SUSE-RU-2024:0424-1: Recommended update for python3-M2Crypto
This update for python3-M2Crypto fixes the following issues: Packaging changes (bsc#1217782, bsc#1212757) Set OpenSSL 3.0 as the default openssl in Tumbleweed (bsc#1205042)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/python3-M2Crypto-debugsourceto a version that resolves this vulnerability.Fixed in 0.38.0-150400.10.1 - Upgrade
Upgrade
suse/python3-M2Crypto-debuginfoto a version that resolves this vulnerability.Fixed in 0.38.0-150400.10.1 - Upgrade
Upgrade
suse/python3-M2Cryptoto a version that resolves this vulnerability.Fixed in 0.38.0-150400.10.1 - Upgrade
Upgrade
suse/python3-M2Crypto-docto a version that resolves this vulnerability.Fixed in 0.38.0-150400.10.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2024-424=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-424=1
Event History
Frequently Asked Questions
Which systems are covered by this update?
The update applies to python3-M2Crypto and its documentation, debuginfo, and debugsource packages on openSUSE Leap 15.4 and openSUSE Leap Micro 5.3 and 5.4. Covered architectures include aarch64, ppc64le, s390x, and x86_64; Leap 15.4 also lists i586, while the documentation package is noarch.
Does this advisory identify a specific security vulnerability or exploitation method?
No. The listed changes are packaging-related and set OpenSSL 3.0 as the default OpenSSL in Tumbleweed. No CVE, attack vector, exposure condition, or workaround is provided in the advisory data.