SUSE-SU-2023:4467-1

Details

This update for python-urllib3 fixes the following issues:

CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377).

Affected Packages

python-urllib3

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5

Fixed in:

1.25.10-150300.4.9.1

python3-urllib3

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4SUSE Linux Enterprise Micro 5.5

Fixed in:

1.25.10-150300.4.9.1

References

REPORT

https://bugzilla.suse.com/1216377

WEB

https://www.suse.com/security/cve/CVE-2023-45803

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20234467-1/