← Search the atlas
SUSE-SU-2023:0724-1
Not scored
Security update for python
This update for python fixes the following issues:
- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).
- CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244).
The following non-security bug was fixed:
- Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).
Exploit probability
Not scored
Published
March 14, 2023
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python-base
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
python-base
SUSE:Linux Enterprise Server 15 SP3-LTSS
python-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
python
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
python
SUSE:Linux Enterprise Server 15 SP2-LTSS
python
SUSE:Linux Enterprise Server 15 SP2-LTSS
python-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
python-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
python
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
python
SUSE:Linux Enterprise Server 15 SP3-LTSS
python
SUSE:Enterprise Storage 7.1
python-base
openSUSE:Leap 15.4
python-base
SUSE:Manager Server 4.2
python-base
SUSE:Enterprise Storage 7.1
python
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
python-base
SUSE:Enterprise Storage 7
python
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
python
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
python
SUSE:Manager Proxy 4.2
python-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
python-base
SUSE:Manager Proxy 4.2
python
openSUSE:Leap 15.4
python-doc
openSUSE:Leap 15.4
python
SUSE:Linux Enterprise Module for Package Hub 15 SP4
python-base
SUSE:Manager Server 4.2
python
SUSE:Enterprise Storage 7
python-base
SUSE:Linux Enterprise Real Time 15 SP3
python-base
SUSE:Linux Enterprise Server 15 SP1-LTSS
python-base
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
python-base
SUSE:Linux Enterprise Real Time 15 SP3
python
SUSE:Linux Enterprise Server 15 SP1-LTSS
python
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
python
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2023:0724-1
This update for python fixes the following issues:
- CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).
- CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244).
The following non-security bug was fixed:
- Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).
View original source ↗
05 / REFERENCES
Further evidence