk-debuginfo-3.12.8-150600.3.12.1 * python312-testsuite-3.12.8-150600.3.12.1 * python312-3.12.8-150600.3.12.1 * python312-curses-debuginfo-3.12.8-150600.3.12.1 * python312-doc-3.12.8-150600.3.12.1 * python312-base-debuginfo-3.12.8-150600.3.12.1 * python312-dbm-3.12.8-150600.3.12.1 * python312-debuginfo-3.12.8-150600.3.12.1 * python312-devel-3.12.8-150600.3.12.1 * python312-core-debugsource-3.12.8-150600.3.12.1 * openSUSE Leap 15.6 (x86_64) * python312-32bit-3.12.8-150600.3.12.1 * libpython3_12-1_0-32bit-debuginfo-3.12.8-150600.3.12.1 * libpython3_12-1_0-32bit-3.12.8-150600.3.12.1 * python312-base-32bit-debuginfo-3.12.8-150600.3.12.1 * python312-32bit-debuginfo-3.12.8-150600.3.12.1 * python312-base-32bit-3.12.8-150600.3.12.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-64bit-debuginfo-3.12.8-150600.3.12.1 * libpython3_12-1_0-64bit-debuginfo-3.12.8-150600.3.12.1 * python312-64bit-3.12.8-150600.3.12.1 * python312-base-64bit-3.12.8-150600.3.12.1 * python312-base-64bit-debuginfo-3.12.8-150600.3.12.1 * libpython3_12-1_0-64bit-3.12.8-150600.3.12.1 * Python 3 Module 15-SP6 (aarch64 ppc64le s390x x86_64) * python312-dbm-debuginfo-3.12.8-150600.3.12.1 * python312-tk-debuginfo-3.12.8-150600.3.12.1 * python312-3.12.8-150600.3.12.1 * python312-curses-debuginfo-3.12.8-150600.3.12.1 * python312-debugsource-3.12.8-150600.3.12.1 * python312-tools-3.12.8-150600.3.12.1 * python312-tk-3.12.8-150600.3.12.1 * python312-devel-3.12.8-150600.3.12.1 * python312-curses-3.12.8-150600.3.12.1 *python312-base-debuginfo-3.12.8-150600.3.12.1 * libpython3_12-1_0-3.12.8-150600.3.12.1 * python312-idle-3.12.8-150600.3.12.1 * python312-dbm-3.12.8-150600.3.12.1 * python312-debuginfo-3.12.8-150600.3.12.1 * python312-core-debugsource-3.12.8-150600.3.12.1 * python312-base-3.12.8-150600.3.12.1 * libpython3_12-1_0-debuginfo-3.12.8-150600.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12254.html * https://bugzilla.suse.com/show_bug.cgi?id=1231795 * https://bugzilla.suse.com/show_bug.cgi?id=1234290 . The recent patch for python312 resolves critical memory vulnerabilities within openSUSE; crucial for safeguarding user data and enhancing overall system performance.. openSUSE python312 security patch memory fix. . Severity: Important. LinuxSecurity.com Team
Dec 11, 2024
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!