Lucene search

K
osvGoogleOSV:SUSE-SU-2024:3076-1
HistorySep 02, 2024 - 2:41 p.m.

Security update for python39

2024-09-0214:41:42
Google
osv.dev
1
python 3.9
security update
cve-2024-6923
cve-2024-5642
openssl 1.1.1
reproducible builds
executable bits

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

7.1

Confidence

Low

This update for python39 fixes the following issues:

Security issues fixed:

  • CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780)
  • CVE-2024-5642: Removed support for anything but OpenSSL 1.1.1 or newer (bsc#1227233)

Non-security issues fixed:

  • Fixed executable bits for /usr/bin/idle* (bsc#1227378).
  • Improve python reproducible builds (bsc#1227999)

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

7.1

Confidence

Low