SUSE-SU-2024:0438-1: Security update for python3
This update for python3 fixes the following issues: CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/python3-debuginfoto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-debugsourceto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-base-debugsourceto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-baseto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-base-debuginfoto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-cursesto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3to a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-dbmto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-develto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-dbm-debuginfoto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-devel-debuginfoto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-tkto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-tk-debuginfoto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-curses-debuginfoto a version that resolves this vulnerability.Fixed in 3.4.10-25.119.1 - Upgrade
Upgrade
suse/python3-base-debuginfoto a version that resolves this vulnerability.Fixed in 32bit-3.4.10-25.119.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Web-Scripting-12-2024-438=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-438=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-438=1
Event History
Frequently Asked Questions
Which installed packages are covered by this update?
The update covers suse/python3-base, suse/python3, suse/python3-curses, and suse/python3-devel, along with the listed debuginfo and debugsource packages.
What behavior is corrected by this update?
It fixes incorrect parsing of e-mail addresses that contain a special character.
When was this update published?
The update was published on 2024-02-09.