Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
100
security advisorymoderateupdateSUSE: 2024:1850-2 Low: Python3 Zipperbomb Risk Addressed
* bsc#1221854 Cross-References: * CVE-2024-0450 . # Security update for python3 Announcement ID: SUSE-SU-2024:1843-1 Rating: moderate References: * bsc#1221854 Cross-References: * CVE-2024-0450 CVSS scores: * CVE-2024-0450 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Software Development Kit 12 SP5 * Web and Scripting Module 12 An update that solves one vulnerability can now be installed. ## Description: This update for python3 fixes the following issues: * CVE-2024-0450: Fixed detecting the vulnerability of "quoted-overlap" zipbomb (bsc#1221854). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 12 zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2024-1843=1 * SUSE Linux Enterprise Software Development Kit 12 SP5 zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-1843=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patchSUSE-SLE-SERVER-12-SP5-2024-1843=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1843=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1843=1 ## Package List: * Web and Scripting Module 12 (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.4.10-25.130.1 * python3-base-debugsource-3.4.10-25.130.1 * python3-debuginfo-3.4.10-25.130.1 * libpython3_4m1_0-debuginfo-3.4.10-25.130.1 * python3-3.4.10-25.130.1 * python3-base-3.4.10-25.130.1 * python3-base-debuginfo-3.4.10-25.130.1 * libpython3_4m1_0-3.4.10-25.130.1 * python3-curses-3.4.10-25.130.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.4.10-25.130.1 * python3-debuginfo-3.4.10-25.130.1 * python3-base-debugsource-3.4.10-25.130.1 * python3-devel-3.4.10-25.130.1 * python3-dbm-3.4.10-25.130.1 * python3-base-debuginfo-3.4.10-25.130.1 * python3-dbm-debuginfo-3.4.10-25.130.1 * SUSE Linux Enterprise Software Development Kit 12 SP5 (ppc64le s390x x86_64) * python3-devel-debuginfo-3.4.10-25.130.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * python3-tk-debuginfo-3.4.10-25.130.1 * python3-debugsource-3.4.10-25.130.1 * python3-curses-debuginfo-3.4.10-25.130.1 * python3-base-debugsource-3.4.10-25.130.1 * python3-debuginfo-3.4.10-25.130.1 * python3-devel-3.4.10-25.130.1 * libpython3_4m1_0-debuginfo-3.4.10-25.130.1 * python3-3.4.10-25.130.1 * python3-base-3.4.10-25.130.1 * python3-base-debuginfo-3.4.10-25.130.1 * python3-tk-3.4.10-25.130.1 * libpython3_4m1_0-3.4.10-25.130.1 * python3-curses-3.4.10-25.130.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * python3-devel-debuginfo-3.4.10-25.130.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.130.1 * libpython3_4m1_0-32bit-3.4.10-25.130.1 *python3-base-debuginfo-32bit-3.4.10-25.130.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * python3-tk-debuginfo-3.4.10-25.130.1 * python3-debugsource-3.4.10-25.130.1 * python3-curses-debuginfo-3.4.10-25.130.1 * python3-base-debugsource-3.4.10-25.130.1 * python3-debuginfo-3.4.10-25.130.1 * python3-devel-3.4.10-25.130.1 * libpython3_4m1_0-debuginfo-3.4.10-25.130.1 * python3-3.4.10-25.130.1 * python3-base-3.4.10-25.130.1 * python3-base-debuginfo-3.4.10-25.130.1 * python3-tk-3.4.10-25.130.1 * libpython3_4m1_0-3.4.10-25.130.1 * python3-curses-3.4.10-25.130.1 * SUSE Linux Enterprise Server 12 SP5 (ppc64le s390x x86_64) * python3-devel-debuginfo-3.4.10-25.130.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.130.1 * libpython3_4m1_0-32bit-3.4.10-25.130.1 * python3-base-debuginfo-32bit-3.4.10-25.130.