Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2023:2638-1 Moderate: Python-Requests Proxy-Authorization Leak

suse
Calendar Grey February 27, 2024
Dist Suse Esm H88
A recent security patch for python-requests addresses an inadvertent leak of the Proxy-Authorization header, affecting multiple SUSE offerings.
* bsc#1211674 Cross-References: * CVE-2023-32681

Summary

## This update for python-requests fixes the following issues: * CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2023-2638=1 * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-2638=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-2638=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2023-2638=1 SUSE-SLE- HA-12-SP5-2023-2638=1

Topics%20covered

Topics Covered

security advisory moderate suse python-requests proxy-authorization leak

References

* bsc#1211674

Cross-

* CVE-2023-32681

CVSS scores:

* CVE-2023-32681 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

* CVE-2023-32681 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

Affected Products:

* Public Cloud Module 12

* SUSE Linux Enterprise High Availability Extension 12 SP5

* SUSE Linux Enterprise High Performance Computing 12 SP2

* SUSE Linux Enterprise High Performance Computing 12 SP3

* SUSE Linux Enterprise High Performance Computing 12 SP4

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12

* SUSE Linux Enterprise Server 12 SP1

* SUSE Linux Enterprise Server 12 SP2

* SUSE Linux Enterprise Server 12 SP3

* SUSE Linux Enterprise Server 12 SP4

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server for SAP Applications 12

Announcement ID: SUSE-SU-2023:2638-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate suse python-requests proxy-authorization leak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here