SUSE-SU-2023:3369-1

UNKNOWN

Security update for python-configobj

Published Aug 22, 2023

Modified 2 years ago

Fix available

Details

This update for python-configobj fixes the following issues:

CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py (bsc#1210070).

Affected Packages

python-configobj

SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Real Time 15 SP3SUSE Manager Proxy 4.2

Fixed in:

5.0.6-150000.3.3.1

python3-configobj

SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Module for Basesystem 15 SP5SUSE Linux Enterprise Real Time 15 SP3SUSE Manager Proxy 4.2

Fixed in:

5.0.6-150000.3.3.1

python2-configobj

SUSE Manager Server 4.2

Fixed in:

5.0.6-150000.3.3.1

References

REPORT

https://bugzilla.suse.com/1210070

WEB

https://www.suse.com/security/cve/CVE-2023-26112

ADVISORY