SUSE-SU-2024:0782-1: Security update for python311

Q: Which installed packages are covered by this update?

The update covers python311 and python311-base, along with python311-tk-debuginfo, python311-debugsource, python311-tools, python311-idle, python311-doc, and python311-base-debuginfo.

Q: What types of issues are addressed?

It fixes a symlink handling flaw during tempfile.TemporaryDirectory cleanup, incorrect e-mqil parsing, and an expat-related issue addressed by supporting expat version 2.4.4 or later.

Published Mar 6, 2024

Updated

This update for python311 fixes the following issues: CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). CVE-2022-25236: Fixed an expat vulnerability by supporting expat >= 2.4.4 (bsc#1212015).

Affected Software

163 affected componentsFixes available

All of the following

SUSE openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

Any of the following

suse/python311-testsuite-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-testsuite<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE openSUSE Leap 15.4 (x86_64)

Any of the following

suse/python311-base<32bit-debuginfo-3.11.8-150400.9.23.1

32bit-debuginfo-3.11.8-150400.9.23.1

suse/python311-base<32bit-3.11.8-150400.9.23.1

32bit-3.11.8-150400.9.23.1

suse/python311<32bit-debuginfo-3.11.8-150400.9.23.1

32bit-debuginfo-3.11.8-150400.9.23.1

suse/python311<32bit-3.11.8-150400.9.23.1

32bit-3.11.8-150400.9.23.1

All of the following

SUSE openSUSE Leap 15.4 (aarch64_ilp32)

Any of the following

suse/python311<64bit-3.11.8-150400.9.23.1

64bit-3.11.8-150400.9.23.1

suse/python311-base<64bit-3.11.8-150400.9.23.1

64bit-3.11.8-150400.9.23.1

suse/python311-base<64bit-debuginfo-3.11.8-150400.9.23.1

64bit-debuginfo-3.11.8-150400.9.23.1

suse/python311<64bit-debuginfo-3.11.8-150400.9.23.1

64bit-debuginfo-3.11.8-150400.9.23.1

All of the following

SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python311-testsuite-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-testsuite<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE openSUSE Leap 15.5 (x86_64)

Any of the following

suse/python311-base<32bit-debuginfo-3.11.8-150400.9.23.1

32bit-debuginfo-3.11.8-150400.9.23.1

suse/python311-base<32bit-3.11.8-150400.9.23.1

32bit-3.11.8-150400.9.23.1

suse/python311<32bit-debuginfo-3.11.8-150400.9.23.1

32bit-debuginfo-3.11.8-150400.9.23.1

suse/python311<32bit-3.11.8-150400.9.23.1

32bit-3.11.8-150400.9.23.1

All of the following

SUSE Python 3 Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64)

Any of the following

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64)

Any of the following

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4 (x86_64)

Any of the following

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64)

Any of the following

suse/python311-dbm<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-core-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tools<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc-devhelp<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-base<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-idle<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-dbm-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-curses-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-devel<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-tk-debuginfo<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-debugsource<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

suse/python311-doc<3.11.8-150400.9.23.1

3.11.8-150400.9.23.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/python311-testsuite-debuginfo to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-tk-debuginfo to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-debugsource to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-tools to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311 to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-idle to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-doc to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-base-debuginfo to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-doc-devhelp to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-devel to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-dbm-debuginfo to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-core-debugsource to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-dbm to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-tk to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-base to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-curses to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-debuginfo to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-curses-debuginfo to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-testsuite to a version that resolves this vulnerability.
Fixed in 3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-base to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-base to a version that resolves this vulnerability.
Fixed in 32bit-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311 to a version that resolves this vulnerability.
Fixed in 32bit-debuginfo-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311 to a version that resolves this vulnerability.
Fixed in 32bit-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311 to a version that resolves this vulnerability.
Fixed in 64bit-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-base to a version that resolves this vulnerability.
Fixed in 64bit-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311-base to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-3.11.8-150400.9.23.1
Upgrade
Upgrade suse/python311 to a version that resolves this vulnerability.
Fixed in 64bit-debuginfo-3.11.8-150400.9.23.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Python3-15-SP5-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP4-2024-782=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-782=1

Event History

Mar 6, 2024

Advisory Published

via SUSE·04:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which installed packages are covered by this update?

The update covers python311 and python311-base, along with python311-tk-debuginfo, python311-debugsource, python311-tools, python311-idle, python311-doc, and python311-base-debuginfo.

What types of issues are addressed?

It fixes a symlink handling flaw during tempfile.TemporaryDirectory cleanup, incorrect e-mqil parsing, and an expat-related issue addressed by supporting expat version 2.4.4 or later.

SUSE-SU-2024:0782-1: Security update for python311

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which installed packages are covered by this update?

What types of issues are addressed?

Company

Resources

Contact

Frequently Asked Questions

Which installed packages are covered by this update?

What types of issues are addressed?