Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2114-1

Опубликовано: 12 авг. 2019
Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

  • CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).

Список пакетов

Image SLES15-Azure-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-EC2-HVM-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-GCE-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-OCI-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-Azure-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-EC2-HVM-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-GCE-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SAP-OCI-BYOS
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP1-SAPCAL-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP1-SAPCAL-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP1-SAPCAL-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-SAP-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP2-SAP-BYOS-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-SAP-BYOS-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-SAP-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP2-SAP-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-SAP-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.14-7.17.1
python-base-2.7.14-7.17.1
Image SLES15-SP3-SAP-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-SAP-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-SAPCAL-Azure
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-SAPCAL-EC2-HVM
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
Image SLES15-SP3-SAPCAL-GCE
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
SUSE Linux Enterprise Module for Basesystem 15
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
python-curses-2.7.14-7.17.1
python-devel-2.7.14-7.17.1
python-gdbm-2.7.14-7.17.1
python-xml-2.7.14-7.17.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libpython2_7-1_0-2.7.14-7.17.1
python-2.7.14-7.17.1
python-base-2.7.14-7.17.1
SUSE Linux Enterprise Module for Desktop Applications 15
python-tk-2.7.14-7.17.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
python-tk-2.7.14-7.17.1
SUSE Linux Enterprise Module for Python 2 15 SP1
python-curses-2.7.14-7.17.1
python-devel-2.7.14-7.17.1
python-gdbm-2.7.14-7.17.1
python-xml-2.7.14-7.17.1

Ссылки

Описание

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.14-7.17.1
Image SLES15-Azure-BYOS:python-2.7.14-7.17.1
Image SLES15-Azure-BYOS:python-base-2.7.14-7.17.1
Image SLES15-Azure-BYOS:python-xml-2.7.14-7.17.1
Ссылки
Уязвимость SUSE-SU-2019:2114-1