SUSE-SU-2019:2743-1

Details

Description of the patch:

This update for python fixes the following issues:

Security issues fixed:

CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840)
CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)
CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).

Affected Packages

libpython2_7-1_0

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.7.14-7.24.1

python

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.7.14-7.24.1

python-base

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Basesystem 15 SP1

Fixed in:

2.7.14-7.24.1

python-curses

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Python 2 15 SP1

Fixed in:

2.7.14-7.24.1

python-devel

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Python 2 15 SP1

Fixed in:

2.7.14-7.24.1

python-gdbm

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Python 2 15 SP1

Fixed in:

2.7.14-7.24.1

python-xml

SUSE Linux Enterprise Module for Basesystem 15SUSE Linux Enterprise Module for Python 2 15 SP1

Fixed in:

2.7.14-7.24.1

python-tk

SUSE Linux Enterprise Module for Desktop Applications 15SUSE Linux Enterprise Module for Desktop Applications 15 SP1

Fixed in:

2.7.14-7.24.1

References

ADVISORY

https://bugzilla.suse.com/1130840

ADVISORY

https://bugzilla.suse.com/1149955

ADVISORY

https://bugzilla.suse.com/1153238

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-October/006041.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-16056/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-16935/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-9947/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2019/suse-su-20192743-1/