Bug 1210617 (CVE-2023-30608) - VUL-0: CVE-2023-30608: python-sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
Summary: VUL-0: CVE-2023-30608: python-sqlparse: Parser contains a regular expression ...
Status: RESOLVED FIXED
Alias: CVE-2023-30608
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/363945/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-30608:5.5:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-04-19 07:23 UTC by Cathy Hu
Modified: 2024-06-20 20:30 UTC (History)
5 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Cathy Hu 2023-04-19 07:23:48 UTC 
CVE-2023-30608

sqlparse is a non-validating SQL parser module for Python. In affected versions
the SQL parser contains a regular expression that is vulnerable to ReDoS
(Regular Expression Denial of Service). This issue was introduced by commit
`e75e358`. The vulnerability may lead to Denial of Service (DoS). This issues
has been fixed in sqlparse 0.4.4 by commit `c457abd5f`. Users are advised to
upgrade. There are no known workarounds for this issue.


References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-30608
https://bugzilla.redhat.com/show_bug.cgi?id=2187903
https://www.cve.org/CVERecord?id=CVE-2023-30608
http://www.cvedetails.com/cve/CVE-2023-30608/
https://owasp.org/www-community/attacks/Regular_expression_Denial_of_Service_-_ReDoS
https://github.com/andialbrecht/sqlparse/commit/c457abd5f097dd13fb21543381e7cfafe7d31cfb
https://github.com/andialbrecht/sqlparse/commit/e75e35869473832a1eb67772b1adfee2db11b85a
https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
Comment 1 Cathy Hu 2023-04-19 07:31:09 UTC 
Affected:
- SUSE:SLE-12-SP3:Update:Products:Cloud8:Update/python-sqlparse  0.2.3
- SUSE:SLE-12-SP4:Update:Products:Cloud9:Update/python-sqlparse  0.2.3
- SUSE:SLE-15-SP1:Update/python-sqlparse                         0.2.4
- SUSE:SLE-15-SP3:Update/python-sqlparse                         0.4.2
- openSUSE:Factory/python-sqlparse                               0.4.3

----
We have different bugowners for different codestreams, please assign to the next one when done: 

for @mcepl:
- SUSE:SLE-12-SP4:Update:Products:Cloud9:Update/python-sqlparse  0.2.3

for @cloudbugs:
- SUSE:SLE-12-SP3:Update:Products:Cloud8:Update/python-sqlparse  0.2.3
- SUSE:SLE-12-SP4:Update:Products:Cloud9:Update/python-sqlparse  0.2.3
- SUSE:SLE-15-SP1:Update/python-sqlparse                         0.2.4
- SUSE:SLE-15-SP3:Update/python-sqlparse                         0.4.2
- openSUSE:Factory/python-sqlparse                               0.4.3
Comment 5 Matej Cepl 2023-05-25 16:46:15 UTC 
Patches for all channels have been applied.
Comment 7 OBSbugzilla Bot 2023-05-25 18:35:02 UTC 
This is an autogenerated message for OBS integration:
This bug (1210617) was mentioned in
https://build.opensuse.org/request/show/1089053 Factory / python-sqlparse
Comment 8 Maintenance Automation 2023-06-08 08:30:23 UTC 
SUSE-SU-2023:2462-1: An update that solves one vulnerability can now be installed.

Category: security (moderate)
Bug References: 1210617
CVE References: CVE-2023-30608
Sources used:
SUSE Package Hub 15 15-SP4 (src): python-sqlparse-0.2.4-150100.6.3.1
SUSE Package Hub 15 15-SP5 (src): python-sqlparse-0.2.4-150100.6.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 9 Maintenance Automation 2023-06-23 12:30:18 UTC 
SUSE-SU-2023:2619-1: An update that solves one vulnerability can now be installed.

Category: security (moderate)
Bug References: 1210617
CVE References: CVE-2023-30608
Sources used:
openSUSE Leap 15.4 (src): python-sqlparse-0.4.2-150300.3.6.1
openSUSE Leap 15.5 (src): python-sqlparse-0.4.2-150300.3.6.1
Basesystem Module 15-SP4 (src): python-sqlparse-0.4.2-150300.3.6.1
Basesystem Module 15-SP5 (src): python-sqlparse-0.4.2-150300.3.6.1
SUSE Linux Enterprise Real Time 15 SP3 (src): python-sqlparse-0.4.2-150300.3.6.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 11 Maintenance Automation 2023-06-28 16:30:15 UTC 
SUSE-SU-2023:2693-1: An update that solves one vulnerability can now be installed.

