SUSE-SU-2021:1557-1

Опубликовано: 11 мая 2021

Источник: suse-cvrf

Описание

Security update for python3

This update for python3 fixes the following issues:

CVE-2021-3426: Fixed an information disclosure via pydoc (bsc#1183374)

Список пакетов

Container caasp/v4/389-ds:1.4.2

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Container caasp/v4/hyperkube:v1.17.17

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Container caasp/v4/k8s-sidecar:0.1.75

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Container ses/6/cephcsi/cephcsi:latest

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Container ses/6/rook/ceph:latest

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Container ses/7/cephcsi/cephcsi:latest

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Container ses/7/prometheus-webhook-snmp:latest

libpython3_6m1_0-3.6.13-3.81.1

python3-base-3.6.13-3.81.1

Container ses/7/rook/ceph:latest

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Container suse/sles/15.2/virt-handler:0.38.1

libpython3_6m1_0-3.6.13-3.81.1

python3-base-3.6.13-3.81.1

Container suse/sles/15.2/virt-launcher:0.38.1

libpython3_6m1_0-3.6.13-3.81.1

python3-base-3.6.13-3.81.1

Image SLES15-Azure-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-EC2-CHOST-HVM-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-EC2-HVM-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-GCE-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-Azure-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-Azure-LI-BYOS-Production

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-Azure-VLI-BYOS-Production

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-EC2-HVM-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SAP-GCE-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-Azure-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-Azure-HPC-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-CHOST-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP1-CHOST-BYOS-EC2

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP1-CHOST-BYOS-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP1-EC2-HPC-HVM-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-EC2-HVM-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-GCE-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-Azure-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-EC2-HVM-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAP-GCE-BYOS

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAPCAL-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAPCAL-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP1-SAPCAL-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Azure-Basic

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Azure-Standard

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-BYOS-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-BYOS-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-CHOST-BYOS-Aliyun

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP2-CHOST-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP2-CHOST-BYOS-EC2

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP2-CHOST-BYOS-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP2-EC2-ECS-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

Image SLES15-SP2-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-HPC-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-HPC-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-HPC-BYOS-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-BYOS-Azure

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-BYOS-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-BYOS-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-EC2-HVM

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

Image SLES15-SP2-SAP-GCE

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

SUSE Linux Enterprise Micro 5.0

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

SUSE Linux Enterprise Module for Basesystem 15 SP2

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

python3-dbm-3.6.13-3.81.2

python3-devel-3.6.13-3.81.1

python3-idle-3.6.13-3.81.2

python3-tk-3.6.13-3.81.2

SUSE Linux Enterprise Module for Basesystem 15 SP3

libpython3_6m1_0-3.6.13-3.81.1

python3-3.6.13-3.81.2

python3-base-3.6.13-3.81.1

python3-curses-3.6.13-3.81.2

python3-dbm-3.6.13-3.81.2

python3-devel-3.6.13-3.81.1

python3-idle-3.6.13-3.81.2

python3-tk-3.6.13-3.81.2

SUSE Linux Enterprise Module for Development Tools 15 SP2

python3-tools-3.6.13-3.81.1

SUSE Linux Enterprise Module for Development Tools 15 SP3

python3-tools-3.6.13-3.81.1

Ссылки

https://www.suse.com/support/update/announcement/2021/suse-su-20211557-1/
Link for SUSE-SU-2021:1557-1
https://lists.suse.com/pipermail/sle-security-updates/2021-May/008753.html
E-Mail link for SUSE-SU-2021:1557-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1183374
SUSE Bug 1183374
https://www.suse.com/security/cve/CVE-2021-3426/
SUSE CVE CVE-2021-3426 page

Описание

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

Затронутые продукты

Container caasp/v4/389-ds:1.4.2:libpython3_6m1_0-3.6.13-3.81.1

Container caasp/v4/389-ds:1.4.2:python3-3.6.13-3.81.2

Container caasp/v4/389-ds:1.4.2:python3-base-3.6.13-3.81.1

Container caasp/v4/hyperkube:v1.17.17:libpython3_6m1_0-3.6.13-3.81.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-3426.html
CVE-2021-3426
https://bugzilla.suse.com/1183374
SUSE Bug 1183374

