SUSE-SU-2020:2276-1

Опубликовано: 19 авг. 2020

Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).

Список пакетов

Image SLES15-Azure-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-EC2-HVM-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-GCE-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-OCI-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-Azure-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-EC2-HVM-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-GCE-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SAP-OCI-BYOS

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP1-SAPCAL-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP1-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP1-SAPCAL-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-SAP-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP2-SAP-BYOS-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-SAP-BYOS-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP2-SAP-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-SAP-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.41.1

python-base-2.7.17-7.41.1

Image SLES15-SP3-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-SAP-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-SAPCAL-Azure

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Image SLES15-SP3-SAPCAL-GCE

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

SUSE Linux Enterprise Module for Basesystem 15 SP1

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

SUSE Linux Enterprise Module for Basesystem 15 SP2

libpython2_7-1_0-2.7.17-7.41.1

python-2.7.17-7.41.1

python-base-2.7.17-7.41.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

python-tk-2.7.17-7.41.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP2

python-tk-2.7.17-7.41.1

SUSE Linux Enterprise Module for Python 2 15 SP1

python-curses-2.7.17-7.41.1

python-devel-2.7.17-7.41.1

python-gdbm-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

SUSE Linux Enterprise Module for Python 2 15 SP2

python-curses-2.7.17-7.41.1

python-devel-2.7.17-7.41.1

python-gdbm-2.7.17-7.41.1

python-xml-2.7.17-7.41.1

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20202276-1/
Link for SUSE-SU-2020:2276-1
https://lists.suse.com/pipermail/sle-security-updates/2020-August/007284.html
E-Mail link for SUSE-SU-2020:2276-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1174091
SUSE Bug 1174091
https://www.suse.com/security/cve/CVE-2019-20907/
SUSE CVE CVE-2019-20907 page

Описание

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.

Затронутые продукты

Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.41.1

Image SLES15-Azure-BYOS:python-2.7.17-7.41.1

Image SLES15-Azure-BYOS:python-base-2.7.17-7.41.1

Image SLES15-Azure-BYOS:python-xml-2.7.17-7.41.1

Ссылки

https://www.suse.com/security/cve/CVE-2019-20907.html
CVE-2019-20907
https://bugzilla.suse.com/1174091
SUSE Bug 1174091

SUSE-SU-2020:2276-1

Описание

Список пакетов

Image SLES15-Azure-BYOS

Image SLES15-EC2-HVM-BYOS

Image SLES15-GCE-BYOS

Image SLES15-OCI-BYOS

Image SLES15-SAP-Azure

Image SLES15-SAP-Azure-BYOS

Image SLES15-SAP-Azure-LI-BYOS-Production

Image SLES15-SAP-Azure-VLI-BYOS-Production

Image SLES15-SAP-EC2-HVM

Image SLES15-SAP-EC2-HVM-BYOS

Image SLES15-SAP-GCE

Image SLES15-SAP-GCE-BYOS

Image SLES15-SAP-OCI-BYOS

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAP-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP1

SUSE Linux Enterprise Module for Basesystem 15 SP2

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

SUSE Linux Enterprise Module for Desktop Applications 15 SP2

SUSE Linux Enterprise Module for Python 2 15 SP1

SUSE Linux Enterprise Module for Python 2 15 SP2

Ссылки

Уязвимость: CVE-2019-20907

Описание

Затронутые продукты

Ссылки