Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

UBUNTU: 2023:3078-2 Critical: bci/nodejs Code Injection Patch

suse
Calendar Grey July 7, 2022
Scroller Suse
Crucial security patch released for bci/python tackling command injection issues and various other threats in SUSE container images.
The container bci/python was updated

Summary

Advisory ID: SUSE-SU-2022:2291-1 Released: Wed Jul 6 13:04:37 2022 Summary: Security update for python310 Type: security Severity: important Advisory ID: SUSE-SU-2022:2294-1 Released: Wed Jul 6 13:34:15 2022 Summary: Security update for expat Type: security Severity: important Advisory ID: SUSE-SU-2022:2305-1 Released: Wed Jul 6 13:38:42 2022 Summary: Security update for curl Type: security

Topics%20covered

Topics Covered

security advisory important openssl command injection curl expat bci/python

References

References : 1185637 1196025 1196026 1196168 1196169 1196171 1196784 1198511

1199166 1200550 1200734 1200735 1200736 1200737 1201099 CVE-2015-20107

CVE-2022-1292 CVE-2022-2068 CVE-2022-2097 CVE-2022-25235 CVE-2022-25236

CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 CVE-2022-32205 CVE-2022-32206

CVE-2022-32207 CVE-2022-32208

1198511,CVE-2015-20107

This update for python310 fixes the following issues:

- CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).

- Update to 3.10.5:

- Core and Builtins

- gh-93418: Fixed an assert where an f-string has an equal

sign '=' following an expression, but there's no trailing

brace. For example, f'{i='.

- gh-91924: Fix __ltrace__ debug feature if the stdout

encoding is not UTF-8. Patch by Victor Stinner.

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:1435-1
Container Tags : bci/python:3 , bci/python:3.10 , bci/python:3.10-4.10 , bci/python:latest
Container Release : 4.10
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important openssl command injection curl expat bci/python

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.