Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:774-1 Important: Toolbox Container Security Update

suse
Calendar Grey March 23, 2023
Dist Suse Esm H88
Important security enhancements in the SUSE toolbox container address various vulnerabilities, with a significant focus on a critical issue related to python3.
The container suse/sle-micro/5.3/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security fix important SUSE container update python3 blocklist bypass

References

References : 1203355 1208471 CVE-2023-24329

1203355,1208471,CVE-2023-24329

This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).

The following package changes have been done:

- libpython3_6m1_0-3.6.15-150300.10.45.1 updated

- python3-base-3.6.15-150300.10.45.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:774-1
Container Tags : suse/sle-micro/5.3/toolbox:12.1 , suse/sle-micro/5.3/toolbox:12.1-5.2.95 , suse/sle-micro/5.3/toolbox:latest
Container Release : 5.2.95
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security fix important SUSE container update python3 blocklist bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here