Category: security (moderate)
Bug References: 1210617
CVE References: CVE-2023-30608
Sources used:
HPE Helion OpenStack 8 (src): python-sqlparse-0.2.3-3.3.1
SUSE OpenStack Cloud 8 (src): python-sqlparse-0.2.3-3.3.1
SUSE OpenStack Cloud Crowbar 8 (src): python-sqlparse-0.2.3-3.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 12 Maintenance Automation 2023-07-05 16:30:01 UTC 
SUSE-SU-2023:2787-1: An update that solves one vulnerability can now be installed.

Category: security (moderate)
Bug References: 1210617
CVE References: CVE-2023-30608
Sources used:
SUSE OpenStack Cloud 9 (src): python-sqlparse-0.2.3-4.3.1
SUSE OpenStack Cloud Crowbar 9 (src): python-sqlparse-0.2.3-4.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 17 Maintenance Automation 2024-05-14 16:33:55 UTC 
SUSE-RU-2024:1637-1: An update that solves one vulnerability and contains two features can now be installed.

Category: recommended (moderate)
Bug References: 1210617
CVE References: CVE-2023-30608
Jira References: PED-6697, PED-7987
Maintenance Incident: [SUSE:Maintenance:33601](https://smelt.suse.de/incident/33601/)
Sources used:
openSUSE Leap 15.4 (src):
 python-pyOpenSSL-test-23.2.0-150400.3.10.2, python-google-cloud-kms-inventory-0.2.2-150400.9.3.1, python-iniconfig-2.0.0-150400.10.6.1, libcrc32c-1.1.2-150400.9.3.1, python-cryptography-test-41.0.3-150400.16.19.2, python-pyasn1-modules-0.3.0-150400.12.7.1, python-google-cloud-kms-2.21.0-150400.9.3.1, python-google-cloud-secret-manager-2.17.0-150400.9.3.1, python-setuptools-67.7.2-150400.3.12.1, python-google-cloud-spanner-3.40.1-150400.9.3.1, python-google-cloud-storage-test-2.14.0-150400.10.4.2, python-google-cloud-dns-0.35.0-150400.9.3.1, python-cffi-1.15.1-150400.8.7.2, python-idna-3.4-150400.11.6.1, python-google-cloud-audit-log-0.2.5-150400.9.3.1, python-requests-2.31.0-150400.6.8.1, python-setuptools-wheel-67.7.2-150400.3.12.1, python-requests-test-2.31.0-150400.6.9.2, python-google-resumable-media-2.7.0-150400.10.4.1, python-google-cloud-artifact-registry-1.11.0-150400.9.3.1, python-certifi-2023.7.22-150400.12.6.2, python-google-cloud-spanner-test-3.40.1-150400.9.3.2, python-google-crc32c-1.5.0-150400.9.3.1, python-pytz-2023.3-150400.6.6.1, python-googleapis-common-protos-1.62.0-150400.10.4.1, python-grpcio-1.60.1-150400.9.7.2, python-cryptography-41.0.3-150400.16.19.1, python-pycparser-2.21-150400.12.7.2, python-rsa-4.9-150400.12.7.1, python-pyasn1-0.5.0-150400.12.7.2, python-google-cloud-compute-1.15.0-150400.9.3.1, python-google-cloud-vpc-access-1.10.0-150400.9.3.1, python-urllib3-2.0.7-150400.7.14.1, python-proto-plus-test-1.23.0-150400.9.3.2, python-pyOpenSSL-23.2.0-150400.3.10.1, python-grpcio-status-1.60.1-150400.9.3.1, python-google-cloud-logging-3.9.0-150400.9.3.1, python-google-cloud-domains-1.7.1-150400.9.3.1, python-google-cloud-service-directory-1.11.1-150400.9.3.1, python-google-cloud-iam-2.13.0-150400.9.3.1, python-setuptools-test-67.7.2-150400.3.13.1, python-apipkg-3.0.1-150400.12.6.1, python-py-test-1.11.0-150400.12.7.1, python-iniconfig-test-2.0.0-150400.10.7.1, python-charset-normalizer-3.1.0-150400.9.7.2, python-cachetools-5.3.1-150400.8.6.1, python-google-auth-2.27.0-150400.6.7.1, python-google-cloud-run-0.10.1-150400.9.3.1, python-py-1.11.0-150400.12.7.2, python-google-api-core-2.15.0-150400.5.4.2, python-google-cloud-appengine-logging-1.4.0-150400.9.3.1, python-google-cloud-core-2.4.1-150400.5.4.1, python-google-cloud-storage-2.14.0-150400.10.3.1, python-proto-plus-1.23.0-150400.9.3.1, python-grpc-google-iam-v1-0.13.0-150400.9.3.1, protobuf-25.1-150400.9.6.1, python-sqlparse-0.4.4-150400.6.4.2, python-urllib3-test-2.0.7-150400.7.15.2, python-google-cloud-build-3.22.0-150400.9.3.1, python-apipkg-test-3.0.1-150400.12.7.1
openSUSE Leap Micro 5.3 (src):
 protobuf-25.1-150400.9.6.1
openSUSE Leap Micro 5.4 (src):
 protobuf-25.1-150400.9.6.1
openSUSE Leap 15.5 (src):
 python-google-cloud-kms-inventory-0.2.2-150400.9.3.1, python-iniconfig-2.0.0-150400.10.6.1, libcrc32c-1.1.2-150400.9.3.1, python-pyasn1-modules-0.3.0-150400.12.7.1, python-google-cloud-kms-2.21.0-150400.9.3.1, python-google-cloud-secret-manager-2.17.0-150400.9.3.1, python-setuptools-67.7.2-150400.3.12.1, python-google-cloud-spanner-3.40.1-150400.9.3.1, python-google-cloud-dns-0.35.0-150400.9.3.1, python-cffi-1.15.1-150400.8.7.2, python-idna-3.4-150400.11.6.1, python-google-cloud-audit-log-0.2.5-150400.9.3.1, python-requests-2.31.0-150400.6.8.1, python-google-resumable-media-2.7.0-150400.10.4.1, python-google-cloud-artifact-registry-1.11.0-150400.9.3.1, python-certifi-2023.7.22-150400.12.6.2, python-google-crc32c-1.5.0-150400.9.3.1, python-pytz-2023.3-150400.6.6.1, python-googleapis-common-protos-1.62.0-150400.10.4.1, python-grpcio-1.60.1-150400.9.7.2, python-cryptography-41.0.3-150400.16.19.1, python-pycparser-2.21-150400.12.7.2, python-rsa-4.9-150400.12.7.1, python-pyasn1-0.5.0-150400.12.7.2, python-google-cloud-compute-1.15.0-150400.9.3.1, python-google-cloud-vpc-access-1.10.0-150400.9.3.1, python-urllib3-2.0.7-150400.7.14.1, python-pyOpenSSL-23.2.0-150400.3.10.1, python-grpcio-status-1.60.1-150400.9.3.1, python-google-cloud-logging-3.9.0-150400.9.3.1, python-google-cloud-domains-1.7.1-150400.9.3.1, python-google-cloud-service-directory-1.11.1-150400.9.3.1, python-google-cloud-iam-2.13.0-150400.9.3.1, python-apipkg-3.0.1-150400.12.6.1, python-google-api-core-2.15.0-150400.5.4.1, python-charset-normalizer-3.1.0-150400.9.7.2, python-cachetools-5.3.1-150400.8.6.1, python-google-auth-2.27.0-150400.6.7.1, python-google-cloud-run-0.10.1-150400.9.3.1, python-py-1.11.0-150400.12.7.2, python-google-cloud-appengine-logging-1.4.0-150400.9.3.1, python-proto-plus-1.23.0-150400.9.3.1, python-google-cloud-core-2.4.1-150400.5.4.1, python-google-cloud-storage-2.14.0-150400.10.3.1, python-grpc-google-iam-v1-0.13.0-150400.9.3.1, protobuf-25.1-150400.9.6.1, python-sqlparse-0.4.4-150400.6.4.2, python-google-cloud-build-3.22.0-150400.9.3.1
