openSUSE-SU-2020:0086-1
Security update for python3
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for python3 to version 3.6.10 fixes the following issues: - CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507). - CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955). - CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429). This update was imported from the SUSE:SLE-15:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.1 | libpython3_6m1_0, libpython3_6m1_0-32bit, python3 y 10 más | 3.6.10-lp151.6.7.1 |
Mostrar las 13 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.1 | libpython3_6m1_0 | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | libpython3_6m1_0-32bit | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3 | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-32bit | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-base | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-base-32bit | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-curses | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-dbm | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-devel | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-idle | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-testsuite | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-tk | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-tools | 3.6.10-lp151.6.7.1 |
Referencias
- https://bugzilla.suse.com/1027282
- https://bugzilla.suse.com/1029377
- https://bugzilla.suse.com/1029902
- https://bugzilla.suse.com/1040164
- https://bugzilla.suse.com/1042670
- https://bugzilla.suse.com/1070853
- https://bugzilla.suse.com/1079761
- https://bugzilla.suse.com/1081750
Las 84 referencias
- https://bugzilla.suse.com/1083507
- https://bugzilla.suse.com/1086001
- https://bugzilla.suse.com/1088004
- https://bugzilla.suse.com/1088009
- https://bugzilla.suse.com/1088573
- https://bugzilla.suse.com/1094814
- https://bugzilla.suse.com/1107030
- https://bugzilla.suse.com/1109663
- https://bugzilla.suse.com/1109847
- https://bugzilla.suse.com/1120644
- https://bugzilla.suse.com/1122191
- https://bugzilla.suse.com/1129346
- https://bugzilla.suse.com/1130840
- https://bugzilla.suse.com/1133452
- https://bugzilla.suse.com/1137942
- https://bugzilla.suse.com/1138459
- https://bugzilla.suse.com/1141853
- https://bugzilla.suse.com/1149121
- https://bugzilla.suse.com/1149792
- https://bugzilla.suse.com/1149955
- https://bugzilla.suse.com/1151490
- https://bugzilla.suse.com/1153238
- https://bugzilla.suse.com/1159035
- https://bugzilla.suse.com/1159622
- https://bugzilla.suse.com/637176
- https://bugzilla.suse.com/658604
- https://bugzilla.suse.com/673071
- https://bugzilla.suse.com/709442
- https://bugzilla.suse.com/743787
- https://bugzilla.suse.com/747125
- https://bugzilla.suse.com/751718
- https://bugzilla.suse.com/754447
- https://bugzilla.suse.com/754677
- https://bugzilla.suse.com/787526
- https://bugzilla.suse.com/809831
- https://bugzilla.suse.com/831629
- https://bugzilla.suse.com/834601
- https://bugzilla.suse.com/871152
- https://bugzilla.suse.com/885662
- https://bugzilla.suse.com/885882
- https://bugzilla.suse.com/917607
- https://bugzilla.suse.com/942751
- https://bugzilla.suse.com/951166
- https://bugzilla.suse.com/983582
- https://bugzilla.suse.com/984751
- https://bugzilla.suse.com/985177
- https://bugzilla.suse.com/985348
- https://bugzilla.suse.com/989523
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SRKGGFVSV7DDWCMAOSO6E3F66U2CF5XR/
- https://www.suse.com/security/cve/CVE-2011-3389/
- https://www.suse.com/security/cve/CVE-2011-4944/
- https://www.suse.com/security/cve/CVE-2012-0845/
- https://www.suse.com/security/cve/CVE-2012-1150/
- https://www.suse.com/security/cve/CVE-2013-1752/
- https://www.suse.com/security/cve/CVE-2013-4238/
- https://www.suse.com/security/cve/CVE-2014-2667/
- https://www.suse.com/security/cve/CVE-2014-4650/
- https://www.suse.com/security/cve/CVE-2016-0772/
- https://www.suse.com/security/cve/CVE-2016-1000110/
- https://www.suse.com/security/cve/CVE-2016-5636/
- https://www.suse.com/security/cve/CVE-2016-5699/
- https://www.suse.com/security/cve/CVE-2017-18207/
- https://www.suse.com/security/cve/CVE-2018-1000802/
- https://www.suse.com/security/cve/CVE-2018-1060/
- https://www.suse.com/security/cve/CVE-2018-1061/
- https://www.suse.com/security/cve/CVE-2018-14647/
- https://www.suse.com/security/cve/CVE-2018-20406/
- https://www.suse.com/security/cve/CVE-2018-20852/
- https://www.suse.com/security/cve/CVE-2019-10160/
- https://www.suse.com/security/cve/CVE-2019-15903/
- https://www.suse.com/security/cve/CVE-2019-16056/
- https://www.suse.com/security/cve/CVE-2019-16935/
- https://www.suse.com/security/cve/CVE-2019-5010/
- https://www.suse.com/security/cve/CVE-2019-9636/
- https://www.suse.com/security/cve/CVE-2019-9947/
- https://www.suse.com/support/security/rating/