OPENSUSE-SU-2024:11473-1 python36-translate-toolkit-3.3.6-1.3 on GA media

These are all security issues fixed in the python36-translate-toolkit-3.3.6-1.3 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Update : translate-toolkit (openSUSE-2018-130)

This update for translate-toolkit to 2.2.4 fixes several issues. This security issue was fixed : - Prevent inclusion of external ressources XXE boo1073535 These non-security issues were fixed : - Added support for nested and WebExtension JSON dialects. - po2txt no longer converts non-translatable...

XML External Entities (XXE)

translate-toolkit is vulnerable to XML External Entity XXE attacks. The vulnerability exists due to the use of insecure defaults where external entities were resolved. This allows arbitrary file reads when processing malicious XML files...