Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:1938-1

Опубликовано: 07 июн. 2024
Источник: suse-cvrf

Описание

Security update for python-docker

This update for python-docker fixes the following issues:

  • CVE-2024-35195: Fix failure with updated python-requests. (bsc#1224788)

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP5
python3-docker-4.2.0-150200.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6
python3-docker-4.2.0-150200.3.5.1
openSUSE Leap 15.5
python3-docker-4.2.0-150200.3.5.1
openSUSE Leap 15.6
python3-docker-4.2.0-150200.3.5.1

Ссылки

Описание

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

Затронутые продукты
SUSE Linux Enterprise Module for Package Hub 15 SP5:python3-docker-4.2.0-150200.3.5.1
SUSE Linux Enterprise Module for Package Hub 15 SP6:python3-docker-4.2.0-150200.3.5.1
openSUSE Leap 15.5:python3-docker-4.2.0-150200.3.5.1
openSUSE Leap 15.6:python3-docker-4.2.0-150200.3.5.1
Ссылки