Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:0959-1

Опубликовано: 08 апр. 2020
Источник: suse-cvrf

Описание

Security update for python-PyYAML

This update for python-PyYAML fixes the following issues:

  • CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).

Список пакетов

Container caasp/v4/k8s-sidecar:0.1.75
python3-PyYAML-5.1.2-6.6.1
Container ses/6/cephcsi/cephcsi:latest
python3-PyYAML-5.1.2-6.6.1
Container ses/6/rook/ceph:latest
python3-PyYAML-5.1.2-6.6.1
Container ses/7/ceph/ceph:latest
python3-PyYAML-5.1.2-6.6.1
Container ses/7/cephcsi/cephcsi:latest
python3-PyYAML-5.1.2-6.6.1
Container ses/7/prometheus-webhook-snmp:latest
python3-PyYAML-5.1.2-6.6.1
Container ses/7/rook/ceph:latest
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Azure-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Azure-HPC-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-CHOST-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-CHOST-BYOS-EC2
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-EC2-HPC-HVM-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-EC2-HVM-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-GCE-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server
python2-PyYAML-5.1.2-6.6.1
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server
python2-PyYAML-5.1.2-6.6.1
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server
python2-PyYAML-5.1.2-6.6.1
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-OCI-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-Azure-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-EC2-HVM-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-GCE
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-GCE-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAP-OCI-BYOS
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAPCAL-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP1-SAPCAL-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Azure-Basic
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Azure-Standard
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-BYOS-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-BYOS-GCE
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-CAP-Deployment-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-CHOST-BYOS-Aliyun
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-CHOST-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-CHOST-BYOS-EC2
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-EC2-ECS-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-HPC-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-HPC-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-HPC-BYOS-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure
python2-PyYAML-5.1.2-6.6.1
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM
python2-PyYAML-5.1.2-6.6.1
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE
python2-PyYAML-5.1.2-6.6.1
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-BYOS-Azure
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-BYOS-GCE
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-EC2-HVM
python3-PyYAML-5.1.2-6.6.1
Image SLES15-SP2-SAP-GCE
python3-PyYAML-5.1.2-6.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP1
python3-PyYAML-5.1.2-6.6.1
SUSE Linux Enterprise Module for Python 2 15 SP1
python2-PyYAML-5.1.2-6.6.1

Ссылки

Описание

A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.

Затронутые продукты
Container caasp/v4/k8s-sidecar:0.1.75:python3-PyYAML-5.1.2-6.6.1
Container ses/6/cephcsi/cephcsi:latest:python3-PyYAML-5.1.2-6.6.1
Container ses/6/rook/ceph:latest:python3-PyYAML-5.1.2-6.6.1
Container ses/7/ceph/ceph:latest:python3-PyYAML-5.1.2-6.6.1
Ссылки
Уязвимость SUSE-SU-2020:0959-1