Oval Definition:oval:org.opensuse.security:def:59784
Revision Date:2021-08-24Version:1
Title:Security update for python-PyYAML (Important)
Description:



This update for python-PyYAML fixes the following issues:

- Update to 5.3.1.

- CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
Family:unixClass:patch
Status:Reference(s):1005886
1027519
1064982
1072834
1073703
1080634
1080635
1080662
1081518
1083093
1083624
1087251
1087252
1089152
1089635
1090336
1090638
1090820
1090822
1090823
1093898
1094508
1095189
1095420
1095825
1095826
1095827
1095945
1096043
1096759
1097103
1098369
1099392
1103276
1104301
1111014
1128481
1130103
1133528
1136570
1145092
1160467
1160468
1167890
1168930
1172405
1174514
1176409
1176412
CVE-2013-6435
CVE-2014-8118
CVE-2016-8611
CVE-2017-12613
CVE-2017-17833
CVE-2018-10471
CVE-2018-10472
CVE-2018-1063
CVE-2018-11440
CVE-2018-11577
CVE-2018-11683
CVE-2018-11684
CVE-2018-11685
CVE-2018-12085
CVE-2018-15468
CVE-2018-17963
CVE-2018-3760
CVE-2018-5383
CVE-2018-7540
CVE-2018-7541
CVE-2018-7542
CVE-2018-8897
CVE-2019-10208
CVE-2019-14896
CVE-2019-14897
CVE-2019-3859
CVE-2019-3860
CVE-2020-14343
CVE-2020-14392
CVE-2020-14393
CVE-2020-5260
CVE-2020-8022
SUSE-SU-2018:0926-1
SUSE-SU-2018:1184-1
SUSE-SU-2018:1196-1
SUSE-SU-2018:2762-1
SUSE-SU-2018:2780-1
SUSE-SU-2020:1791-1
SUSE-SU-2020:2661-1
SUSE-SU-2021:2818-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP4-LTSS
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • cups-2.2.7-lp150.1 is installed
  • OR cups-client-2.2.7-lp150.1 is installed
  • OR cups-config-2.2.7-lp150.1 is installed
  • OR libcups2-2.2.7-lp150.1 is installed
  • OR libcupscgi1-2.2.7-lp150.1 is installed
  • OR libcupsimage2-2.2.7-lp150.1 is installed
  • OR libcupsmime1-2.2.7-lp150.1 is installed
  • OR libcupsppdc1-2.2.7-lp150.1 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • curl-7.60.0-lp151.5.3 is installed
  • OR curl-mini-7.60.0-lp151.5.3 is installed
  • OR libcurl-devel-7.60.0-lp151.5.3 is installed
  • OR libcurl-devel-32bit-7.60.0-lp151.5.3 is installed
  • OR libcurl-mini-devel-7.60.0-lp151.5.3 is installed
  • OR libcurl4-7.60.0-lp151.5.3 is installed
  • OR libcurl4-32bit-7.60.0-lp151.5.3 is installed
  • OR libcurl4-mini-7.60.0-lp151.5.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • openslp-2.0.0-18.15 is installed
  • OR openslp-32bit-2.0.0-18.15 is installed
  • OR openslp-server-2.0.0-18.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • rpm-4.11.2-15 is installed
  • OR rpm-32bit-4.11.2-15 is installed
  • OR rpm-build-4.11.2-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • libjavascriptcoregtk-4_0-18-2.28.2-2.53 is installed
  • OR libwebkit2gtk-4_0-37-2.28.2-2.53 is installed
  • OR typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53 is installed
  • OR typelib-1_0-WebKit2-4_0-2.28.2-2.53 is installed
  • OR webkit2gtk-4_0-injected-bundles-2.28.2-2.53 is installed
  • OR webkit2gtk3-2.28.2-2.53 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • MozillaFirefox-78.0.1-112.3 is installed
  • OR MozillaFirefox-branding-SLE-78-35.3 is installed
  • OR MozillaFirefox-devel-78.0.1-112.3 is installed
  • OR MozillaFirefox-translations-common-78.0.1-112.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_178-94_91-default-5-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_25-5-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-71.79 is installed
  • OR libMagickCore-6_Q16-1-6.8.8.1-71.79 is installed
  • OR libMagickWand-6_Q16-1-6.8.8.1-71.79 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND busybox-1.21.1-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-LTSS is installed
  • AND Package Information
  • python-PyYAML-5.3.1-28.6.1 is installed
  • OR python3-PyYAML-5.3.1-28.6.1 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • tomcat-8.0.53-29.32 is installed
  • OR tomcat-admin-webapps-8.0.53-29.32 is installed
  • OR tomcat-docs-webapp-8.0.53-29.32 is installed
  • OR tomcat-el-3_0-api-8.0.53-29.32 is installed
  • OR tomcat-javadoc-8.0.53-29.32 is installed
  • OR tomcat-jsp-2_3-api-8.0.53-29.32 is installed
  • OR tomcat-lib-8.0.53-29.32 is installed
  • OR tomcat-servlet-3_1-api-8.0.53-29.32 is installed
  • OR tomcat-webapps-8.0.53-29.32 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND Package Information
  • ardana-ansible-9.0+git.1568821007.4e73730-3.13 is installed
  • OR ardana-horizon-9.0+git.1569869028.8edfc22-3.10 is installed
  • OR ardana-keystone-9.0+git.1570035317.78077ac-3.10 is installed
  • OR ardana-manila-9.0+git.1569444107.add6a40-3.9 is installed
  • OR ardana-neutron-9.0+git.1571328680.3a89cb8-3.13 is installed
  • OR grafana-6.2.5-3.9 is installed
  • OR openstack-cinder-13.0.8~dev8-3.13 is installed
  • OR openstack-cinder-api-13.0.8~dev8-3.13 is installed
  • OR openstack-cinder-backup-13.0.8~dev8-3.13 is installed
  • OR openstack-cinder-scheduler-13.0.8~dev8-3.13 is installed
  • OR openstack-cinder-volume-13.0.8~dev8-3.13 is installed
  • OR openstack-dashboard-14.0.5~dev1-3.9 is installed
  • OR openstack-horizon-plugin-manila-ui-2.16.2~dev2-3.3 is installed
  • OR openstack-keystone-14.1.1~dev26-3.13 is installed
  • OR openstack-manila-7.3.1~dev15-4.13 is installed
  • OR openstack-manila-api-7.3.1~dev15-4.13 is installed
  • OR openstack-manila-data-7.3.1~dev15-4.13 is installed
  • OR openstack-manila-scheduler-7.3.1~dev15-4.13 is installed
  • OR openstack-manila-share-7.3.1~dev15-4.13 is installed
  • OR openstack-neutron-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-dhcp-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-fwaas-13.0.3~dev2-3.6 is installed
  • OR openstack-neutron-ha-tool-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-l3-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-lbaas-13.0.1~dev15-3.10 is installed
  • OR openstack-neutron-lbaas-agent-13.0.1~dev15-3.10 is installed
  • OR openstack-neutron-linuxbridge-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-macvtap-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-metadata-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-metering-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-openvswitch-agent-13.0.6~dev3-3.13 is installed
  • OR openstack-neutron-server-13.0.6~dev3-3.13 is installed
  • OR openstack-nova-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-api-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-cells-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-compute-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-conductor-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-console-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-novncproxy-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-placement-api-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-scheduler-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-serialproxy-18.2.4~dev18-3.13 is installed
  • OR openstack-nova-vncproxy-18.2.4~dev18-3.13 is installed
  • OR openstack-octavia-3.2.1~dev1-3.13 is installed
  • OR openstack-octavia-amphora-agent-3.2.1~dev1-3.13 is installed
  • OR openstack-octavia-amphora-image-0.1.1-7.3 is installed
  • OR openstack-octavia-amphora-image-x86_64-0.1.1-7.3 is installed
  • OR openstack-octavia-api-3.2.1~dev1-3.13 is installed
  • OR openstack-octavia-health-manager-3.2.1~dev1-3.13 is installed
  • OR openstack-octavia-housekeeping-3.2.1~dev1-3.13 is installed
  • OR openstack-octavia-worker-3.2.1~dev1-3.13 is installed
