Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

SUSE: 2020:15020-2 Critical: OpenSSL Vulnerabilities Detected And Addressed

suse
Calendar Grey April 15, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for python ___________________________________________________
An update that fixes two vulnerabilities is now available

Summary

This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11-SP4-LTSS: zypper in -t patch slessp4-python-14018=1 - SUSE Linux Enterprise Point of Sale 11-SP3: zypper in -t patch sleposp3-python-14018=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-python-14018=1

Topics%20covered

Topics Covered

security advisory threat mitigation information disclosure SUSE Linux important update Python issue file bypass

References

#1129346 #1130847

Cross- CVE-2019-9636 CVE-2019-9948

Affected Products:

SUSE Linux Enterprise Server 11-SP4-LTSS

SUSE Linux Enterprise Point of Sale 11-SP3

SUSE Linux Enterprise Debuginfo 11-SP4

SUSE Linux Enterprise Debuginfo 11-SP3

https://www.suse.com/security/cve/CVE-2019-9636.html

https://www.suse.com/security/cve/CVE-2019-9948.html

https://bugzilla.suse.com/1129346

https://bugzilla.suse.com/1130847

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:14018-1
Rating: important

Topics%20covered

Topics Covered

security advisory threat mitigation information disclosure SUSE Linux important update Python issue file bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.