Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:0234-1

Опубликовано: 24 янв. 2020
Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Список пакетов

Image SLES15-Azure-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-EC2-HVM-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-GCE-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-OCI-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-Azure-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-EC2-HVM-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-GCE-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SAP-OCI-BYOS
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP1-SAPCAL-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP1-SAPCAL-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP1-SAPCAL-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-SAP-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP2-SAP-BYOS-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-SAP-BYOS-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-SAP-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP2-SAP-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-SAP-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
libpython2_7-1_0-2.7.17-7.32.1
python-base-2.7.17-7.32.1
Image SLES15-SP3-SAP-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-SAP-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-SAPCAL-Azure
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-SAPCAL-EC2-HVM
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
Image SLES15-SP3-SAPCAL-GCE
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-xml-2.7.17-7.32.1
SUSE Linux Enterprise Module for Basesystem 15
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
python-curses-2.7.17-7.32.2
python-devel-2.7.17-7.32.1
python-gdbm-2.7.17-7.32.2
python-xml-2.7.17-7.32.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
libpython2_7-1_0-2.7.17-7.32.1
python-2.7.17-7.32.2
python-base-2.7.17-7.32.1
SUSE Linux Enterprise Module for Desktop Applications 15
python-tk-2.7.17-7.32.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
python-tk-2.7.17-7.32.2
SUSE Linux Enterprise Module for Python 2 15 SP1
python-curses-2.7.17-7.32.2
python-devel-2.7.17-7.32.1
python-gdbm-2.7.17-7.32.2
python-xml-2.7.17-7.32.1

Ссылки

Описание

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Buffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5 before 2.7.7, 3.x before 3.3.4, and 3.4.x before 3.4rc1 allows remote attackers to execute arbitrary code via a crafted string.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote attackers to read script source code or conduct directory traversal attacks and execute unintended code via a crafted character sequence, as demonstrated by a %2f separator.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a "buffer" function.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions."

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been confirmed. The vulnerability lies when multiply threads are handling large amounts of data. In both cases there is essentially a race condition that occurs. For the Heap-Buffer-Overflow, Thread 2 is creating the size for a buffer, but Thread1 is already writing to the buffer without knowing how much to write. So when a large amount of data is being processed, it is very easy to cause memory corruption using a Heap-Buffer-Overflow. As for the Use-After-Free, Thread3->Malloc->Thread1->Free's->Thread2-Re-uses-Free'd Memory. The PSRT has stated that this is not a security vulnerability due to the fact that the attacker must be able to run code, however in some situations, such as function as a service, this vulnerability can potentially be used by an attacker to violate a trust boundary, as such the DWF feels this issue deserves a CVE.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary JavaScript can be delivered to clients that visit the http URL for this server.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки

Описание

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

Затронутые продукты
Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-2.7.17-7.32.2
Image SLES15-Azure-BYOS:python-base-2.7.17-7.32.1
Image SLES15-Azure-BYOS:python-xml-2.7.17-7.32.1
Ссылки
Уязвимость SUSE-SU-2020:0234-1