Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

SUSE: 2022:1385-1 Important: bci/python Command Injection Security

suse
Calendar Grey June 25, 2022
Scroller Suse
This notification outlines a crucial security patch for the bci/python container, targeting vulnerabilities related to command execution.
The container bci/python was updated

Summary

Advisory ID: SUSE-SU-2022:2174-1 Released: Fri Jun 24 11:34:17 2022 Summary: Security update for python39 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory important security patch python command injection bci

References

References : 1192249 1198511 CVE-2015-20107

1192249,1198511,CVE-2015-20107

This update for python39 fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).

- Update to 3.9.13:

- Core and Builtins

- gh-92311: Fixed a bug where setting frame.f_lineno to jump

over a list comprehension could misbehave or crash.

- gh-92112: Fix crash triggered by an evil custom mro() on

a metaclass.

- gh-92036: Fix a crash in subinterpreters related to the

garbage collector. When a subinterpreter is deleted,

untrack all objects tracked by its GC. To prevent a crash

in deallocator functions expecting objects to be tracked by

the GC, leak a strong reference to these objects on

purpose, so they are never deleted and their deallocator

functions are not called. Patch by Victor Stinner.

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1385-1
Container Tags : bci/python:3 , bci/python:3.9 , bci/python:3.9-18.9
Container Release : 18.9
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important security patch python command injection bci

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.