Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-724


Security update for python


Type: security
Severity: important
Issued: 2023-03-14
Description:
This update for python fixes the following issues:

- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).
- CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244).

The following non-security bug was fixed:

- Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).


              

Packages


  • python-base-2.7.18-150000.48.1