SUSE-SU-2023:4091-1: Security update for python-gevent

Q: Which deployments are covered by this update?

The update applies to the listed python-gevent packages, including Python 2 and Python 3 builds, documentation, debug packages, and SUSE Manager Server 4.2 on ppc64le, s390x, and x86_64.

Q: What security issue does this update address?

It fixes CVE-2023-41419, an HTTP request smuggling vulnerability in python-gevent.

Published Oct 17, 2023

Updated

This update for python-gevent fixes the following issues: CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).

Affected Software

113 affected componentsFixes available

All of the following

SUSE SUSE Manager Server 4.2 (ppc64le s390x x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Enterprise Storage 7.1 (aarch64 x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE CaaS Platform 4.0 (x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-doc<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-doc<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)

Any of the following

suse/python2-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python2-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Manager Proxy 4.2 (x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

All of the following

SUSE SUSE Manager Retail Branch Server 4.2 (x86_64)

Any of the following

suse/python3-gevent<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python3-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debugsource<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

suse/python-gevent-debuginfo<1.2.2-150000.5.3.1

1.2.2-150000.5.3.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/python2-gevent-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade suse/python-gevent-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade suse/python2-gevent to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade suse/python-gevent-debugsource to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade suse/python3-gevent-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade suse/python3-gevent to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade suse/python-gevent-doc to a version that resolves this vulnerability.
Fixed in 1.2.2-150000.5.3.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-4091=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-4091=1

Event History

Oct 17, 2023

Advisory Published

08:30 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-41419

Frequently Asked Questions

Which deployments are covered by this update?

The update applies to the listed python-gevent packages, including Python 2 and Python 3 builds, documentation, debug packages, and SUSE Manager Server 4.2 on ppc64le, s390x, and x86_64.

What security issue does this update address?

It fixes CVE-2023-41419, an HTTP request smuggling vulnerability in python-gevent.

SUSE-SU-2023:4091-1: Security update for python-gevent

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which deployments are covered by this update?

What security issue does this update address?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are covered by this update?

What security issue does this update address?