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) * python3-tk-debuginfo-3.4.10-25.130.1 * python3-debugsource-3.4.10-25.130.1 * python3-curses-debuginfo-3.4.10-25.130.1 * python3-base-debugsource-3.4.10-25.130.1 * python3-debuginfo-3.4.10-25.130.1 * python3-devel-3.4.10-25.130.1 * libpython3_4m1_0-debuginfo-3.4.10-25.130.1 * python3-3.4.10-25.130.1 * python3-base-3.4.10-25.130.1 * python3-devel-debuginfo-3.4.10-25.130.1 * python3-base-debuginfo-3.4.10-25.130.1 * python3-tk-3.4.10-25.130.1 * libpython3_4m1_0-3.4.10-25.130.1 * python3-curses-3.4.10-25.130.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.130.1 * libpython3_4m1_0-32bit-3.4.10-25.130.1 * python3-base-debuginfo-32bit-3.4.10-25.130.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0450.html * https://bugzilla.suse.com/show_bug.cgi?id=1221854 . SUSE issues a significant python3 security alert regarding CVE-2024-0450. Users advised toupgrade their impacted systems.. SUSE Linux, Python3 Security Update, Vulnerability Management. . LinuxSecurity.com Team
May 29, 2024
SuSE
100
security advisorymoderatepythonSUSE Linux 12 SP5: 2024:1844-1 Moderate: Python Zipbomb Threat
* bsc#1221854 Cross-References: * CVE-2024-0450 . # Security update for python Announcement ID: SUSE-SU-2024:1844-1 Rating: moderate References: * bsc#1221854 Cross-References: * CVE-2024-0450 CVSS scores: * CVE-2024-0450 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Workstation Extension 12 12-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python fixes the following issues: * CVE-2024-0450: Fixed detecting the vulnerability of "quoted-overlap" zipbomb (bsc#1221854). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1844=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1844=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-1844=1 * SUSE Linux Enterprise Workstation Extension 12 12-SP5 zypper in -t patch SUSE-SLE-WE-12-SP5-2024-1844=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * libpython2_7-1_0-2.7.18-33.35.1 * python-2.7.18-33.35.1 * python-debugsource-2.7.18-33.35.1 * python-gdbm-debuginfo-2.7.18-33.35.1 * python-xml-2.7.18-33.35.1 * python-xml-debuginfo-2.7.18-33.35.1 * python-curses-2.7.18-33.35.1 * python-debuginfo-2.7.18-33.35.1 * python-base-2.7.18-33.35.1 * libpython2_7-1_0-debuginfo-2.7.18-33.35.1 * python-gdbm-2.7.18-33.35.1 * python-tk-debuginfo-2.7.18-33.35.1 *python-curses-debuginfo-2.7.18-33.35.1 * python-demo-2.7.18-33.35.1 * python-base-debugsource-2.7.18-33.35.1 * python-devel-2.7.18-33.35.1 * python-tk-2.7.18-33.35.1 * python-base-debuginfo-2.7.18-33.35.1 * python-idle-2.7.18-33.35.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch) * python-doc-2.7.18-33.35.1 * python-doc-pdf-2.7.18-33.35.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * python-32bit-2.7.18-33.35.1 * libpython2_7-1_0-32bit-2.7.18-33.35.1 * python-debuginfo-32bit-2.7.18-33.35.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.35.1 * python-base-32bit-2.7.18-33.35.1 * python-base-debuginfo-32bit-2.7.18-33.35.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * libpython2_7-1_0-2.7.18-33.35.1 * python-2.7.18-33.35.1 * python-debugsource-2.7.18-33.35.1 * python-gdbm-debuginfo-2.7.18-33.35.1 * python-xml-2.7.18-33.35.1 * python-xml-debuginfo-2.7.18-33.35.1 * python-curses-2.7.18-33.35.1 * python-debuginfo-2.7.18-33.35.1 * python-base-2.7.18-33.35.1 * libpython2_7-1_0-debuginfo-2.7.18-33.35.1 * python-gdbm-2.7.18-33.35.1 * python-tk-debuginfo-2.7.18-33.35.1 * python-curses-debuginfo-2.7.18-33.35.1 * python-demo-2.7.18-33.35.1 * python-base-debugsource-2.7.18-33.35.1 * python-devel-2.7.18-33.35.1 * python-tk-2.7.18-33.35.1 * python-base-debuginfo-2.7.18-33.35.1 * python-idle-2.7.18-33.35.1 * SUSE Linux Enterprise Server 12 SP5 (noarch) * python-doc-2.7.18-33.35.1 * python-doc-pdf-2.7.18-33.35.