| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for python3 (Important) |
| Description: |
This update for python3 fixes the following issues:
- CVE-2019-20907: Fixed denial of service by avoiding possible infinite loop in specifically crafted tarball (bsc#1174091). - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service (bsc#1173274). - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840). - If the locale is 'C', coerce it to C.UTF-8 (bsc#1162423).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1021364
1026649
1026650
1040311
1040312
1040313
1050577
1050578
1050579
1050581
1054094
1055960
1057357
1061310
1088004
1088009
1091396
1096745
1105010
1108813
1112209
1113160
1113534
1113652
1113742
1119947
1130840
1133037
1134195
1136446
1137597
1138822
1140747
1141619
1141661
1141853
1142038
1143913
1148177
1149955
1152497
1153090
1153238
1153277
1154448
1154456
1154458
1154460
1154461
1154464
1154940
1154968
1155372
1155945
1157888
1158003
1158004
1158005
1158006
1158007
1162423
1163871
1165921
1168310
1170231
1170557
1171687
1172462
1173274
1173477
1173691
1173694
1173700
1173701
1173743
1173874
1173875
1173876
1173880
1174091
1174701
1178593
943457
964336
CVE-2014-8964
CVE-2015-2325
CVE-2015-2327
CVE-2015-2328
CVE-2015-3210
CVE-2015-3217
CVE-2015-5073
CVE-2015-8380
CVE-2016-10165
CVE-2016-1283
CVE-2016-3191
CVE-2017-11624
CVE-2017-11625
CVE-2017-11626
CVE-2017-11627
CVE-2017-12595
CVE-2017-14970
CVE-2017-18922
CVE-2017-18926
CVE-2017-7500
CVE-2017-7501
CVE-2017-9208
CVE-2017-9209
CVE-2017-9210
CVE-2018-0734
CVE-2018-12020
CVE-2018-12207
CVE-2018-14647
CVE-2018-15473
CVE-2018-16435
CVE-2018-16884
CVE-2018-20852
CVE-2018-21247
CVE-2018-5407
CVE-2019-1010006
CVE-2019-10215
CVE-2019-11135
CVE-2019-11459
CVE-2019-11477
CVE-2019-11478
CVE-2019-15043
CVE-2019-16056
CVE-2019-16935
CVE-2019-18420
CVE-2019-18421
CVE-2019-18422
CVE-2019-18423
CVE-2019-18424
CVE-2019-18425
CVE-2019-19577
CVE-2019-19578
CVE-2019-19579
CVE-2019-19580
CVE-2019-19581
CVE-2019-19582
CVE-2019-19583
CVE-2019-20839
CVE-2019-20840
CVE-2019-20907
CVE-2019-3846
CVE-2019-9947
CVE-2020-12245
CVE-2020-13379
CVE-2020-14397
CVE-2020-14398
CVE-2020-14399
CVE-2020-14400
CVE-2020-14401
CVE-2020-14402
CVE-2020-14403
CVE-2020-14404
CVE-2020-14422
SUSE-SU-2017:3232-1
SUSE-SU-2018:3545-1
SUSE-SU-2018:3866-1
SUSE-SU-2018:3884-1
SUSE-SU-2019:2080-1
SUSE-SU-2019:3297-1
SUSE-SU-2020:1970-1
SUSE-SU-2020:2699-1
SUSE-SU-2020:3351-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP4-ESPOS
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
transmission-common-2.94-lp150.1 is installed
OR transmission-gtk-2.94-lp150.1 is installed
OR transmission-gtk-lang-2.94-lp150.1 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
libmirage-3.2.2-lp151.3.3 is installed
OR libmirage-3_2-3.2.2-lp151.3.3 is installed
OR libmirage-data-3.2.2-lp151.3.3 is installed
OR libmirage-devel-3.2.2-lp151.3.3 is installed
OR libmirage-lang-3.2.2-lp151.3.3 is installed
OR libmirage11-3.2.2-lp151.3.3 is installed
OR typelib-1_0-libmirage-3_2-3.2.2-lp151.3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libpython3_4m1_0-3.4.10-25.52 is installed
OR python3-3.4.10-25.52 is installed
OR python3-base-3.4.10-25.52 is installed
OR python3-curses-3.4.10-25.52 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
gpg2-2.0.24-9.3 is installed
