Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2023:2400-1 Important: bci/python Directory Traversal Update

suse
Calendar Grey July 22, 2023
Dist Suse Esm H88
SUSE Container has released an important security patch for bci/node, addressing multiple vulnerabilities and concerns.
The container bci/python was updated

Summary

Advisory ID: SUSE-SU-2023:2932-1 Released: Fri Jul 21 11:53:44 2023 Summary: Security update for python-pip Type: security Severity: low Advisory ID: SUSE-SU-2023:2937-1 Released: Fri Jul 21 15:34:07 2023 Summary: Security update for python311 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory directory traversal important container update bci/python

References

References : 1203750 1208471 1212015 CVE-2007-4559 CVE-2023-24329

1212015

This update for python-pip fixes the following issues:

- Removed .exe files from the RPM package, to prevent issues with security scanners (bsc#1212015).

1203750,1208471,CVE-2007-4559,CVE-2023-24329

This update for python311 fixes the following issues:

python was updated to version 3.11.4:

- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

- CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750).

- Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified.

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:2400-1
Container Tags : bci/python:3 , bci/python:3-8.22 , bci/python:3.11 , bci/python:3.11-8.22 , bci/python:latest
Container Release : 8.22
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory directory traversal important container update bci/python

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here