SUSE-SU-2019:2064-1

Опубликовано: 06 авг. 2019

Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

Security issue fixed:

CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).

Список пакетов

Image SLES15-Azure-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-EC2-HVM-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-GCE-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-OCI-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-Azure-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-EC2-HVM-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-GCE-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SAP-OCI-BYOS

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP1-SAPCAL-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP1-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP1-SAPCAL-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-SAP-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP2-SAP-BYOS-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-SAP-BYOS-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-SAP-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP2-SAP-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-SAP-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.14-7.14.2

python-base-2.7.14-7.14.2

Image SLES15-SP3-SAP-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-SAP-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-SAPCAL-Azure

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Image SLES15-SP3-SAPCAL-GCE

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

SUSE Linux Enterprise Module for Basesystem 15

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

python-curses-2.7.14-7.14.2

python-devel-2.7.14-7.14.2

python-gdbm-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

SUSE Linux Enterprise Module for Basesystem 15 SP1

libpython2_7-1_0-2.7.14-7.14.2

python-2.7.14-7.14.2

python-base-2.7.14-7.14.2

SUSE Linux Enterprise Module for Desktop Applications 15

python-tk-2.7.14-7.14.2

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

python-tk-2.7.14-7.14.2

SUSE Linux Enterprise Module for Python 2 15 SP1

python-curses-2.7.14-7.14.2

python-devel-2.7.14-7.14.2

python-gdbm-2.7.14-7.14.2

python-xml-2.7.14-7.14.2

Ссылки

https://www.suse.com/support/update/announcement/2019/suse-su-20192064-1/
Link for SUSE-SU-2019:2064-1
https://lists.suse.com/pipermail/sle-security-updates/2019-August/005783.html
E-Mail link for SUSE-SU-2019:2064-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1138459
SUSE Bug 1138459
https://www.suse.com/security/cve/CVE-2019-10160/
SUSE CVE CVE-2019-10160 page

Описание

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.

Затронутые продукты

Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.14-7.14.2

Image SLES15-Azure-BYOS:python-2.7.14-7.14.2

Image SLES15-Azure-BYOS:python-base-2.7.14-7.14.2

Image SLES15-Azure-BYOS:python-xml-2.7.14-7.14.2

Ссылки

https://www.suse.com/security/cve/CVE-2019-10160.html
CVE-2019-10160
https://bugzilla.suse.com/1138459
SUSE Bug 1138459

SUSE-SU-2019:2064-1

Описание

Список пакетов

Image SLES15-Azure-BYOS

Image SLES15-EC2-HVM-BYOS

Image SLES15-GCE-BYOS

Image SLES15-OCI-BYOS

Image SLES15-SAP-Azure

Image SLES15-SAP-Azure-BYOS

Image SLES15-SAP-Azure-LI-BYOS-Production

Image SLES15-SAP-Azure-VLI-BYOS-Production

Image SLES15-SAP-EC2-HVM

Image SLES15-SAP-EC2-HVM-BYOS

Image SLES15-SAP-GCE

Image SLES15-SAP-GCE-BYOS

Image SLES15-SAP-OCI-BYOS

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAP-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15

SUSE Linux Enterprise Module for Basesystem 15 SP1

SUSE Linux Enterprise Module for Desktop Applications 15

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

SUSE Linux Enterprise Module for Python 2 15 SP1

Ссылки

Уязвимость: CVE-2019-10160

Описание

Затронутые продукты

Ссылки