SUSE-SU-2022:3553-1

Опубликовано: 10 окт. 2022

Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

Список пакетов

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-Basic-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-HPC-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-HPC-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-SAP-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-SAP-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-Azure-Standard-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-EC2-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-EC2-ECS-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-EC2-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-EC2-SAP-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-EC2-SAP-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-GCE-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-GCE-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-GCE-SAP-BYOS

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-GCE-SAP-On-Demand

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

libpython2_7-1_0-2.7.18-33.14.1

python-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-xml-2.7.18-33.14.1

SUSE Linux Enterprise Server 12 SP4-LTSS

libpython2_7-1_0-2.7.18-33.14.1

libpython2_7-1_0-32bit-2.7.18-33.14.1

python-2.7.18-33.14.2

python-32bit-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-base-32bit-2.7.18-33.14.1

python-curses-2.7.18-33.14.2

python-demo-2.7.18-33.14.2

python-devel-2.7.18-33.14.1

python-doc-2.7.18-33.14.2

python-doc-pdf-2.7.18-33.14.2

python-gdbm-2.7.18-33.14.2

python-idle-2.7.18-33.14.2

python-tk-2.7.18-33.14.2

python-xml-2.7.18-33.14.1

SUSE Linux Enterprise Server 12 SP5

libpython2_7-1_0-2.7.18-33.14.1

libpython2_7-1_0-32bit-2.7.18-33.14.1

python-2.7.18-33.14.2

python-32bit-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-base-32bit-2.7.18-33.14.1

python-curses-2.7.18-33.14.2

python-demo-2.7.18-33.14.2

python-devel-2.7.18-33.14.1

python-doc-2.7.18-33.14.2

python-doc-pdf-2.7.18-33.14.2

python-gdbm-2.7.18-33.14.2

python-idle-2.7.18-33.14.2

python-tk-2.7.18-33.14.2

python-xml-2.7.18-33.14.1

SUSE Linux Enterprise Server for SAP Applications 12 SP4

libpython2_7-1_0-2.7.18-33.14.1

libpython2_7-1_0-32bit-2.7.18-33.14.1

python-2.7.18-33.14.2

python-32bit-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-base-32bit-2.7.18-33.14.1

python-curses-2.7.18-33.14.2

python-demo-2.7.18-33.14.2

python-devel-2.7.18-33.14.1

python-doc-2.7.18-33.14.2

python-doc-pdf-2.7.18-33.14.2

python-gdbm-2.7.18-33.14.2

python-idle-2.7.18-33.14.2

python-tk-2.7.18-33.14.2

python-xml-2.7.18-33.14.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

libpython2_7-1_0-2.7.18-33.14.1

libpython2_7-1_0-32bit-2.7.18-33.14.1

python-2.7.18-33.14.2

python-32bit-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-base-32bit-2.7.18-33.14.1

python-curses-2.7.18-33.14.2

python-demo-2.7.18-33.14.2

python-devel-2.7.18-33.14.1

python-doc-2.7.18-33.14.2

python-doc-pdf-2.7.18-33.14.2

python-gdbm-2.7.18-33.14.2

python-idle-2.7.18-33.14.2

python-tk-2.7.18-33.14.2

python-xml-2.7.18-33.14.1

SUSE Linux Enterprise Workstation Extension 12 SP5

python-devel-2.7.18-33.14.1

SUSE OpenStack Cloud 9

libpython2_7-1_0-2.7.18-33.14.1

libpython2_7-1_0-32bit-2.7.18-33.14.1

python-2.7.18-33.14.2

python-32bit-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-base-32bit-2.7.18-33.14.1

python-curses-2.7.18-33.14.2

python-demo-2.7.18-33.14.2

python-devel-2.7.18-33.14.1

python-doc-2.7.18-33.14.2

python-doc-pdf-2.7.18-33.14.2

python-gdbm-2.7.18-33.14.2

python-idle-2.7.18-33.14.2

python-tk-2.7.18-33.14.2

python-xml-2.7.18-33.14.1

SUSE OpenStack Cloud Crowbar 9

libpython2_7-1_0-2.7.18-33.14.1

libpython2_7-1_0-32bit-2.7.18-33.14.1

python-2.7.18-33.14.2

python-32bit-2.7.18-33.14.2

python-base-2.7.18-33.14.1

python-base-32bit-2.7.18-33.14.1

python-curses-2.7.18-33.14.2

python-demo-2.7.18-33.14.2

python-devel-2.7.18-33.14.1

python-doc-2.7.18-33.14.2

python-doc-pdf-2.7.18-33.14.2

python-gdbm-2.7.18-33.14.2

python-idle-2.7.18-33.14.2

python-tk-2.7.18-33.14.2

python-xml-2.7.18-33.14.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20223553-1/
Link for SUSE-SU-2022:3553-1
https://lists.suse.com/pipermail/sle-security-updates/2022-October/012524.html
E-Mail link for SUSE-SU-2022:3553-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1202624
SUSE Bug 1202624
https://www.suse.com/security/cve/CVE-2021-28861/
SUSE CVE CVE-2021-28861 page

Описание

** DISPUTED ** Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

Затронутые продукты

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libpython2_7-1_0-2.7.18-33.14.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python-2.7.18-33.14.2

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python-base-2.7.18-33.14.1

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python-xml-2.7.18-33.14.1

Ссылки

https://www.suse.com/security/cve/CVE-2021-28861.html
CVE-2021-28861
https://bugzilla.suse.com/1202624
SUSE Bug 1202624
https://bugzilla.suse.com/1204077
SUSE Bug 1204077
https://bugzilla.suse.com/1204801
SUSE Bug 1204801
https://bugzilla.suse.com/1204802
SUSE Bug 1204802
https://bugzilla.suse.com/1205068
SUSE Bug 1205068
https://bugzilla.suse.com/1205075
SUSE Bug 1205075
https://bugzilla.suse.com/1205467
SUSE Bug 1205467

SUSE-SU-2022:3553-1

Описание

Список пакетов

Image SLES12-SP4-SAP-Azure-LI-BYOS-Production

Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP4-LTSS

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP4

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Workstation Extension 12 SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

Ссылки

Уязвимость: CVE-2021-28861

Описание

Затронутые продукты

Ссылки