SUSE-SU-2020:3115-1

Опубликовано: 02 нояб. 2020

Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers.

Список пакетов

Image SLES15-Azure-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-EC2-HVM-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-GCE-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-OCI-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-Azure-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-EC2-HVM-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-GCE-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SAP-OCI-BYOS

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP1-SAPCAL-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP1-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP1-SAPCAL-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-SAP-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP2-SAP-BYOS-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-SAP-BYOS-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP2-SAP-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-SAP-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.17-7.44.2

python-base-2.7.17-7.44.2

Image SLES15-SP3-SAP-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-SAP-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-SAPCAL-Azure

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-SAPCAL-EC2-HVM

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

Image SLES15-SP3-SAPCAL-GCE

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

python-xml-2.7.17-7.44.2

SUSE Linux Enterprise Module for Basesystem 15 SP1

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

SUSE Linux Enterprise Module for Basesystem 15 SP2

libpython2_7-1_0-2.7.17-7.44.2

python-2.7.17-7.44.4

python-base-2.7.17-7.44.2

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

python-tk-2.7.17-7.44.4

SUSE Linux Enterprise Module for Desktop Applications 15 SP2

python-tk-2.7.17-7.44.4

SUSE Linux Enterprise Module for Python 2 15 SP1

python-curses-2.7.17-7.44.4

python-devel-2.7.17-7.44.2

python-gdbm-2.7.17-7.44.4

python-xml-2.7.17-7.44.2

SUSE Linux Enterprise Module for Python 2 15 SP2

python-curses-2.7.17-7.44.4

python-devel-2.7.17-7.44.2

python-gdbm-2.7.17-7.44.4

python-xml-2.7.17-7.44.2

Ссылки

https://www.suse.com/support/update/announcement/2020/suse-su-20203115-1/
Link for SUSE-SU-2020:3115-1
https://lists.suse.com/pipermail/sle-security-updates/2020-November/007679.html
E-Mail link for SUSE-SU-2020:3115-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1177211
SUSE Bug 1177211
https://www.suse.com/security/cve/CVE-2020-26116/
SUSE CVE CVE-2020-26116 page

Описание

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.

Затронутые продукты

Image SLES15-Azure-BYOS:libpython2_7-1_0-2.7.17-7.44.2

Image SLES15-Azure-BYOS:python-2.7.17-7.44.4

Image SLES15-Azure-BYOS:python-base-2.7.17-7.44.2

Image SLES15-Azure-BYOS:python-xml-2.7.17-7.44.2

Ссылки

https://www.suse.com/security/cve/CVE-2020-26116.html
CVE-2020-26116
https://bugzilla.suse.com/1177120
SUSE Bug 1177120
https://bugzilla.suse.com/1177211
SUSE Bug 1177211
https://bugzilla.suse.com/1192361
SUSE Bug 1192361

SUSE-SU-2020:3115-1

Описание

Список пакетов

Image SLES15-Azure-BYOS

Image SLES15-EC2-HVM-BYOS

Image SLES15-GCE-BYOS

Image SLES15-OCI-BYOS

Image SLES15-SAP-Azure

Image SLES15-SAP-Azure-BYOS

Image SLES15-SAP-Azure-LI-BYOS-Production

Image SLES15-SAP-Azure-VLI-BYOS-Production

Image SLES15-SAP-EC2-HVM

Image SLES15-SAP-EC2-HVM-BYOS

Image SLES15-SAP-GCE

Image SLES15-SAP-GCE-BYOS

Image SLES15-SAP-OCI-BYOS

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy

Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

Image SLES15-SP3-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure

Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM

Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE

Image SLES15-SP3-SAP-Azure

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP3-SAP-EC2-HVM

Image SLES15-SP3-SAP-GCE

Image SLES15-SP3-SAPCAL-Azure

Image SLES15-SP3-SAPCAL-EC2-HVM

Image SLES15-SP3-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP1

SUSE Linux Enterprise Module for Basesystem 15 SP2

SUSE Linux Enterprise Module for Desktop Applications 15 SP1

SUSE Linux Enterprise Module for Desktop Applications 15 SP2

SUSE Linux Enterprise Module for Python 2 15 SP1

SUSE Linux Enterprise Module for Python 2 15 SP2

Ссылки

Уязвимость: CVE-2020-26116

Описание

Затронутые продукты

Ссылки