Описание
Recommended update for python3
This update for python3 fixes the following issues:
- Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894).
Список пакетов
Container caasp/v4/389-ds:1.4.2
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container caasp/v4/hyperkube:v1.17.17
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container caasp/v4/k8s-sidecar:0.1.75
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container ses/6/cephcsi/cephcsi:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container ses/6/rook/ceph:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container ses/7/ceph/ceph:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
python3-curses-3.6.10-3.53.1
Container ses/7/cephcsi/cephcsi:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
python3-curses-3.6.10-3.53.1
Container ses/7/prometheus-webhook-snmp:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container ses/7/rook/ceph:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
python3-curses-3.6.10-3.53.1
Container suse/sle-micro/5.0/toolbox:latest
libpython3_6m1_0-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container suse/sles/15.2/virt-handler:0.38.1
libpython3_6m1_0-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
Container suse/sles/15.2/virt-launcher:0.38.1
libpython3_6m1_0-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libpython3_6m1_0-3.6.10-3.53.1
python3-3.6.10-3.53.1
python3-base-3.6.10-3.53.1
python3-curses-3.6.10-3.53.1
python3-dbm-3.6.10-3.53.1
python3-devel-3.6.10-3.53.1
python3-idle-3.6.10-3.53.1
python3-testsuite-3.6.10-3.53.1
python3-tk-3.6.10-3.53.1
SUSE Linux Enterprise Module for Development Tools 15 SP1
python3-tools-3.6.10-3.53.1
Ссылки
- Link for SUSE-RU-2020:1342-1
- E-Mail link for SUSE-RU-2020:1342-1
- SUSE Security Ratings
- SUSE Bug 1149955
- SUSE Bug 1165894
- SUSE CVE CVE-2019-16056 page
Описание
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
Затронутые продукты
Container caasp/v4/389-ds:1.4.2:libpython3_6m1_0-3.6.10-3.53.1
Container caasp/v4/389-ds:1.4.2:python3-3.6.10-3.53.1
Container caasp/v4/389-ds:1.4.2:python3-base-3.6.10-3.53.1
Container caasp/v4/hyperkube:v1.17.17:libpython3_6m1_0-3.6.10-3.53.1
Ссылки
- CVE-2019-16056
- SUSE Bug 1149955