Oval Definition:	oval:org.opensuse.security:def:50445
Revision Date: 2020-12-01 Version: 1 Title: Security update for python (Moderate) Description: This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853). Family: unix Class: patch Status: Reference(s): 1051510 1051979 1055117 1066110 1071995 1077761 1083647 1083710 1086274 1086314 1087081 1088047 1089343 1092206 1094555 1098633 1099811 1099813 1099844 1099845 1099846 1099849 1099858 1099863 1099864 1100132 1101116 1101331 1101669 1101828 1101832 1101833 1101837 1101839 1101841 1101843 1101844 1101845 1101847 1101852 1101853 1101867 1101872 1101874 1101875 1101882 1101883 1101885 1101887 1101890 1101891 1101893 1101895 1101896 1101900 1101902 1101903 1102633 1102658 1103097 1103356 1103421 1103517 1103723 1103724 1103725 1103726 1103727 1103728 1103729 1103730 1103917 1103920 1103948 1103949 1103990 1103991 1103992 1104066 1104111 1104174 1104211 1104319 1104745 1104841 1105323 1106191 1106383 1109837 1111666 1112374 1114279 1114685 1115015 1115022 1115025 1118367 1118368 1119113 1119222 1119532 1120423 1120470 1120502 1120503 1120504 1120584 1120589 1122623 1123080 1125703 1127034 1127315 1127611 1128432 1128902 1129528 1129770 1130836 1130840 1132390 1133021 1133401 1133452 1133738 1134090 1134097 1134390 1134395 1134399 1134730 1134738 1135153 1135296 1135335 1135556 1135642 1135897 1136156 1136157 1136161 1136217 1136264 1136271 1136333 1136342 1136343 1136345 1136348 1136460 1136461 1136462 1136467 1137103 1137194 1137224 1137366 1137429 1137458 1137534 1137535 1137584 1137586 1137609 1137625 1137728 1137811 1137827 1137884 1137985 1137990 1138263 1138291 1138293 1138336 1138374 1138375 1138459 1138589 1138681 1138687 1138719 1138732 1138874 1138879 1139358 1139619 1139712 1139751 1139771 1139865 1140133 1140139 1140228 1140322 1140328 1140405 1140424 1140428 1140454 1140463 1140559 1140575 1140577 1140637 1140652 1140658 1140676 1140715 1140719 1140726 1140727 1140728 1140814 1140887 1140888 1140889 1140891 1140893 1140903 1140945 1140948 1140954 1140955 1140956 1140957 1140958 1140959 1140960 1140961 1140962 1140964 1140971 1140972 1140992 1141312 1141401 1141402 1141452 1141453 1141454 1141478 1141558 1141853 1142023 1142052 1142083 1142112 1142115 1142119 1142220 1142221 1142265 1142350 1142351 1142354 1142359 1142450 1142623 1142673 1142701 1142868 1143003 1143105 1143185 1143189 1143191 1143209 1143507 1149429 1149841 1151021 1151186 1153423 1153869 1154370 1154738 1156275 1167462 1169511 1172698 1172704 CVE-2018-10876 CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880 CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-10902 CVE-2018-10938 CVE-2018-16843 CVE-2018-16844 CVE-2018-16845 CVE-2018-16871 CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 CVE-2018-20836 CVE-2018-20852 CVE-2018-20855 CVE-2018-3620 CVE-2018-3646 CVE-2018-5391 CVE-2019-10160 CVE-2019-10638 CVE-2019-10639 CVE-2019-1125 CVE-2019-11478 CVE-2019-11599 CVE-2019-11757 CVE-2019-11758 CVE-2019-11759 CVE-2019-11760 CVE-2019-11761 CVE-2019-11762 CVE-2019-11763 CVE-2019-11764 CVE-2019-11810 CVE-2019-12614 CVE-2019-12817 CVE-2019-12818 CVE-2019-12819 CVE-2019-13233 CVE-2019-13631 CVE-2019-13648 CVE-2019-14283 CVE-2019-14284 CVE-2019-14835 CVE-2019-14869 CVE-2019-15903 CVE-2019-17626 CVE-2019-3816 CVE-2019-3833 CVE-2019-6471 CVE-2019-9947 CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2767 CVE-2020-2773 CVE-2020-2778 CVE-2020-2781 CVE-2020-2800 CVE-2020-2803 CVE-2020-2805 CVE-2020-2816 CVE-2020-2830 CVE-2020-8023 SUSE-SU-2018:2380-1 SUSE-SU-2018:2940-1 SUSE-SU-2019:0334-1 SUSE-SU-2019:0654-1 SUSE-SU-2019:0770-1 SUSE-SU-2019:1352-2 SUSE-SU-2019:2064-1 SUSE-SU-2019:2069-1 SUSE-SU-2019:2114-1 