Security update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typing_extensions

Announcement ID: SUSE-SU-2024:1670-1
Rating: moderate
References:
Cross-References:
CVSS scores:
  • CVE-2022-30187 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2022-30187 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products:
  • Public Cloud Module 12
  • SUSE Linux Enterprise High Performance Computing 12 SP2
  • SUSE Linux Enterprise High Performance Computing 12 SP3
  • SUSE Linux Enterprise High Performance Computing 12 SP4
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise Server 12
  • SUSE Linux Enterprise Server 12 SP1
  • SUSE Linux Enterprise Server 12 SP2
  • SUSE Linux Enterprise Server 12 SP3
  • SUSE Linux Enterprise Server 12 SP4
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 12
  • SUSE Linux Enterprise Server for SAP Applications 12 SP1
  • SUSE Linux Enterprise Server for SAP Applications 12 SP2
  • SUSE Linux Enterprise Server for SAP Applications 12 SP3
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves one vulnerability can now be installed.

Description:

This update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typing_extensions fixes the following issues:

  • CVE-2022-30187: Fixed an information disclosure issue that an attacker could exploit to leak sensitive information on the client side (bsc#1202088).

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • Public Cloud Module 12
    zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2024-1670=1

Package List:

  • Public Cloud Module 12 (noarch)
    • python-azure-storage-queue-12.4.0-2.10.8
    • python-azure-core-1.23.1-2.12.8
    • python-typing_extensions-3.10.0.0-2.6.1
    • python-azure-storage-blob-12.13.1-2.10.8
    • python3-azure-core-1.23.1-2.12.8
    • python3-azure-storage-blob-12.13.1-2.10.8
    • python3-azure-storage-queue-12.4.0-2.10.8
    • python3-typing_extensions-3.10.0.0-2.6.1

References: