Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2019:0243-2 Important: Python3 Denial Of Service Fix

suse
Calendar Grey April 27, 2019
Dist Suse Esm H88
A new version of python3 has been released addressing two vulnerabilities: denial of service and integer overflow on SUSE platforms.
An update that fixes two vulnerabilities is now available

Summary

This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191) - CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12-SP1: zypper in -t patch SUSE-SLE-SAP-12-SP1-2019-243=1 Package List: - SUSE Linux Enterprise Server for SAP 12-SP1 (x86_64): libpython3_4m1_0-3.4.6-25.21.1 libpython3_4m1_0-debuginfo-3.4.6-25.21.1 python3-3.4.6-25.21.1 python3-base-3.4.6-25.21.1 python3-base-debuginfo-3.4.6-25.21.1

Topics%20covered

Topics Covered

security advisory denial of service security update important integer overflow SUSE python3

References

#1120644 #1122191

Cross- CVE-2018-20406 CVE-2019-5010

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP1

https://www.suse.com/security/cve/CVE-2018-20406.html

https://www.suse.com/security/cve/CVE-2019-5010.html

https://bugzilla.suse.com/1120644

https://bugzilla.suse.com/1122191

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:0243-2
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service security update important integer overflow SUSE python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here