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * python-32bit-2.7.18-33.35.1 * libpython2_7-1_0-32bit-2.7.18-33.35.1 * python-debuginfo-32bit-2.7.18-33.35.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.35.1 * python-base-32bit-2.7.18-33.35.1 * python-base-debuginfo-32bit-2.7.18-33.35.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64) *libpython2_7-1_0-2.7.18-33.35.1 * python-2.7.18-33.35.1 * python-debugsource-2.7.18-33.35.1 * python-gdbm-debuginfo-2.7.18-33.35.1 * python-xml-2.7.18-33.35.1 * python-xml-debuginfo-2.7.18-33.35.1 * python-curses-2.7.18-33.35.1 * python-debuginfo-2.7.18-33.35.1 * python-base-2.7.18-33.35.1 * libpython2_7-1_0-debuginfo-2.7.18-33.35.1 * python-gdbm-2.7.18-33.35.1 * python-tk-debuginfo-2.7.18-33.35.1 * python-curses-debuginfo-2.7.18-33.35.1 * python-demo-2.7.18-33.35.1 * python-base-debugsource-2.7.18-33.35.1 * python-devel-2.7.18-33.35.1 * python-tk-2.7.18-33.35.1 * python-base-debuginfo-2.7.18-33.35.1 * python-idle-2.7.18-33.35.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch) * python-doc-2.7.18-33.35.1 * python-doc-pdf-2.7.18-33.35.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * python-32bit-2.7.18-33.35.1 * libpython2_7-1_0-32bit-2.7.18-33.35.1 * python-debuginfo-32bit-2.7.18-33.35.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.35.1 * python-base-32bit-2.7.18-33.35.1 * python-base-debuginfo-32bit-2.7.18-33.35.1 * SUSE Linux Enterprise Workstation Extension 12 12-SP5 (x86_64) * python-base-debuginfo-2.7.18-33.35.1 * python-devel-2.7.18-33.35.1 * python-base-debugsource-2.7.18-33.35.1 ## References: * https://www.suse.com/security/cve/CVE-2024-0450.html * https://bugzilla.suse.com/show_bug.cgi?id=1221854 . Important security enhancement for Python on SUSE to resolve the zipbomb vulnerability, complete with installation guidelines for impacted software.. SUSE Python Update, Python Security Issue, Software Patch Instructions. . LinuxSecurity.com Team
May 29, 2024
SuSE
99
security advisorysecurity fixmoderate severitySlackware 15.0: 2024-080-01 Moderate Python3 Security Update for Zipbomb
New python3 packages are available for Slackware 15.0 and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] python3 (SSA:2024-080-01) New python3 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/python3-3.9.19-i586-1_slack15.0.txz: Upgraded. This update fixes security issues: bundled libexpat was updated to 2.6.0. zipfile is now protected from the "quoted-overlap" zipbomb. tempfile.TemporaryDirectory cleanup no longer dereferences symlinks when working around file system permission errors. For more information, see: https://pythoninsider.blogspot.com/2024/03/python-31014-3919-and-3819-is-now.html https://www.cve.org/CVERecord?id=CVE-2023-52425 https://www.cve.org/CVERecord?id=CVE-2024-0450 https://www.cve.org/CVERecord?id=CVE-2023-6597 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: Updated package for Slackware x86_64 15.0: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 15.0 package: 7081105ba6776152ac3b7106f1d39b18 python3-3.9.19-i586-1_slack15.0.txz Slackware x86_64 15.0 package: 473fbc6c3cf937f8f9839113ade8afa8 python3-3.9.19-x86_64-1_slack15.0.txz Slackware -current package: a59b0adbca9785605159767489cbe6e5 d/python3-3.9.19-i586-1.txz Slackware x86_64 -current package: 3b7c17fff3d5f99e8cfae5880c8a8dbb d/python3-3.9.19-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkgpython3-3.9.19-i586-1_slack15.0.txz +-----+ . Updated python3 modules released for Slackware 15.0 to address vital security vulnerabilities and improve overall reliability.. Slackware Security, Python Update, Package Fixes, System Administration. . LinuxSecurity.com Team
Mar 20, 2024
Slackware
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!