Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2023:780-2 Critical: Ruby Security Update in Application Suite

suse
Calendar Grey March 23, 2023
Dist Suse Esm H88
Critical security patch released for the Docker image suse/sle-micro/5.4/toolbox, featuring updates to python3 and various bug fixes.
The container suse/sle-micro/5.4/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory security fix important suse toolbox container python3

References

References : 1203355 1208471 CVE-2023-24329

1203355,1208471,CVE-2023-24329

This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).

The following package changes have been done:

- libpython3_6m1_0-3.6.15-150300.10.45.1 updated

- python3-base-3.6.15-150300.10.45.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:775-1
Container Tags : suse/sle-micro/5.4/toolbox:12.1 , suse/sle-micro/5.4/toolbox:12.1-3.2.77 , suse/sle-micro/5.4/toolbox:latest
Container Release : 3.2.77
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security fix important suse toolbox container python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here