SUSE Security Update: Security update for python
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:0234-1
Rating:             important
References:         #1027282 #1041090 #1042670 #1068664 #1073269 
                    #1073748 #1078326 #1078485 #1079300 #1081750 
                    #1083507 #1084650 #1086001 #1088004 #1088009 
                    #1109847 #1111793 #1113755 #1122191 #1129346 
                    #1130840 #1130847 #1138459 #1141853 #1149792 
                    #1149955 #1153238 #1153830 #1159035 #214983 
                    #298378 #346490 #367853 #379534 #380942 #399190 
                    #406051 #425138 #426563 #430761 #432677 #436966 
                    #437293 #441088 #462375 #525295 #534721 #551715 
                    #572673 #577032 #581765 #603255 #617751 #637176 
                    #638233 #658604 #673071 #682554 #697251 #707667 
                    #718009 #747125 #747794 #751718 #754447 #766778 
                    #794139 #804978 #827982 #831442 #834601 #836739 
                    #856835 #856836 #857470 #863741 #885882 #898572 
                    #901715 #935856 #945401 #964182 #984751 #985177 
                    #985348 #989523 #997436 
Cross-References:   CVE-2007-2052 CVE-2008-1721 CVE-2008-2315
                    CVE-2008-2316 CVE-2008-3142 CVE-2008-3143
                    CVE-2008-3144 CVE-2011-1521 CVE-2011-3389
                    CVE-2011-4944 CVE-2012-0845 CVE-2012-1150
                    CVE-2013-1752 CVE-2013-1753 CVE-2013-4238
                    CVE-2014-1912 CVE-2014-4650 CVE-2014-7185
                    CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636
                    CVE-2016-5699 CVE-2017-1000158 CVE-2017-18207
                    CVE-2018-1000030 CVE-2018-1000802 CVE-2018-1060
                    CVE-2018-1061 CVE-2018-14647 CVE-2018-20852
                    CVE-2019-10160 CVE-2019-16056 CVE-2019-16935
                    CVE-2019-5010 CVE-2019-9636 CVE-2019-9947
                    CVE-2019-9948
Affected Products:
                    SUSE Linux Enterprise Module for Python2 15-SP1
                    SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1
                    SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP1
                    SUSE Linux Enterprise Module for Desktop Applications 15
                    SUSE Linux Enterprise Module for Basesystem 15-SP1
                    SUSE Linux Enterprise Module for Basesystem 15
______________________________________________________________________________

   An update that solves 37 vulnerabilities and has 50 fixes
   is now available.

Description:

   This update for python fixes the following issues:

   Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE
   versions (bsc#1159035).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Python2 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Python2-15-SP1-2020-234=1

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-234=1

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15:

      zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2020-234=1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-234=1

   - SUSE Linux Enterprise Module for Desktop Applications 15:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-2020-234=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-234=1

   - SUSE Linux Enterprise Module for Basesystem 15:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-2020-234=1



Package List:

   - SUSE Linux Enterprise Module for Python2 15-SP1 (aarch64 ppc64le s390x x86_64):

      python-base-debuginfo-2.7.17-7.32.1
      python-base-debugsource-2.7.17-7.32.1
      python-curses-2.7.17-7.32.2
      python-curses-debuginfo-2.7.17-7.32.2
      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2
      python-devel-2.7.17-7.32.1
      python-gdbm-2.7.17-7.32.2
      python-gdbm-debuginfo-2.7.17-7.32.2
      python-xml-2.7.17-7.32.1
      python-xml-debuginfo-2.7.17-7.32.1

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2
      python-demo-2.7.17-7.32.2
      python-idle-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (x86_64):

      libpython2_7-1_0-32bit-2.7.17-7.32.1
      libpython2_7-1_0-32bit-debuginfo-2.7.17-7.32.1
      python-32bit-2.7.17-7.32.2
      python-32bit-debuginfo-2.7.17-7.32.2
      python-base-32bit-2.7.17-7.32.1
      python-base-32bit-debuginfo-2.7.17-7.32.1
      python-base-debugsource-2.7.17-7.32.1

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1 (noarch):

      python-doc-2.7.17-7.32.2
      python-doc-pdf-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2
      python-demo-2.7.17-7.32.2
      python-idle-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 (noarch):

      python-doc-2.7.17-7.32.2
      python-doc-pdf-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2
      python-tk-2.7.17-7.32.2
      python-tk-debuginfo-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Desktop Applications 15 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2
      python-tk-2.7.17-7.32.2
      python-tk-debuginfo-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64):

      libpython2_7-1_0-2.7.17-7.32.1
      libpython2_7-1_0-debuginfo-2.7.17-7.32.1
      python-2.7.17-7.32.2
      python-base-2.7.17-7.32.1
      python-base-debuginfo-2.7.17-7.32.1
      python-base-debugsource-2.7.17-7.32.1
      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2

