SUSE-SU-2019:1439-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2019:1439-1

HIGH7.5

Security update for python

Published Jun 6, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for python fixes the following issues:

Security issues fixed:

CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847).
CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346).

Affected Packages(16 packages)

libpython2_7-1_0

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.7.13-28.26.1

libpython2_7-1_0-32bit

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.7.13-28.26.1

python

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.7.13-28.26.1

python-32bit

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3

Fixed in:

2.7.13-28.26.1

python-base

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.7.13-28.26.1

python-base-32bit

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3

Fixed in:

2.7.13-28.26.1

python-curses

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCL

Fixed in:

2.7.13-28.26.1

python-demo

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3

Fixed in:

2.7.13-28.26.1

python-devel

SUSE Enterprise Storage 4SUSE Linux Enterprise Desktop 12 SP3SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-LTSS

Fixed in:

2.7.13-28.26.1

python-doc

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3

Fixed in:

2.7.13-28.26.1

References

ADVISORY

https://bugzilla.suse.com/1129346

ADVISORY

https://bugzilla.suse.com/1130847

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005534.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-9636/

ADVISORY