← Search the atlas
SUSE-SU-2024:2479-1
Not scored
Security update for python3
This update for python3 fixes the following issues:
- CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559).
- CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
- CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448)
- CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447)
Exploit probability
Not scored
Published
July 15, 2024
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Module for Basesystem 15 SP5
python3
SUSE:Linux Enterprise Server 15 SP4-LTSS
python3
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
python3-core
openSUSE:Leap 15.6
python3
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
python3
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
python3
openSUSE:Leap 15.5
python3
SUSE:Linux Enterprise Micro 5.2
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP6
python3-core
SUSE:Linux Enterprise Server 15 SP3-LTSS
python3-core
SUSE:Manager Server 4.3
python3-core
SUSE:Linux Enterprise Micro 5.4
python3
SUSE:Enterprise Storage 7.1
python3-core
openSUSE:Leap Micro 5.3
python3-core
SUSE:Linux Enterprise Micro 5.5
python3
SUSE:Linux Enterprise Micro 5.3
python3
SUSE:Linux Enterprise Micro 5.3
python3-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
python3-core
SUSE:Linux Enterprise Module for Basesystem 15 SP5
python3-core
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
python3
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
python3
openSUSE:Leap Micro 5.4
python3
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
python3-core
SUSE:Linux Enterprise Module for Development Tools 15 SP6
python3-core
SUSE:Linux Enterprise Module for Development Tools 15 SP5
python3-core
SUSE:Linux Enterprise Server 15 SP3-LTSS
python3
SUSE:Manager Server 4.3
python3
openSUSE:Leap 15.6
python3-core
openSUSE:Leap 15.5
python3-documentation
openSUSE:Leap 15.5
python3-core
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
python3
SUSE:Linux Enterprise Micro 5.2
python3-core
SUSE:Manager Proxy 4.3
python3
openSUSE:Leap Micro 5.3
python3
SUSE:Linux Enterprise Module for Basesystem 15 SP6
python3
SUSE:Linux Enterprise Micro 5.4
python3-core
SUSE:Linux Enterprise Micro 5.5
python3-core
openSUSE:Leap Micro 5.4
python3-core
SUSE:Enterprise Storage 7.1
python3
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
python3-core
SUSE:Manager Proxy 4.3
python3-core
openSUSE:Leap 15.6
python3-documentation
SUSE:Linux Enterprise Server 15 SP4-LTSS
python3-core
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
python3-core
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2024:2479-1
This update for python3 fixes the following issues:
- CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559).
- CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
- CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448)
- CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447)
View original source ↗
05 / REFERENCES
Further evidence