SUSE-SU-2020:0510-1

Опубликовано: 27 фев. 2020

Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

Security issues fixed:

CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825).
CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).

Список пакетов

Image SLES15-Azure-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-EC2-HVM-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-GCE-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-OCI-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-Azure-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-EC2-HVM-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-GCE-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SAP-OCI-BYOS

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP1-SAPCAL-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP1-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP1-SAPCAL-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-SAP-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP2-SAP-BYOS-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-SAP-BYOS-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP2-SAP-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-SAP-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.35.1

python-base-2.7.17-7.35.1

Image SLES15-SP3-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-SAP-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-SAPCAL-Azure

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Image SLES15-SP3-SAPCAL-GCE

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

SUSE Linux Enterprise Module for Basesystem 15 SP1

libpython2_7-1_0-2.7.17-7.35.1

python-2.7.17-7.35.1

python-base-2.7.17-7.35.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

python-tk-2.7.17-7.35.1

SUSE Linux Enterprise Module for Python 2 15 SP1

python-curses-2.7.17-7.35.1

python-devel-2.7.17-7.35.1

python-gdbm-2.7.17-7.35.1

python-xml-2.7.17-7.35.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20200510-1/
Link for SUSE-SU-2020:0510-1
https://lists.suse.com/pipermail/sle-security-updates/2020-February/006545.html
E-Mail link for SUSE-SU-2020:0510-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1162224
SUSE Bug 1162224
https://bugzilla.suse.com/1162367
SUSE Bug 1162367
https://bugzilla.suse.com/1162825
SUSE Bug 1162825
https://www.suse.com/security/cve/CVE-2019-9674/
SUSE CVE CVE-2019-9674 page
https://www.suse.com/security/cve/CVE-2020-8492/
SUSE CVE CVE-2020-8492 page

Описание

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

Затронутые продукты

Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.35.1

Image SLES15-Azure-BYOS:python-2.7.17-7.35.1

Image SLES15-Azure-BYOS:python-base-2.7.17-7.35.1

Image SLES15-Azure-BYOS:python-xml-2.7.17-7.35.1

Ссылки

https://www.suse.com/security/cve/CVE-2019-9674.html
CVE-2019-9674
https://bugzilla.suse.com/1162825
SUSE Bug 1162825

Описание

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

Затронутые продукты

Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.35.1

Image SLES15-Azure-BYOS:python-2.7.17-7.35.1

Image SLES15-Azure-BYOS:python-base-2.7.17-7.35.1

Image SLES15-Azure-BYOS:python-xml-2.7.17-7.35.1

Ссылки

https://www.suse.com/security/cve/CVE-2020-8492.html
CVE-2020-8492
https://bugzilla.suse.com/1162367
SUSE Bug 1162367

SUSE-SU-2020:0510-1

Описание

Список пакетов

Image SLES15-Azure-BYOS

Image SLES15-EC2-HVM-BYOS

Image SLES15-GCE-BYOS

Image SLES15-OCI-BYOS

Image SLES15-SAP-Azure

Image SLES15-SAP-Azure-BYOS

Image SLES15-SAP-Azure-LI-BYOS-Production

Image SLES15-SAP-Azure-VLI-BYOS-Production

Image SLES15-SAP-EC2-HVM

Image SLES15-SAP-EC2-HVM-BYOS

Image SLES15-SAP-GCE

Image SLES15-SAP-GCE-BYOS

Image SLES15-SAP-OCI-BYOS

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAP-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP1

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

SUSE Linux Enterprise Module for Python 2 15 SP1

Ссылки

Уязвимость: CVE-2019-9674

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2020-8492

Описание

Затронутые продукты

Ссылки