[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2020:0854-1 -- SLES python3

ID: oval:org.secpod.oval:def:89000307Date: (C)2021-02-19   (M)2023-12-20
Class: PATCHFamily: unix




This update for python3 fixes the following issue: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen. Now an InvalidURL exception is raised . - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs . - CVE-2020-8492: Fixed a regular expression in urllib that was prone to denial of service via HTTP . - Fixed an issue with version missmatch . - Rename idle icons to idle3 in order to not conflict with python2 variant of the package

Platform:
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP4
Product:
python3
Reference:
SUSE-SU-2020:0854-1
CVE-2019-18348
CVE-2019-9674
CVE-2020-8492
CVE    3
CVE-2019-9674
CVE-2020-8492
CVE-2019-18348
CPE    6
cpe:/o:suse:suse_linux_enterprise_server:12:sp3
cpe:/o:suse:suse_linux_enterprise_server:12:sp4
cpe:/o:suse:suse_linux_enterprise_server:12:sp2
cpe:/a:python:python:3
...

© SecPod Technologies