SUSE-SU-2025:20025-1

Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520025-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20025-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2025:20025-1
Upstream
Related
Published
2025-02-03T08:50:40Z
Modified
2026-03-23T04:47:06.800305Z
Summary
Security update for python311, python-rpm-macros
Details

This update for python311, python-rpm-macros fixes the following issues:

python311: - CVE-2024-0450: Fixed zipfile module vulnerability with "quoted-overlap" zipbomb (bsc#1221854) - CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448) - CVE-2024-0397: Fixed memory race condition in ssl.SSLContext certificate store methods (bsc#1226447) - CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780) - Fixed executable bits for /usr/bin/idle* (bsc#1227378).

python-rpm-macros:

  • Update to version 20240618.c146b29:

    • Add %FLAVORpytest and %FLAVORpyunittest variants
  • Update to version 20240618.1e386da:

    • Fix python_clone sed regex
  • Update to version 20240614.02920b8:

    • Make sure that RPMBUILDROOT env is set
    • don't eliminate any cmdline arguments in the shebang line
    • Create python313 macros
  • Update to version 20240415.c664b45:

    • Fix typo 310 -> 312 in default-prjconf
  • Update to version 20240202.501440e:

    • SPEC0: Drop python39, add python312 to buildset (#169)
  • Update to version 20231220.98427f3:

    • fix python2_compile macro
  • Update to version 20231207.46c2ec3:

    • make FLAVOR_compile compatible with python2
  • Update to version 20231204.dd64e74:

    • Combine fix_shebang in one line
    • New macro FLAVORfixshebang_path
    • Use realpath in %python_clone macro shebang replacement
    • Compile and fixshebang in %pythoninstall macros
  • Update to version 20231010.0a1f0d9:

    • Revert "Compile and fixshebang in %pythoninstall macros"
    • gh#openSUSE/python-rpm-macros#163
  • Update to version 20231010.a32e110:

    • Compile and fixshebang in %pythoninstall macros
  • Update to version 20231005.bf2d3ab:

    • Fix shebang also in sbin with macro fixshebang
References

Affected packages

SUSE:Linux Micro 6.0 / python311

Package

Name
python311
Purl
pkg:rpm/suse/python311&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.11.8-3.1

Ecosystem specific

{
    "binaries": [
        {
            "python311-curses": "3.11.8-3.1",
            "python311": "3.11.8-3.1",
            "python311-base": "3.11.8-3.1",
            "libpython3_11-1_0": "3.11.8-3.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20025-1.json"

SUSE:Linux Micro 6.0 / python311-core

Package

Name
python311-core
Purl
pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.11.8-3.1

Ecosystem specific

{
    "binaries": [
        {
            "python311-curses": "3.11.8-3.1",
            "python311": "3.11.8-3.1",
            "python311-base": "3.11.8-3.1",
            "libpython3_11-1_0": "3.11.8-3.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20025-1.json"