SUSE-SU-2019:2550-1 SUSE-SU-2019:2871-1 SUSE-SU-2019:2981-1 SUSE-SU-2020:0255-1 Platform(s): SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information e2fsprogs-1.41.9-2.10.11 is installed OR libblkid1-2.19.1-6.62 is installed OR libblkid1-32bit-2.19.1-6.62 is installed OR libcom_err2-1.41.9-2.10.11 is installed OR libcom_err2-32bit-1.41.9-2.10.11 is installed OR libext2fs2-1.41.9-2.10.11 is installed OR libuuid-devel-2.19.1-6.62 is installed OR libuuid1-2.19.1-6.62 is installed OR libuuid1-32bit-2.19.1-6.62 is installed OR uuid-runtime-2.19.1-6.62 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND dhcpcd-3.2.3-45.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libXv1-1.0.10-3 is installed OR libXv1-32bit-1.0.10-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information colord-1.1.7-5 is installed OR colord-gtk-lang-0.1.25-3 is installed OR colord-lang-1.1.7-5 is installed OR libcolord-gtk1-0.1.25-3 is installed OR libcolord2-1.1.7-5 is installed OR libcolord2-32bit-1.1.7-5 is installed OR libcolorhug2-1.1.7-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libXp6-1.0.2-3 is installed OR libXp6-32bit-1.0.2-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND dnsmasq-2.76-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gpgme-1.5.1-1 is installed OR libgpgme11-1.5.1-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information libpython2_7-1_0-2.7.14-7.17 is installed OR python-2.7.14-7.17 is installed OR python-base-2.7.14-7.17 is installed OR python-curses-2.7.14-7.17 is installed OR python-devel-2.7.14-7.17 is installed OR python-gdbm-2.7.14-7.17 is installed OR python-xml-2.7.14-7.17 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 15 is installed AND Package Information kernel-default-4.12.14-25.13 is installed OR reiserfs-kmp-default-4.12.14-25.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-23-default-4-10 is installed OR kernel-livepatch-SLE15_Update_0-4-10 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_7-default-4-2 is installed OR kernel-livepatch-SLE15-SP1_Update_2-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information nginx-1.14.2-3.3 is installed OR vim-plugin-nginx-1.14.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information libpython3_6m1_0-32bit-3.6.8-3.16 is installed OR python3-3.6.8-3.16 is installed OR python3-32bit-3.6.8-3.16 is installed OR python3-base-3.6.8-3.16 is installed OR python3-base-32bit-3.6.8-3.16 is installed OR python3-doc-3.6.8-3.16 is installed OR python3-testsuite-3.6.8-3.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed AND Package Information openldap2-2.4.46-9.31 is installed OR openldap2-back-sock-2.4.46-9.31 is installed OR openldap2-back-sql-2.4.46-9.31 is installed OR openldap2-contrib-2.4.46-9.31 is installed OR openldap2-doc-2.4.46-9.31 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information kernel-azure-4.12.14-8.13 is installed OR kernel-azure-base-4.12.14-8.13 is installed OR kernel-azure-devel-4.12.14-8.13 is installed OR kernel-devel-azure-4.12.14-8.13 is installed OR kernel-source-azure-4.12.14-8.13 is installed OR kernel-syms-azure-4.12.14-8.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information bind-9.11.2-12.13 is installed OR bind-chrootenv-9.11.2-12.13 is installed OR bind-doc-9.11.2-12.13 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information graphviz-addons-2.40.1-6.3 is installed OR graphviz-tcl-2.40.