SUSE Linux Enterprise High Performance Computing 15 SP4 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Server 15 SP4 (src):
 protobuf-25.1-150400.9.6.1
SUSE Manager Server 4.3 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Desktop 15 SP4 (src):
 protobuf-25.1-150400.9.6.1
SUSE Manager Retail Branch Server 4.3 (src):
 protobuf-25.1-150400.9.6.1
SUSE Manager Proxy 4.3 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise High Performance Computing 15 SP5 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Server 15 SP5 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Desktop 15 SP5 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Micro 5.3 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Micro 5.4 (src):
 protobuf-25.1-150400.9.6.1
SUSE Linux Enterprise Micro 5.5 (src):
 protobuf-25.1-150400.9.6.1
Basesystem Module 15-SP5 (src):
 protobuf-25.1-150400.9.6.1
Development Tools Module 15-SP5 (src):
 protobuf-25.1-150400.9.6.1
SUSE Package Hub 15 15-SP5 (src):
 protobuf-25.1-150400.9.6.1
Public Cloud Module 15-SP4 (src):
 python-google-cloud-kms-inventory-0.2.2-150400.9.3.1, python-iniconfig-2.0.0-150400.10.6.1, libcrc32c-1.1.2-150400.9.3.1, python-pyasn1-modules-0.3.0-150400.12.7.1, python-google-cloud-kms-2.21.0-150400.9.3.1, python-google-cloud-secret-manager-2.17.0-150400.9.3.1, python-setuptools-67.7.2-150400.3.12.1, python-google-cloud-spanner-3.40.1-150400.9.3.1, python-google-cloud-dns-0.35.0-150400.9.3.1, python-cffi-1.15.1-150400.8.7.2, python-idna-3.4-150400.11.6.1, python-google-cloud-audit-log-0.2.5-150400.9.3.1, python-requests-2.31.0-150400.6.8.1, python-google-resumable-media-2.7.0-150400.10.4.1, python-google-cloud-artifact-registry-1.11.0-150400.9.3.1, python-certifi-2023.7.22-150400.12.6.2, python-google-crc32c-1.5.0-150400.9.3.1, python-pytz-2023.3-150400.6.6.1, python-googleapis-common-protos-1.62.0-150400.10.4.1, python-grpcio-1.60.1-150400.9.7.2, python-cryptography-41.0.3-150400.16.19.1, python-pycparser-2.21-150400.12.7.2, python-rsa-4.9-150400.12.7.1, python-pyasn1-0.5.0-150400.12.7.2, python-google-cloud-compute-1.15.0-150400.9.3.1, python-google-cloud-vpc-access-1.10.0-150400.9.3.1, python-urllib3-2.0.7-150400.7.14.1, python-pyOpenSSL-23.2.0-150400.3.10.1, python-grpcio-status-1.60.1-150400.9.3.1, python-google-cloud-logging-3.9.0-150400.9.3.1, python-google-cloud-domains-1.7.1-150400.9.3.1, python-google-cloud-service-directory-1.11.1-150400.9.3.1, python-google-cloud-iam-2.13.0-150400.9.3.1, python-apipkg-3.0.1-150400.12.6.