SUSE-SU-2021:1557-1

Описание

Список пакетов

Container caasp/v4/389-ds:1.4.2

Container caasp/v4/hyperkube:v1.17.17

Container caasp/v4/k8s-sidecar:0.1.75

Container ses/6/cephcsi/cephcsi:latest

Container ses/6/rook/ceph:latest

Container ses/7/cephcsi/cephcsi:latest

Container ses/7/prometheus-webhook-snmp:latest

Container ses/7/rook/ceph:latest

Container suse/sles/15.2/virt-handler:0.38.1

Container suse/sles/15.2/virt-launcher:0.38.1

Image SLES15-Azure-BYOS

Image SLES15-EC2-CHOST-HVM-BYOS

Image SLES15-EC2-HVM-BYOS

Image SLES15-GCE-BYOS

Image SLES15-SAP-Azure

Image SLES15-SAP-Azure-BYOS

Image SLES15-SAP-Azure-LI-BYOS-Production

Image SLES15-SAP-Azure-VLI-BYOS-Production

Image SLES15-SAP-EC2-HVM

Image SLES15-SAP-EC2-HVM-BYOS

Image SLES15-SAP-GCE

Image SLES15-SAP-GCE-BYOS

Image SLES15-SP1-Azure-BYOS

Image SLES15-SP1-Azure-HPC-BYOS

Image SLES15-SP1-CHOST-BYOS-Azure

Image SLES15-SP1-CHOST-BYOS-EC2

Image SLES15-SP1-CHOST-BYOS-GCE

Image SLES15-SP1-EC2-HPC-HVM-BYOS

Image SLES15-SP1-EC2-HVM-BYOS

Image SLES15-SP1-GCE-BYOS

Image SLES15-SP1-SAP-Azure

Image SLES15-SP1-SAP-Azure-BYOS

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production

Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP1-SAP-EC2-HVM

Image SLES15-SP1-SAP-EC2-HVM-BYOS

Image SLES15-SP1-SAP-GCE

Image SLES15-SP1-SAP-GCE-BYOS

Image SLES15-SP1-SAPCAL-Azure

Image SLES15-SP1-SAPCAL-EC2-HVM

Image SLES15-SP1-SAPCAL-GCE

Image SLES15-SP2-Azure-Basic

Image SLES15-SP2-Azure-Standard

Image SLES15-SP2-BYOS-Azure

Image SLES15-SP2-BYOS-EC2-HVM

Image SLES15-SP2-BYOS-GCE

Image SLES15-SP2-CHOST-BYOS-Aliyun

Image SLES15-SP2-CHOST-BYOS-Azure

Image SLES15-SP2-CHOST-BYOS-EC2

Image SLES15-SP2-CHOST-BYOS-GCE

Image SLES15-SP2-EC2-ECS-HVM

Image SLES15-SP2-EC2-HVM

Image SLES15-SP2-GCE

Image SLES15-SP2-HPC-Azure

Image SLES15-SP2-HPC-BYOS-Azure

Image SLES15-SP2-HPC-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE

Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure

Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM

Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE

Image SLES15-SP2-SAP-Azure

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP2-SAP-BYOS-Azure

Image SLES15-SP2-SAP-BYOS-EC2-HVM

Image SLES15-SP2-SAP-BYOS-GCE

Image SLES15-SP2-SAP-EC2-HVM

Image SLES15-SP2-SAP-GCE

SUSE Linux Enterprise Micro 5.0

SUSE Linux Enterprise Module for Basesystem 15 SP2

SUSE Linux Enterprise Module for Basesystem 15 SP3

SUSE Linux Enterprise Module for Development Tools 15 SP2

SUSE Linux Enterprise Module for Development Tools 15 SP3

Ссылки

Уязвимость: CVE-2021-3426