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information apache2-mod_php7-7.2.5-4.46 is installed OR php7-7.2.5-4.46 is installed OR php7-bcmath-7.2.5-4.46 is installed OR php7-bz2-7.2.5-4.46 is installed OR php7-calendar-7.2.5-4.46 is installed OR php7-ctype-7.2.5-4.46 is installed OR php7-curl-7.2.5-4.46 is installed OR php7-dba-7.2.5-4.46 is installed OR php7-devel-7.2.5-4.46 is installed OR php7-dom-7.2.5-4.46 is installed OR php7-enchant-7.2.5-4.46 is installed OR php7-exif-7.2.5-4.46 is installed OR php7-fastcgi-7.2.5-4.46 is installed OR php7-fileinfo-7.2.5-4.46 is installed OR php7-fpm-7.2.5-4.46 is installed OR php7-ftp-7.2.5-4.46 is installed OR php7-gd-7.2.5-4.46 is installed OR php7-gettext-7.2.5-4.46 is installed OR php7-gmp-7.2.5-4.46 is installed OR php7-iconv-7.2.5-4.46 is installed OR php7-intl-7.2.5-4.46 is installed OR php7-json-7.2.5-4.46 is installed OR php7-ldap-7.2.5-4.46 is installed OR php7-mbstring-7.2.5-4.46 is installed OR php7-mysql-7.2.5-4.46 is installed OR php7-odbc-7.2.5-4.46 is installed OR php7-opcache-7.2.5-4.46 is installed OR php7-openssl-7.2.5-4.46 is installed OR php7-pcntl-7.2.5-4.46 is installed OR php7-pdo-7.2.5-4.46 is installed OR php7-pear-7.2.5-4.46 is installed OR php7-pear-Archive_Tar-7.2.5-4.46 is installed OR php7-pgsql-7.2.5-4.46 is installed OR php7-phar-7.2.5-4.46 is installed OR php7-posix-7.2.5-4.46 is installed OR php7-shmop-7.2.5-4.46 is installed OR php7-snmp-7.2.5-4.46 is installed OR php7-soap-7.2.5-4.46 is installed OR php7-sockets-7.2.5-4.46 is installed OR php7-sodium-7.2.5-4.46 is installed OR php7-sqlite-7.2.5-4.46 is installed OR php7-sysvmsg-7.2.5-4.46 is installed OR php7-sysvsem-7.2.5-4.46 is installed OR php7-sysvshm-7.2.5-4.46 is installed OR php7-tokenizer-7.2.5-4.46 is installed OR php7-wddx-7.2.5-4.46 is installed OR php7-xmlreader-7.2.5-4.46 is installed OR php7-xmlrpc-7.2.5-4.46 is installed OR php7-xmlwriter-7.2.5-4.46 is installed OR php7-xsl-7.2.5-4.46 is installed OR php7-zip-7.2.5-4.46 is installed OR php7-zlib-7.2.5-4.46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND logrotate-3.8.7-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kernel-default-3.12.74-60.64.48 is installed OR kernel-default-base-3.12.74-60.64.48 is installed OR kernel-default-devel-3.12.74-60.64.48 is installed OR kernel-default-man-3.12.74-60.64.48 is installed OR kernel-devel-3.12.74-60.64.48 is installed OR kernel-macros-3.12.74-60.64.48 is installed OR kernel-source-3.12.74-60.64.48 is installed OR kernel-syms-3.12.74-60.64.48 is installed OR kernel-xen-3.12.74-60.64.48 is installed OR kernel-xen-base-3.12.74-60.64.48 is installed OR kernel-xen-devel-3.12.74-60.64.48 is installed OR kgraft-patch-3_12_74-60_64_48-default-1-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-1-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-1-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information MozillaFirefox-60.3.0-109.50 is installed OR MozillaFirefox-devel-60.3.0-109.50 is installed OR MozillaFirefox-translations-common-60.3.0-109.50 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information res-signingkeys-3.0.37-52.23 is installed OR smt-3.0.37-52.23 is installed OR smt-support-3.0.37-52.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information res-signingkeys-3.0.37-52.23 is installed OR smt-3.0.37-52.23 is installed OR smt-support-3.0.37-52.23 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information jakarta-commons-fileupload-1.1.1-120 is installed OR jakarta-commons-fileupload-javadoc-1.1.1-120 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information MozillaFirefox-68.2.0-109.95 is installed OR MozillaFirefox-translations-common-68.2.0-109.95 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_176-94_88-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_24-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information apache2-2.4.23-29.43 is installed OR apache2-doc-2.4.23-29.43 is installed OR