  • OR pdns-4.1.8-3.3 is installed
  • OR pdns-backend-mysql-4.1.8-3.3 is installed
  • OR python-Django1-1.11.24-3.12 is installed
  • OR python-cinder-13.0.8~dev8-3.13 is installed
  • OR python-horizon-14.0.5~dev1-3.9 is installed
  • OR python-horizon-plugin-manila-ui-2.16.2~dev2-3.3 is installed
  • OR python-keystone-14.1.1~dev26-3.13 is installed
  • OR python-keystonemiddleware-5.2.1-11 is installed
  • OR python-manila-7.3.1~dev15-4.13 is installed
  • OR python-neutron-13.0.6~dev3-3.13 is installed
  • OR python-neutron-fwaas-13.0.3~dev2-3.6 is installed
  • OR python-neutron-lbaas-13.0.1~dev15-3.10 is installed
  • OR python-nova-18.2.4~dev18-3.13 is installed
  • OR python-octavia-3.2.1~dev1-3.13 is installed
  • OR python-octaviaclient-1.6.1-3.3 is installed
  • OR python-openstack_auth-14.0.5~dev1-3.9 is installed
  • OR python-os-brick-2.5.8-3.6 is installed
  • OR python-os-brick-common-2.5.8-3.6 is installed
  • OR python-oslo.cache-1.30.4-3.3 is installed
  • OR python-oslo.messaging-8.1.4-3.3 is installed
  • OR venv-openstack-barbican-7.0.1~dev18-3.11 is installed
  • OR venv-openstack-barbican-x86_64-7.0.1~dev18-3.11 is installed
  • OR venv-openstack-cinder-13.0.8~dev8-3.11 is installed
  • OR venv-openstack-cinder-x86_64-13.0.8~dev8-3.11 is installed
  • OR venv-openstack-designate-7.0.1~dev22-3.11 is installed
  • OR venv-openstack-designate-x86_64-7.0.1~dev22-3.11 is installed
  • OR venv-openstack-glance-17.0.1~dev30-3.11 is installed
  • OR venv-openstack-glance-x86_64-17.0.1~dev30-3.11 is installed
  • OR venv-openstack-heat-11.0.3~dev23-3.11 is installed
  • OR venv-openstack-heat-x86_64-11.0.3~dev23-3.11 is installed
  • OR venv-openstack-horizon-14.0.5~dev1-4.11 is installed
  • OR venv-openstack-horizon-x86_64-14.0.5~dev1-4.11 is installed
  • OR venv-openstack-keystone-14.1.1~dev26-3.11 is installed
  • OR venv-openstack-keystone-x86_64-14.1.1~dev26-3.11 is installed
  • OR venv-openstack-magnum-7.1.1~dev28-4.11 is installed
  • OR venv-openstack-magnum-x86_64-7.1.1~dev28-4.11 is installed
  • OR venv-openstack-manila-7.3.1~dev15-3.11 is installed
  • OR venv-openstack-manila-x86_64-7.3.1~dev15-3.11 is installed
  • OR venv-openstack-monasca-2.7.1~dev10-3.11 is installed
  • OR venv-openstack-monasca-ceilometer-1.8.2~dev3-3.11 is installed
  • OR venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.11 is installed
  • OR venv-openstack-monasca-x86_64-2.7.1~dev10-3.11 is installed
  • OR venv-openstack-neutron-13.0.6~dev3-6.11 is installed
  • OR venv-openstack-neutron-x86_64-13.0.6~dev3-6.11 is installed
  • OR venv-openstack-nova-18.2.4~dev18-3.11 is installed
  • OR venv-openstack-nova-x86_64-18.2.4~dev18-3.11 is installed
  • OR venv-openstack-octavia-3.2.1~dev1-4.11 is installed
  • OR venv-openstack-octavia-x86_64-3.2.1~dev1-4.11 is installed
  • OR venv-openstack-sahara-9.0.2~dev12-3.11 is installed
  • OR venv-openstack-sahara-x86_64-9.0.2~dev12-3.11 is installed
  • OR venv-openstack-swift-2.19.2~dev1-2.8 is installed
  • OR venv-openstack-swift-x86_64-2.19.2~dev1-2.8 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • crowbar-5.0+git.1528696845.81a7b5d0-3.3 is installed
  • OR crowbar-core-5.0+git.1533887407.6e9b0412d-3.8 is installed
  • OR crowbar-core-branding-upstream-5.0+git.1533887407.6e9b0412d-3.8 is installed
  • OR crowbar-devel-5.0+git.1528696845.81a7b5d0-3.3 is installed
  • OR crowbar-ha-5.0+git.1530177874.35b9099-3.3 is installed
  • OR crowbar-init-5.0+git.1520420379.d5bbb35-3.3 is installed
  • OR crowbar-openstack-5.0+git.1534167599.d325ef804-4.8 is installed
  • OR crowbar-ui-1.2.0+git.1533844061.4ac8e723-3.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND python-urllib3-1.23-3.6 is installed
    • BACK