1, python-google-api-core-2.15.0-150400.5.4.1, python-charset-normalizer-3.1.0-150400.9.7.2, python-cachetools-5.3.1-150400.8.6.1, python-google-auth-2.27.0-150400.6.7.1, python-google-cloud-run-0.10.1-150400.9.3.1, python-py-1.11.0-150400.12.7.2, python-google-cloud-appengine-logging-1.4.0-150400.9.3.1, python-proto-plus-1.23.0-150400.9.3.1, python-google-cloud-core-2.4.1-150400.5.4.1, python-google-cloud-storage-2.14.0-150400.10.3.1, python-grpc-google-iam-v1-0.13.0-150400.9.3.1, protobuf-25.1-150400.9.6.1, python-sqlparse-0.4.4-150400.6.4.2, python-google-cloud-build-3.22.0-150400.9.3.1
Public Cloud Module 15-SP5 (src):
 python-google-cloud-kms-inventory-0.2.2-150400.9.3.1, libcrc32c-1.1.2-150400.9.3.1, python-google-cloud-kms-2.21.0-150400.9.3.1, python-google-cloud-secret-manager-2.17.0-150400.9.3.1, python-grpcio-status-1.60.1-150400.9.3.1, python-google-cloud-spanner-3.40.1-150400.9.3.1, python-google-cloud-dns-0.35.0-150400.9.3.1, python-google-cloud-logging-3.9.0-150400.9.3.1, python-google-cloud-domains-1.7.1-150400.9.3.1, python-google-cloud-service-directory-1.11.1-150400.9.3.1, python-google-cloud-iam-2.13.0-150400.9.3.1, python-google-cloud-audit-log-0.2.5-150400.9.3.1, python-google-api-core-2.15.0-150400.5.4.1, python-google-resumable-media-2.7.0-150400.10.4.1, python-google-auth-2.27.0-150400.6.7.1, python-google-cloud-artifact-registry-1.11.0-150400.9.3.1, python-google-crc32c-1.5.0-150400.9.3.1, python-google-cloud-run-0.10.1-150400.9.3.1, python-googleapis-common-protos-1.62.0-150400.10.4.1, python-grpcio-1.60.1-150400.9.7.2, python-google-cloud-appengine-logging-1.4.0-150400.9.3.1, python-proto-plus-1.23.0-150400.9.3.1, python-google-cloud-core-2.4.1-150400.5.4.1, python-google-cloud-storage-2.14.0-150400.10.3.1, python-grpc-google-iam-v1-0.13.0-150400.9.3.1, protobuf-25.1-150400.9.6.1, python-sqlparse-0.4.4-150400.6.4.2, python-google-cloud-build-3.22.0-150400.9.3.1, python-google-cloud-compute-1.15.0-150400.9.3.1, python-google-cloud-vpc-access-1.10.0-150400.9.3.1
Python 3 Module 15-SP5 (src):
 python-iniconfig-2.0.0-150400.10.6.1, python-pyasn1-modules-0.3.0-150400.12.7.1, python-urllib3-2.0.7-150400.7.14.1, python-pyOpenSSL-23.2.0-150400.3.10.1, python-setuptools-67.7.2-150400.3.12.1, python-cffi-1.15.1-150400.8.7.2, python-idna-3.4-150400.11.6.1, python-requests-2.31.0-150400.6.8.1, python-apipkg-3.0.1-150400.12.6.1, python-charset-normalizer-3.1.0-150400.9.7.2, python-cachetools-5.3.1-150400.8.6.1, python-pytz-2023.3-150400.6.6.1, python-certifi-2023.7.22-150400.12.6.2, python-google-auth-2.27.0-150400.6.7.1, python-py-1.11.0-150400.12.7.2, python-grpcio-1.60.1-150400.9.7.2, python-pycparser-2.21-150400.12.7.2, python-cryptography-41.0.3-150400.16.19.1, python-rsa-4.9-150400.12.7.1, protobuf-25.1-150400.9.6.1, python-pyasn1-0.5.0-150400.12.7.2