OR gpg2-lang-2.0.24-9.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
libpcre1-8.39-7 is installed
OR libpcre1-32bit-8.39-7 is installed
OR libpcre16-0-8.39-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND Package Information
libpolkit0-0.113-5.18 is installed
OR polkit-0.113-5.18 is installed
OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
libpcap-1.8.1-10.3 is installed
OR libpcap1-1.8.1-10.3 is installed
OR tcpdump-4.9.2-14.14 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kernel-default-4.4.180-94.113 is installed
OR kernel-default-base-4.4.180-94.113 is installed
OR kernel-default-devel-4.4.180-94.113 is installed
OR kernel-default-kgraft-4.4.180-94.113 is installed
OR kernel-default-man-4.4.180-94.113 is installed
OR kernel-devel-4.4.180-94.113 is installed
OR kernel-macros-4.4.180-94.113 is installed
OR kernel-source-4.4.180-94.113 is installed
OR kernel-syms-4.4.180-94.113 is installed
OR kgraft-patch-4_4_180-94_113-default-1-4.5 is installed
OR kgraft-patch-SLE12-SP3_Update_30-1-4.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND libSoundTouch0-1.7.1-5.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
AND Package Information
libX11-1.6.2-12.8 is installed
OR libX11-6-1.6.2-12.8 is installed
OR libX11-6-32bit-1.6.2-12.8 is installed
OR libX11-data-1.6.2-12.8 is installed
OR libX11-xcb1-1.6.2-12.8 is installed
OR libX11-xcb1-32bit-1.6.2-12.8 is installed
OR libxcb-1.10-4.5 is installed
OR libxcb-dri2-0-1.10-4.5 is installed
OR libxcb-dri2-0-32bit-1.10-4.5 is installed
OR libxcb-dri3-0-1.10-4.5 is installed
OR libxcb-dri3-0-32bit-1.10-4.5 is installed
OR libxcb-glx0-1.10-4.5 is installed
OR libxcb-glx0-32bit-1.10-4.5 is installed
OR libxcb-present0-1.10-4.5 is installed
OR libxcb-present0-32bit-1.10-4.5 is installed
OR libxcb-randr0-1.10-4.5 is installed
OR libxcb-render0-1.10-4.5 is installed
OR libxcb-render0-32bit-1.10-4.5 is installed
OR libxcb-shape0-1.10-4.5 is installed
OR libxcb-shm0-1.10-4.5 is installed
OR libxcb-shm0-32bit-1.10-4.5 is installed
OR libxcb-sync1-1.10-4.5 is installed
OR libxcb-sync1-32bit-1.10-4.5 is installed
OR libxcb-xf86dri0-1.10-4.5 is installed
OR libxcb-xfixes0-1.10-4.5 is installed
OR libxcb-xfixes0-32bit-1.10-4.5 is installed
OR libxcb-xinerama0-1.10-4.5 is installed
OR libxcb-xkb1-1.10-4.5 is installed
OR libxcb-xkb1-32bit-1.10-4.5 is installed
OR libxcb-xv0-1.10-4.5 is installed
OR libxcb1-1.10-4.5 is installed
OR libxcb1-32bit-1.10-4.5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
evince-3.20.2-6.27 is installed
OR evince-browser-plugin-3.20.2-6.27 is installed
OR evince-lang-3.20.2-6.27 is installed
OR evince-plugin-djvudocument-3.20.2-6.27 is installed
OR evince-plugin-dvidocument-3.20.2-6.27 is installed
OR evince-plugin-pdfdocument-3.20.2-6.27 is installed
OR evince-plugin-psdocument-3.20.2-6.27 is installed
OR evince-plugin-tiffdocument-3.20.2-6.27 is installed
OR evince-plugin-xpsdocument-3.20.2-6.27 is installed
OR libevdocument3-4-3.20.2-6.27 is installed
OR libevview3-3-3.20.2-6.27 is installed
OR nautilus-evince-3.20.2-6.27 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
xen-4.9.4_06-3.59 is installed
OR xen-doc-html-4.9.4_06-3.59 is installed
OR xen-libs-4.9.4_06-3.59 is installed
OR xen-libs-32bit-4.9.4_06-3.59 is installed
OR xen-tools-4.9.4_06-3.59 is installed
OR xen-tools-domU-4.9.4_06-3.59 is installed
|