SUSE: 2023:4334-1 bci/python Security Update
Summary
Advisory ID: SUSE-RU-2023:4962-1 Released: Fri Dec 22 13:45:06 2023 Summary: Recommended update for curl Type: recommended Severity: important Advisory ID: SUSE-SU-2023:4988-1 Released: Thu Dec 28 16:06:49 2023 Summary: Security update for python-pip Type: security Severity: low
References
References : 1216987 1217353 CVE-2023-5752
1216987
This update for curl fixes the following issues:
- libssh: Implement SFTP packet size limit (bsc#1216987)
This update also ships curl to the INSTALLER channel.
1217353,CVE-2023-5752
This update for python-pip fixes the following issues:
- CVE-2023-5752: Fixed injection of arbitrary configuration through Mercurial parameter (bsc#1217353).
The following package changes have been done:
- libcurl4-8.0.1-150400.5.41.1 updated
- curl-8.0.1-150400.5.41.1 updated
- python311-pip-22.3.1-150400.17.12.1 updated
- container:sles15-image-15.0.0-36.5.68 updated
![Dist Suse](/images/distros/dist-suse.gif)