Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 433
Alerts This Week
Warning Icon 1 433

SUSE: 2019:2802-1 Moderate: Python3 Parser Issue And XSS Fix

suse
Calendar Grey October 29, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for python3 __________________________________________________
An update that solves two vulnerabilities and has three fixes is now available

Summary

This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). Non-security issues fixed: - Fixed regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt() with salt=NULL. (bsc#1151490) - Improved locale handling by implementing PEP 538. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2802=1

Topics%20covered

Topics Covered

security advisory moderate XSS SUSE parser issue python3

References

#1149121 #1149792 #1149955 #1151490 #1153238

Cross- CVE-2019-16056 CVE-2019-16935

Affected Products:

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15

SUSE Linux Enterprise Module for Development Tools 15-SP1

SUSE Linux Enterprise Module for Development Tools 15

SUSE Linux Enterprise Module for Basesystem 15-SP1

SUSE Linux Enterprise Module for Basesystem 15

https://www.suse.com/security/cve/CVE-2019-16056.html

https://www.suse.com/security/cve/CVE-2019-16935.html

https://bugzilla.suse.com/1149121

https://bugzilla.suse.com/1149792

https://bugzilla.suse.com/1149955

https://bugzilla.suse.com/1151490

https://bugzilla.suse.com/1153238

Announcement ID: SUSE-SU-2019:2802-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate XSS SUSE parser issue python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.