Security update for python3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:4251-1 Final 1 1 2022-11-28T10:20:27Z current 2022-11-28T10:20:27Z 2022-11-28T10:20:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python3 This update for python3 fixes the following issues: - CVE-2020-10735: Fixed possible DoS when converting text to int and vice versa (bsc#1203125). - CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2022-4251,Image SLES12-SP5-Azure-Basic-On-Demand-2022-4251,Image SLES12-SP5-Azure-HPC-BYOS-2022-4251,Image SLES12-SP5-Azure-HPC-On-Demand-2022-4251,Image SLES12-SP5-Azure-SAP-BYOS-2022-4251,Image SLES12-SP5-Azure-SAP-On-Demand-2022-4251,Image SLES12-SP5-Azure-Standard-On-Demand-2022-4251,Image SLES12-SP5-EC2-BYOS-2022-4251,Image SLES12-SP5-EC2-ECS-On-Demand-2022-4251,Image SLES12-SP5-EC2-On-Demand-2022-4251,Image SLES12-SP5-EC2-SAP-BYOS-2022-4251,Image SLES12-SP5-EC2-SAP-On-Demand-2022-4251,Image SLES12-SP5-GCE-BYOS-2022-4251,Image SLES12-SP5-GCE-On-Demand-2022-4251,Image SLES12-SP5-GCE-SAP-BYOS-2022-4251,Image SLES12-SP5-GCE-SAP-On-Demand-2022-4251,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-4251,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-4251,SUSE-2022-4251,SUSE-OpenStack-Cloud-9-2022-4251,SUSE-OpenStack-Cloud-Crowbar-9-2022-4251,SUSE-SLE-Module-Web-Scripting-12-2022-4251,SUSE-SLE-SAP-12-SP4-2022-4251,SUSE-SLE-SDK-12-SP5-2022-4251,SUSE-SLE-SERVER-12-SP2-BCL-2022-4251,SUSE-SLE-SERVER-12-SP3-BCL-2022-4251,SUSE-SLE-SERVER-12-SP4-LTSS-2022-4251,SUSE-SLE-SERVER-12-SP5-2022-4251 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20224251-1/ Link for SUSE-SU-2022:4251-1 https://lists.suse.com/pipermail/sle-security-updates/2022-November/013125.html E-Mail link for SUSE-SU-2022:4251-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1203125 SUSE Bug 1203125 https://bugzilla.suse.com/1205244 SUSE Bug 1205244 https://www.suse.com/security/cve/CVE-2020-10735/ SUSE CVE CVE-2020-10735 page https://www.suse.com/security/cve/CVE-2022-45061/ SUSE CVE CVE-2022-45061 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 libpython3_4m1_0-3.4.10-25.102.2 python3-3.4.10-25.102.2 python3-base-3.4.10-25.102.2 python3-curses-3.4.10-25.102.2 libpython3_4m1_0-32bit-3.4.10-25.102.2 libpython3_4m1_0-64bit-3.4.10-25.102.2 python3-32bit-3.4.10-25.102.2 python3-64bit-3.4.10-25.102.2 python3-base-32bit-3.4.10-25.102.2 python3-base-64bit-3.4.10-25.102.2 python3-dbm-3.4.10-25.102.2 python3-devel-3.4.10-25.102.2 python3-doc-3.4.10-25.102.2 python3-doc-pdf-3.4.10-25.102.2 python3-idle-3.4.10-25.102.2 python3-testsuite-3.4.10-25.102.2 python3-tk-3.4.10-25.102.2 python3-tools-3.4.10-25.102.2 libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libpython3_4m1_0-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-base-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-curses-3.4.10-25.102.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python3-devel-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_4m1_0-32bit-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 python3-devel-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 python3-tk-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python3-devel-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpython3_4m1_0-32bit-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-base-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-curses-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-devel-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-tk-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-dbm-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 python3-devel-3.4.10-25.102.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud 9 python3-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud 9 python3-base-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud 9 python3-curses-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud 9 python3-devel-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud 9 libpython3_4m1_0-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud Crowbar 9 python3-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud Crowbar 9 python3-base-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud Crowbar 9 python3-curses-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud Crowbar 9 python3-devel-3.4.10-25.102.2 as a component of SUSE OpenStack Cloud Crowbar 9 A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. CVE-2020-10735 Image SLES12-SP5-Azure-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-Basic-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-Basic-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-Basic-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-Azure-Standard-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-Standard-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-Standard-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-ECS-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-ECS-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-ECS-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-GCE-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-base-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-base-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:python3-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-tk-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-tk-3.4.10-25.102.2 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-dbm-3.4.10-25.102.2 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-devel-3.4.10-25.102.2 SUSE OpenStack Cloud 9:libpython3_4m1_0-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-base-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-curses-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-devel-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:libpython3_4m1_0-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-base-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-curses-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-devel-3.4.10-25.102.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20224251-1/ https://www.suse.com/security/cve/CVE-2020-10735.html CVE-2020-10735 https://bugzilla.suse.com/1203125 SUSE Bug 1203125 https://bugzilla.suse.com/1204077 SUSE Bug 1204077 https://bugzilla.suse.com/1204096 SUSE Bug 1204096 https://bugzilla.suse.com/1204097 SUSE Bug 1204097 https://bugzilla.suse.com/1205075 SUSE Bug 1205075 https://bugzilla.suse.com/1208131 SUSE Bug 1208131 An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16. CVE-2022-45061 Image SLES12-SP5-Azure-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-Basic-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-Basic-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-Basic-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-HPC-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-BYOS:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-Azure-SAP-On-Demand:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-Azure-Standard-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-Azure-Standard-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-Azure-Standard-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-ECS-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-ECS-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-ECS-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-BYOS:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-EC2-SAP-On-Demand:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-GCE-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-BYOS:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:python3-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:python3-base-3.4.10-25.102.2 Image SLES12-SP5-GCE-SAP-On-Demand:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-base-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-curses-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libpython3_4m1_0-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-base-3.4.10-25.102.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:python3-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Module for Web and Scripting 12:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP2-BCL:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP3-BCL:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP4-LTSS:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server 12 SP5:python3-tk-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-base-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-curses-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-devel-3.4.10-25.102.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-tk-3.4.10-25.102.2 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-dbm-3.4.10-25.102.2 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-devel-3.4.10-25.102.2 SUSE OpenStack Cloud 9:libpython3_4m1_0-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-base-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-curses-3.4.10-25.102.2 SUSE OpenStack Cloud 9:python3-devel-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:libpython3_4m1_0-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-base-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-curses-3.4.10-25.102.2 SUSE OpenStack Cloud Crowbar 9:python3-devel-3.4.10-25.102.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20224251-1/ https://www.suse.com/security/cve/CVE-2022-45061.html CVE-2022-45061 https://bugzilla.suse.com/1205244 SUSE Bug 1205244 https://bugzilla.suse.com/1211488 SUSE Bug 1211488