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 18 Maintenance Automation 2024-06-20 20:30:04 UTC 
SUSE-RU-2024:1637-2: An update that solves one vulnerability and contains two features can now be installed.

Category: recommended (moderate)
Bug References: 1210617
CVE References: CVE-2023-30608
Jira References: PED-6697, PED-7987
Maintenance Incident: [SUSE:Maintenance:33601](https://smelt.suse.de/incident/33601/)
Sources used:
openSUSE Leap 15.6 (src):
 python-cachetools-5.3.1-150400.8.6.1, python-google-cloud-logging-3.9.0-150400.9.3.1, python-google-cloud-artifact-registry-1.11.0-150400.9.3.1, python-google-cloud-spanner-3.40.1-150400.9.3.1, python-sqlparse-0.4.4-150400.6.4.2, python-cffi-1.15.1-150400.8.7.2, python-google-cloud-service-directory-1.11.1-150400.9.3.1, python-py-1.11.0-150400.12.7.2, python-google-cloud-build-3.22.0-150400.9.3.1, python-google-api-core-2.15.0-150400.5.4.1, python-google-cloud-run-0.10.1-150400.9.3.1, python-pytz-2023.3-150400.6.6.1, python-setuptools-67.7.2-150400.3.12.1, python-google-resumable-media-2.7.0-150400.10.4.1, python-idna-3.4-150400.11.6.1, python-pycparser-2.21-150400.12.7.2, libcrc32c-1.1.2-150400.9.3.1, python-apipkg-3.0.1-150400.12.6.1, python-google-cloud-domains-1.7.1-150400.9.3.1, python-grpc-google-iam-v1-0.13.0-150400.9.3.1, python-google-cloud-kms-2.21.0-150400.9.3.1, python-google-cloud-audit-log-0.2.5-150400.9.3.1, python-google-cloud-kms-inventory-0.2.2-150400.9.3.1, python-pyasn1-modules-0.3.0-150400.12.7.1, python-google-cloud-appengine-logging-1.4.0-150400.9.3.1, python-google-cloud-core-2.4.1-150400.5.4.1, python-certifi-2023.7.22-150400.12.6.2, python-proto-plus-1.23.0-150400.9.3.1, python-google-cloud-dns-0.35.0-150400.9.3.1, python-google-cloud-compute-1.15.0-150400.9.3.1, python-pyOpenSSL-23.2.0-150400.3.10.1, python-pyasn1-0.5.0-150400.12.7.2, python-requests-2.31.0-150400.6.8.1, python-rsa-4.9-150400.12.7.1, python-google-cloud-secret-manager-2.17.0-150400.9.3.1, python-google-cloud-storage-2.14.0-150400.10.3.1, python-google-auth-2.27.0-150400.6.7.1, python-charset-normalizer-3.1.0-150400.9.7.2, python-grpcio-status-1.60.1-150400.9.3.1, python-iniconfig-2.0.0-150400.10.6.1, python-google-cloud-vpc-access-1.10.0-150400.9.3.1, python-urllib3-2.0.7-150400.7.14.1, python-google-crc32c-1.5.0-150400.9.3.1, python-google-cloud-iam-2.13.0-150400.9.3.1, python-googleapis-common-protos-1.62.0-150400.10.4.1, python-setuptools-wheel-67.7.2-150400.3.12.1
Public Cloud Module 15-SP6 (src):
 python-google-cloud-logging-3.9.0-150400.9.3.1, python-google-cloud-appengine-logging-1.4.0-150400.9.3.1, python-google-cloud-artifact-registry-1.11.0-150400.9.3.1, python-google-cloud-core-2.4.1-150400.5.4.1, python-google-cloud-spanner-3.40.1-150400.9.3.1, python-sqlparse-0.4.4-150400.6.4.2, python-proto-plus-1.23.0-150400.9.3.1, python-google-cloud-dns-0.35.0-150400.9.3.1, python-google-cloud-service-directory-1.11.1-150400.9.3.1, python-google-cloud-build-3.22.0-150400.9.3.1, python-google-cloud-compute-1.15.0-150400.9.3.1, python-google-api-core-2.15.0-150400.5.4.1, python-google-cloud-run-0.10.1-150400.9.3.1, python-google-resumable-media-2.7.0-150400.10.4.1, python-google-cloud-secret-manager-2.17.0-150400.9.3.1, python-google-cloud-storage-2.14.0-150400.10.3.1, libcrc32c-1.1.2-150400.9.3.1, python-google-auth-2.27.0-150400.6.7.1, python-grpcio-status-1.60.1-150400.9.3.1, python-google-cloud-vpc-access-1.10.0-150400.9.3.1, python-google-cloud-domains-1.7.1-150400.9.3.1, python-grpc-google-iam-v1-0.13.0-150400.9.3.1, python-google-crc32c-1.5.0-150400.9.3.1, python-google-cloud-iam-2.13.0-150400.9.3.1, python-google-cloud-kms-2.21.0-150400.9.3.1, python-google-cloud-audit-log-0.2.5-150400.9.3.1, python-googleapis-common-protos-1.62.0-150400.10.4.1, python-google-cloud-kms-inventory-0.2.2-150400.9.3.1
Python 3 Module 15-SP6 (src):
 python-cachetools-5.3.1-150400.8.6.1, python-certifi-2023.7.22-150400.12.6.2, python-cffi-1.15.1-150400.8.7.2, python-py-1.11.0-150400.12.7.2, python-pyOpenSSL-23.2.0-150400.3.10.1, python-pyasn1-0.5.0-150400.12.7.2, python-pytz-2023.3-150400.6.6.1, python-requests-2.31.0-150400.6.8.1, python-rsa-4.9-150400.12.7.1, python-setuptools-67.7.2-150400.3.12.1, python-idna-3.4-150400.11.6.1, python-pycparser-2.21-150400.12.7.2, python-google-auth-2.27.0-150400.6.7.1, python-charset-normalizer-3.1.0-150400.9.7.2, python-apipkg-3.0.1-150400.12.6.1, python-iniconfig-2.0.0-150400.10.6.1, python-urllib3-2.0.7-150400.7.14.1, python-pyasn1-modules-0.3.0-150400.12.7.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.