critical
SUSE-SU-2020:0497-1
Security update for python3
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for python3 fixes the following issues: Update to 3.4.10 (jsc#SLE-9427, bsc#1159208) from 3.4.6: Security issues fixed: - Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063 - CVE-2017-1000158: Fix an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (bsc#1068664).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | libpython3_4m1_0, python3, python3-base | 3.4.10-25.39.2 and 1 more |
| SUSE Linux Enterprise 12.1 | libpython3_4m1_0, python3, python3-base and 2 more | 3.4.10-25.39.2 and 1 more |
| SUSE Linux Enterprise 12.2 | libpython3_4m1_0, python3, python3-base and 2 more | 3.4.10-25.39.2 and 1 more |
| SUSE Linux Enterprise 12.3 | libpython3_4m1_0, python3, python3-base and 2 more | 3.4.10-25.39.2 and 1 more |
| SUSE Linux Enterprise 12.4 | libpython3_4m1_0, python3, python3-base and 3 more | 3.4.10-25.39.2 and 1 more |
| SUSE Linux Enterprise 12.5 | libpython3_4m1_0, libpython3_4m1_0-32bit, python3 and 5 more | 3.4.10-25.39.2 and 1 more |
Show all 32 entries from 6 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12 | libpython3_4m1_0 | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.1 | libpython3_4m1_0 | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.1 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.1 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.1 | python3-curses | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.1 | python3-devel | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.2 | libpython3_4m1_0 | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.2 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.2 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.2 | python3-curses | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.2 | python3-devel | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.3 | libpython3_4m1_0 | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.3 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.3 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.3 | python3-curses | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.3 | python3-devel | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.4 | libpython3_4m1_0 | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.4 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.4 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.4 | python3-curses | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.4 | python3-dbm | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.4 | python3-devel | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.5 | libpython3_4m1_0 | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.5 | libpython3_4m1_0-32bit | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.5 | python3 | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.5 | python3-base | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.5 | python3-curses | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.5 | python3-dbm | 3.4.10-25.39.3 |
| SUSE Linux Enterprise 12.5 | python3-devel | 3.4.10-25.39.2 |
| SUSE Linux Enterprise 12.5 | python3-tk | 3.4.10-25.39.3 |
References
- https://bugzilla.suse.com/1068664
- https://bugzilla.suse.com/1159208
- https://bugzilla.suse.com/1159623
- https://lists.suse.com/pipermail/sle-security-updates/2020-February/006536.html
- https://www.suse.com/security/cve/CVE-2012-0876/
- https://www.suse.com/security/cve/CVE-2016-0718/
- https://www.suse.com/security/cve/CVE-2016-4472/
- https://www.suse.com/security/cve/CVE-2016-9063/