{"schemaVersion":3,"id":"SUSE-SU-2023:2783-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets\n\nThis update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:\n\ngrpc:\n- Update in SLE-15 (bsc#1197726, bsc#1144068)\n\nprotobuf:\n- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681\n- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256\n- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530\n- Add missing dependency of python subpackages on python-six (bsc#1177127)\n- Updated to version 3.9.2 (bsc#1162343)\n  * Remove OSReadLittle* due to alignment requirements.\n  * Don't use unions and instead use memcpy for the type swaps.\n- Disable LTO (bsc#1133277)\n\npython-aiocontextvars:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-avro:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-cryptography:\n- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)\n  * SECURITY ISSUE: Fixed a bug where certain sequences of update()\n    calls when symmetrically encrypting very large payloads (>2GB) could\n    result in an integer overflow, leading to buffer overflows.\n  CVE-2020-36242\n\npython-cryptography-vectors:\n- update to 3.2 (bsc#1178168, CVE-2020-25659):\n  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,\n    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed\n    by our API, we cannot completely mitigate this vulnerability.\n  * Support for OpenSSL 1.0.2 has been removed.\n  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.\n- update to 3.3.2 (bsc#1198331)\n\npython-Deprecated:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 1.2.13:\n\npython-google-api-core:\n- Update to 1.14.2\n\npython-googleapis-common-protos:\n- Update to 1.6.0\n\npython-grpcio-gcp:\n- Initial spec for v0.2.2\n\npython-humanfriendly:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to 10.0\n\npython-jsondiff:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 1.3.0\n\npython-knack:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 0.9.0\n\npython-opencensus:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Disable Python2 build\n- Update to 0.8.0\n\npython-opencensus-context:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-opencensus-ext-threading:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Initial build version 0.1.2\n\npython-opentelemetry-api:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Version update to 1.5.0\n\npython-psutil:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 5.9.1\n- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-PyGithub:\n- Update to 1.43.5:\n\npython-pytest-asyncio:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Initial release of python-pytest-asyncio 0.8.0\n\npython-requests:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-websocket-client:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 1.3.2\n\npython-websockets:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 9.1:","dates":{"published":"2023-09-19T21:52:38.000Z","modified":"2026-02-04T04:23:25.993Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"protobuf&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"protobuf","label":"protobuf&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/protobuf&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.9.2-150100.8.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.9.2-150100.8.3.3","eol":null,"hubHref":null},{"vendor":"suse","product":"python-cryptography&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"python-cryptography","label":"python-cryptography&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-cryptography&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.3.2-150100.7.15.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-150100.7.15.3","eol":null,"hubHref":null},{"vendor":"suse","product":"python-psutil&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"python-psutil","label":"python-psutil&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-psutil&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 5.9.1-150100.6.6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.9.1-150100.6.6.3","eol":null,"hubHref":null},{"vendor":"suse","product":"python-requests&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"python-requests","label":"python-requests&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-requests&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 2.25.1-150100.6.13.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.25.1-150100.6.13.3","eol":null,"hubHref":null},{"vendor":"suse","product":"python-websocket-client&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"python-websocket-client","label":"python-websocket-client&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-websocket-client&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1.3.2-150100.6.7.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.2-150100.6.7.3","eol":null,"hubHref":null}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232783-2/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232783-2/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1099269","label":"bugzilla.suse.com/1099269","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1133277","label":"bugzilla.suse.com/1133277","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1144068","label":"bugzilla.suse.com/1144068","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1162343","label":"bugzilla.suse.com/1162343","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1177127","label":"bugzilla.suse.com/1177127","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1178168","label":"bugzilla.suse.com/1178168","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182066","label":"bugzilla.suse.com/1182066","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1184753","label":"bugzilla.suse.com/1184753","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194530","label":"bugzilla.suse.com/1194530","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1197726","label":"bugzilla.suse.com/1197726","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1198331","label":"bugzilla.suse.com/1198331","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1199282","label":"bugzilla.suse.com/1199282","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1203681","label":"bugzilla.suse.com/1203681","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1204256","label":"bugzilla.suse.com/1204256","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000518","label":"www.suse.com/security/cve/CVE-2018-1000518","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","label":"www.suse.com/security/cve/CVE-2020-25659","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","label":"www.suse.com/security/cve/CVE-2020-36242","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22569","label":"www.suse.com/security/cve/CVE-2021-22569","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22570","label":"www.suse.com/security/cve/CVE-2021-22570","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1941","label":"www.suse.com/security/cve/CVE-2022-1941","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3171","label":"www.suse.com/security/cve/CVE-2022-3171","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-1000518","CVE-2020-25659","CVE-2020-36242","CVE-2021-22569","CVE-2021-22570","CVE-2022-1941","CVE-2022-3171"],"downstream":[],"duplicates":[],"related":["CVE-2018-1000518","CVE-2020-25659","CVE-2020-36242","CVE-2021-22569","CVE-2021-22570","CVE-2022-1941","CVE-2022-3171"]},"timeline":[{"kind":"published","date":"2023-09-19T21:52:38.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:23:25.993Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T07:43:22.655Z","stale":false,"partial":false}}