apache2-example-pages-2.4.23-29.43 is installed OR apache2-prefork-2.4.23-29.43 is installed OR apache2-utils-2.4.23-29.43 is installed OR apache2-worker-2.4.23-29.43 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information rpmlint-1.10-7.12 is installed OR rpmlint-mini-1.10-5.12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.3 is installed OR kernel-default-extra-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND enigmail-2.0.11-3.16 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information libdcerpc-binding0-4.2.4-28.19 is installed OR libdcerpc-binding0-32bit-4.2.4-28.19 is installed OR libdcerpc0-4.2.4-28.19 is installed OR libdcerpc0-32bit-4.2.4-28.19 is installed OR libgensec0-4.2.4-28.19 is installed OR libgensec0-32bit-4.2.4-28.19 is installed OR libndr-krb5pac0-4.2.4-28.19 is installed OR libndr-krb5pac0-32bit-4.2.4-28.19 is installed OR libndr-nbt0-4.2.4-28.19 is installed OR libndr-nbt0-32bit-4.2.4-28.19 is installed OR libndr-standard0-4.2.4-28.19 is installed OR libndr-standard0-32bit-4.2.4-28.19 is installed OR libndr0-4.2.4-28.19 is installed OR libndr0-32bit-4.2.4-28.19 is installed OR libnetapi0-4.2.4-28.19 is installed OR libnetapi0-32bit-4.2.4-28.19 is installed OR libregistry0-4.2.4-28.19 is installed OR libsamba-credentials0-4.2.4-28.19 is installed OR libsamba-credentials0-32bit-4.2.4-28.19 is installed OR libsamba-hostconfig0-4.2.4-28.19 is installed OR libsamba-hostconfig0-32bit-4.2.4-28.19 is installed OR libsamba-passdb0-4.2.4-28.19 is installed OR libsamba-passdb0-32bit-4.2.4-28.19 is installed OR libsamba-util0-4.2.4-28.19 is installed OR libsamba-util0-32bit-4.2.4-28.19 is installed OR libsamdb0-4.2.4-28.19 is installed OR libsamdb0-32bit-4.2.4-28.19 is installed OR libsmbclient-raw0-4.2.4-28.19 is installed OR libsmbclient-raw0-32bit-4.2.4-28.19 is installed OR libsmbclient0-4.2.4-28.19 is installed OR libsmbclient0-32bit-4.2.4-28.19 is installed OR libsmbconf0-4.2.4-28.19 is installed OR libsmbconf0-32bit-4.2.4-28.19 is installed OR libsmbldap0-4.2.4-28.19 is installed OR libsmbldap0-32bit-4.2.4-28.19 is installed OR libtevent-util0-4.2.4-28.19 is installed OR libtevent-util0-32bit-4.2.4-28.19 is installed OR libwbclient0-4.2.4-28.19 is installed OR libwbclient0-32bit-4.2.4-28.19 is installed OR samba-4.2.4-28.19 is installed OR samba-32bit-4.2.4-28.19 is installed OR samba-client-4.2.4-28.19 is installed OR samba-client-32bit-4.2.4-28.19 is installed OR samba-doc-4.2.4-28.19 is installed OR samba-libs-4.2.4-28.19 is installed OR samba-libs-32bit-4.2.4-28.19 is installed OR samba-winbind-4.2.4-28.19 is installed OR samba-winbind-32bit-4.2.4-28.19 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information openstack-glance-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-api-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-doc-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-glare-13.0.1~a0~dev6-4.3 is installed OR openstack-glance-registry-13.0.1~a0~dev6-4.3 is installed OR python-glance-13.0.1~a0~dev6-4.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information libecpg6-10.9-1.12 is installed OR libpq5-10.9-1.12 is installed OR libpq5-32bit-10.9-1.12 is installed OR postgresql10-10.9-1.12 is installed OR postgresql10-contrib-10.9-1.12 is installed OR postgresql10-docs-10.9-1.12 is installed OR postgresql10-libs-10.9-1.12 is installed OR postgresql10-plperl-10.9-1.12 is installed OR postgresql10-plpython-10.9-1.12 is installed OR postgresql10-pltcl-10.9-1.12 is installed OR postgresql10-server-10.9-1.12 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-rails-html-sanitizer-1.0.3-8.8 is installed OR rubygem-rails-html-sanitizer-1.0.3-8.8 is installed
BACK