Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE CU 2023 811 1 Critical: bci/nodejs Security Update Released

suse
Calendar Grey March 28, 2023
Dist Suse Esm H88
New patches for ruby, go, and wget have been released in the SUSE Container Advisory SUSE-CU-2023:812-1.
The container bci/nodejs was updated

Summary

Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important Advisory ID: SUSE-SU-2023:1582-1 Released: Mon Mar 27 10:31:52 2023 Summary: Security update for curl Type: security Severity: moderate

Topics%20covered

Topics Covered

security advisory important SUSE curl nodejs container update python3

References

References : 1203355 1208471 1209209 1209210 1209211 1209212 1209214 CVE-2023-24329

CVE-2023-27533 CVE-2023-27534 CVE-2023-27535 CVE-2023-27536 CVE-2023-27538

1203355,1208471,CVE-2023-24329

This update for python3 fixes the following issues:

- CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

The following non-security bug was fixed:

- Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).

1209209,1209210,1209211,1209212,1209214,CVE-2023-27533,CVE-2023-27534,CVE-2023-27535,CVE-2023-27536,CVE-2023-27538

This update for curl fixes the following issues:

- CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2023:811-1
Container Tags : bci/node:14 , bci/node:14-37.11 , bci/nodejs:14 , bci/nodejs:14-37.11
Container Release : 37.11
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory important SUSE curl nodejs container update python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here