SUSE-SU-2025:20025-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2025/suse-su-202520025-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20025-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20025-1
Upstream
CVE (10)
Related
CVE (10)
Published
2025-02-03T08:50:40Z
Modified
2026-03-11T07:29:39Z
Summary
Security update for python311, python-rpm-macros
Details

This update for python311, python-rpm-macros fixes the following issues:

python311:

  • CVE-2024-0450: Fixed zipfile module vulnerability with "quoted-overlap" zipbomb (bsc#1221854)
  • CVE-2024-4032: Fixed incorrect IPv4 and IPv6 private ranges (bsc#1226448)
  • CVE-2024-0397: Fixed memory race condition in ssl.SSLContext certificate store methods (bsc#1226447)
  • CVE-2024-6923: Prevent email header injection due to unquoted newlines (bsc#1228780)
  • Fixed executable bits for /usr/bin/idle* (bsc#1227378).

python-rpm-macros:

  • Update to version 20240618.c146b29:

    • Add %FLAVOR_pytest and %FLAVOR_pyunittest variants

  • Update to version 20240618.1e386da:

    • Fix python_clone sed regex

  • Update to version 20240614.02920b8:

    • Make sure that RPM_BUILD_ROOT env is set
    • don't eliminate any cmdline arguments in the shebang line
    • Create python313 macros

  • Update to version 20240415.c664b45:

    • Fix typo 310 -> 312 in default-prjconf

  • Update to version 20240202.501440e:

    • SPEC0: Drop python39, add python312 to buildset (#169)

  • Update to version 20231220.98427f3:

    • fix python2_compile macro

  • Update to version 20231207.46c2ec3:

    • make FLAVOR_compile compatible with python2

  • Update to version 20231204.dd64e74:

    • Combine fix_shebang in one line
    • New macro FLAVOR_fix_shebang_path
    • Use realpath in %python_clone macro shebang replacement
    • Compile and fix_shebang in %python_install macros

  • Update to version 20231010.0a1f0d9:

    • Revert "Compile and fix_shebang in %python_install macros"
    • gh#openSUSE/python-rpm-macros#163

  • Update to version 20231010.a32e110:

    • Compile and fix_shebang in %python_install macros

  • Update to version 20231005.bf2d3ab:

    • Fix shebang also in sbin with macro _fix_shebang
References

Affected packages

SUSE:Linux Micro 6.0 / python311

Package

Name
python311
Purl
pkg:rpm/suse/python311&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.11.8-3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libpython3_11-1_0":  "3.11.8-3.1",
            "python311":  "3.11.8-3.1",
            "python311-base":  "3.11.8-3.1",
            "python311-curses":  "3.11.8-3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20025-1.json"

SUSE:Linux Micro 6.0 / python311-core

Package

Name
python311-core
Purl
pkg:rpm/suse/python311-core&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.11.8-3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "libpython3_11-1_0":  "3.11.8-3.1",
            "python311":  "3.11.8-3.1",
            "python311-base":  "3.11.8-3.1",
            "python311-curses":  "3.11.8-3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20025-1.json"