SUSE: 2023:694-1 Important: bci/python Security Update Advisory
suse
March 17, 2023
The container bci/python was updated
Summary
Advisory ID: SUSE-SU-2023:748-1 Released: Wed Mar 15 20:34:06 2023 Summary: Security update for python310 Type: security Severity: important
References
References : 1208471 831629 CVE-2015-20107 CVE-2022-37454 CVE-2022-42919 CVE-2022-45061
CVE-2023-24329
1208471,831629,CVE-2015-20107,CVE-2022-37454,CVE-2022-42919,CVE-2022-45061,CVE-2023-24329
This update for python310 fixes the following issues:
- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).
Update to 3.10.10:
- Add provides for readline and sqlite3 to the main Python
package.
- Disable NIS for new products, it's deprecated and gets removed
Update to 3.10.9:
- python -m http.server no longer allows terminal
control characters sent within a garbage request to be
printed to the stderr server lo This is done by changing
the http.server BaseHTTPRequestHandler .log_message method
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Container Advisory ID : SUSE-CU-2023:694-1
Container Tags : bci/python:3 , bci/python:3-11.31 , bci/python:3.10 , bci/python:3.10-11.31 , bci/python:latest
Container Release : 11.31
Severity : important
Type : security
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!