Oval Definition:oval:org.opensuse.security:def:202128861
Revision Date:2023-06-22Version:1
Title:CVE-2021-28861
Description:

** DISPUTED ** Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2021-28861
SUSE CVE-2021-28861
SUSE-CU-2022:2463-1
SUSE-CU-2022:2464-1
SUSE-CU-2022:2465-1
SUSE-CU-2022:2467-1
SUSE-CU-2022:2468-1
SUSE-CU-2022:2505-1
SUSE-CU-2022:2507-1
SUSE-CU-2022:2512-1
SUSE-CU-2022:2515-1
SUSE-CU-2022:2658-1
SUSE-CU-2022:2667-1
SUSE-CU-2022:2687-1
SUSE-CU-2022:2727-1
SUSE-CU-2022:2728-1
SUSE-CU-2022:2730-1
SUSE-CU-2022:2731-1
SUSE-CU-2022:3033-1
SUSE-CU-2023:322-1
SUSE-IU-2022:1108-1
SUSE-IU-2022:1109-1
SUSE-IU-2022:1110-1
SUSE-IU-2022:1116-1
SUSE-IU-2022:1117-1
SUSE-IU-2022:1118-1
SUSE-SU-2022:3473-1
SUSE-SU-2022:3483-1
SUSE-SU-2022:3485-1
SUSE-SU-2022:3511-1
SUSE-SU-2022:3511-2
SUSE-SU-2022:3512-1
SUSE-SU-2022:3512-2
SUSE-SU-2022:3544-1
SUSE-SU-2022:3553-1
SUSE-SU-2022:3593-1
SUSE-SU-2022:3940-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Module for Basesystem 15 SP5
SUSE Linux Enterprise Module for Development Tools 15 SP5
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Micro 5.3 is installed
  • AND Package Information
  • libpython3_6m1_0-3.6.15-150300.10.30.1 is installed
  • OR python3-3.6.15-150300.10.30.1 is installed
  • OR python3-base-3.6.15-150300.10.30.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • AND
  • python is affected
  • OR python3 is affected
  • OR python36 is affected
  • OR Package Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND
  • python is affected
  • OR python-32bit is affected
  • OR python-curses is affected
  • OR python-demo is affected
  • OR python-gdbm is affected
  • OR python-idle is affected
  • OR python-tk is affected
  • OR python3 is affected
  • OR python3-curses is affected
  • OR python3-tk is affected
  • OR python36 is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed
  • AND Package Information
  • python is affected
  • OR python-curses is affected
  • OR python-gdbm is affected
  • OR python-tk is affected
  • OR python3 is affected
  • OR python3-curses is affected
  • OR python3-dbm is affected
  • OR python3-idle is affected
  • OR python3-tk is affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND Package Information
  • python is affected
  • OR python-32bit is affected
  • OR python-curses is affected
  • OR python-demo is affected
  • OR python-gdbm is affected
  • OR python-idle is affected
  • OR python-tk is affected
  • OR python3 is affected
  • OR python3-curses is affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Development Tools 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND python3-tools-3.6.15-150300.10.45.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND
  • libpython3_6m1_0-3.6.15-150300.10.45.1 is installed
  • OR python3-3.6.15-150300.10.45.1 is installed
  • OR python3-base-3.6.15-150300.10.45.1 is installed
  • OR python3-curses-3.6.15-150300.10.45.1 is installed
  • OR python3-dbm-3.6.15-150300.10.45.1 is installed
  • OR python3-devel-3.6.15-150300.10.45.1 is installed
  • OR python3-idle-3.6.15-150300.10.45.1 is installed
  • OR python3-tk-3.6.15-150300.10.45.1 is installed
  • BACK