Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2023:779-1 Important: Python3 Security Flaw in Toolbox

suse
Calendar Grey March 23, 2023
Dist Suse Esm H88
The SUSE Container Update Advisory for suse/sle-micro/5.2/toolbox addresses critical security vulnerabilities in python3, helping users to secure their environments
The container suse/sle-micro/5.2/toolbox was updated

Summary

Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important

Topics%20covered

Topics Covered

security advisory patch important security flaw suse container update python3

References

References : 1203355 1208471 CVE-2023-24329

1203355,1208471,CVE-2023-24329

This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).

The following package changes have been done:

- libpython3_6m1_0-3.6.15-150300.10.45.1 updated

- python3-base-3.6.15-150300.10.45.1 updated

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:779-1
Container Tags : suse/sle-micro/5.2/toolbox:11.1 , suse/sle-micro/5.2/toolbox:11.1-6.2.185 , suse/sle-micro/5.2/toolbox:latest
Container Release : 6.2.185
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory patch important security flaw suse container update python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here