Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2297-1 Important: bci/python DoS Security Update

suse
Calendar Grey September 20, 2022
Dist Suse Esm H88
Recent enhancements for bci/python feature several security fixes targeting critical weaknesses. Keep your system protected!
The container bci/python was updated

Summary

Advisory ID: SUSE-SU-2022:3271-1 Released: Wed Sep 14 06:45:39 2022 Summary: Security update for perl Type: security Severity: moderate Advisory ID: SUSE-feature-2022:3302-1 Released: Mon Sep 19 08:51:02 2022 Summary: Feature update for python310-pip Type: feature Severity: moderate Advisory ID: SUSE-SU-2022:3305-1 Released: Mon Sep 19 11:45:57 2022 Summary: Security update for libtirpc Type: security

Topics%20covered

Topics Covered

security advisory DoS security fix important SUSE python bci/python

References

References : 1047178 1189802 1195773 1201041 1201680 1201783 CVE-2017-6512

CVE-2021-36690 CVE-2021-46828 CVE-2022-35737

1047178,CVE-2017-6512

This update for perl fixes the following issues:

- CVE-2017-6512: Fixed File::Path rmtree/remove_tree race condition (bsc#1047178).

1201041

This feature update for python310-pip and python-rpm-macros provides:

python310-pip:

Upgrade from version 20.2.4 to version 22.0.4 (jsc#SLE-24539)

- Adjust SPEC file to generate python310 module only

- Avoid cycle: BuildRequire ca-certificates only in tests

- This version is not compatible with Python 3.6 and thus not suitable for SUSE Linux Enterprise 15.

- Drop the doctype check, that presented a warning for index pages that use non-compliant HTML 5.

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:2297-1
Container Tags : bci/python:3 , bci/python:3.10 , bci/python:3.10-5.31 , bci/python:latest
Container Release : 5.31
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory DoS security fix important SUSE python bci/python

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here