Python-suds Bug Fix and Enhancement Update in python3-suds
Summary
ALBA-2022:1558: python-suds bug fix and enhancement update. Affects python3-suds versions < 0.7-0.8.94664ddd46a6.el8_5.2. Fixed in 0.7-0.8.94664ddd46a6.el8_5.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python-suds is a Python SOAP web services client library that leverages Python meta programming to provide an intuitive API for consuming web services. It allows for easy inspection of services and WSDL-based objects without the need to read the WSDL file. The library provides objectification of types defined in the WSDL without the need for class generation.
Vulnerability Detail
The suds Reader classes in python-suds break when FIPS (Federal Information Processing Standards) is enabled. This vulnerability, identified as ALBA-2022:1558, can have implications for applications using python3-suds on AlmaLinux 8. When FIPS is enabled, the Reader classes in python-suds fail to function properly, potentially leading to errors or unexpected behavior in SOAP web service consumption.
How To Fix
Minimum fixed version
0.7-0.8.94664ddd46a6.el8_5.2
This is the first release that contains the fix.
sudo dnf update python3-sudsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The python-suds bug fix and enhancement update addresses a vulnerability in the Reader classes when FIPS is enabled. It is recommended to update the python3-suds package to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python3-suds →
FAQ
Python-suds is a Python SOAP web services client library that provides an intuitive API for consuming web services without the need to read the WSDL file.
FIPS (Federal Information Processing Standards) is a set of standards that define security requirements for cryptographic modules used by the U.S. government.
The vulnerability can cause the Reader classes in python-suds to break when FIPS is enabled, potentially leading to errors or unexpected behavior in SOAP web service consumption.
To fix this vulnerability, update the python3-suds package to version 0.7-0.8.94664ddd46a6.el8_5.2 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for python3-suds.