   - SUSE Linux Enterprise Module for Basesystem 15 (aarch64 ppc64le s390x x86_64):

      libpython2_7-1_0-2.7.17-7.32.1
      libpython2_7-1_0-debuginfo-2.7.17-7.32.1
      python-2.7.17-7.32.2
      python-base-2.7.17-7.32.1
      python-base-debuginfo-2.7.17-7.32.1
      python-base-debugsource-2.7.17-7.32.1
      python-curses-2.7.17-7.32.2
      python-curses-debuginfo-2.7.17-7.32.2
      python-debuginfo-2.7.17-7.32.2
      python-debugsource-2.7.17-7.32.2
      python-devel-2.7.17-7.32.1
      python-gdbm-2.7.17-7.32.2
      python-gdbm-debuginfo-2.7.17-7.32.2
      python-xml-2.7.17-7.32.1
      python-xml-debuginfo-2.7.17-7.32.1


References:

   https://www.suse.com/security/cve/CVE-2007-2052.html
   https://www.suse.com/security/cve/CVE-2008-1721.html
   https://www.suse.com/security/cve/CVE-2008-2315.html
   https://www.suse.com/security/cve/CVE-2008-2316.html
   https://www.suse.com/security/cve/CVE-2008-3142.html
   https://www.suse.com/security/cve/CVE-2008-3143.html
   https://www.suse.com/security/cve/CVE-2008-3144.html
   https://www.suse.com/security/cve/CVE-2011-1521.html
   https://www.suse.com/security/cve/CVE-2011-3389.html
   https://www.suse.com/security/cve/CVE-2011-4944.html
   https://www.suse.com/security/cve/CVE-2012-0845.html
   https://www.suse.com/security/cve/CVE-2012-1150.html
   https://www.suse.com/security/cve/CVE-2013-1752.html
   https://www.suse.com/security/cve/CVE-2013-1753.html
   https://www.suse.com/security/cve/CVE-2013-4238.html
   https://www.suse.com/security/cve/CVE-2014-1912.html
   https://www.suse.com/security/cve/CVE-2014-4650.html
   https://www.suse.com/security/cve/CVE-2014-7185.html
   https://www.suse.com/security/cve/CVE-2016-0772.html
   https://www.suse.com/security/cve/CVE-2016-1000110.html
   https://www.suse.com/security/cve/CVE-2016-5636.html
   https://www.suse.com/security/cve/CVE-2016-5699.html
   https://www.suse.com/security/cve/CVE-2017-1000158.html
   https://www.suse.com/security/cve/CVE-2017-18207.html
   https://www.suse.com/security/cve/CVE-2018-1000030.html
   https://www.suse.com/security/cve/CVE-2018-1000802.html
   https://www.suse.com/security/cve/CVE-2018-1060.html
   https://www.suse.com/security/cve/CVE-2018-1061.html
   https://www.suse.com/security/cve/CVE-2018-14647.html
   https://www.suse.com/security/cve/CVE-2018-20852.html
   https://www.suse.com/security/cve/CVE-2019-10160.html
   https://www.suse.com/security/cve/CVE-2019-16056.html
   https://www.suse.com/security/cve/CVE-2019-16935.html
   https://www.suse.com/security/cve/CVE-2019-5010.html
   https://www.suse.com/security/cve/CVE-2019-9636.html
   https://www.suse.com/security/cve/CVE-2019-9947.html
   https://www.suse.com/security/cve/CVE-2019-9948.html
   https://bugzilla.suse.com/1027282
   https://bugzilla.suse.com/1041090
   https://bugzilla.suse.com/1042670
   https://bugzilla.suse.com/1068664
   https://bugzilla.suse.com/1073269
   https://bugzilla.suse.com/1073748
   https://bugzilla.suse.com/1078326
   https://bugzilla.suse.com/1078485
   https://bugzilla.suse.com/1079300
   https://bugzilla.suse.com/1081750
   https://bugzilla.suse.com/1083507
   https://bugzilla.suse.com/1084650
   https://bugzilla.suse.com/1086001
   https://bugzilla.suse.com/1088004
   https://bugzilla.suse.com/1088009
   https://bugzilla.suse.com/1109847
   https://bugzilla.suse.com/1111793
   https://bugzilla.suse.com/1113755
   https://bugzilla.suse.com/1122191
   https://bugzilla.suse.com/1129346
   https://bugzilla.suse.com/1130840
   https://bugzilla.suse.com/1130847
   https://bugzilla.suse.com/1138459
   https://bugzilla.suse.com/1141853
   https://bugzilla.suse.com/1149792
   https://bugzilla.suse.com/1149955
   https://bugzilla.suse.com/1153238
   https://bugzilla.suse.com/1153830
   https://bugzilla.suse.com/1159035
   https://bugzilla.suse.com/214983
   https://bugzilla.suse.com/298378
   https://bugzilla.suse.com/346490
   https://bugzilla.suse.com/367853
   https://bugzilla.suse.com/379534
   https://bugzilla.suse.com/380942
   https://bugzilla.suse.com/399190
   https://bugzilla.suse.com/406051
   https://bugzilla.suse.com/425138
   https://bugzilla.suse.com/426563
   https://bugzilla.suse.com/430761
   https://bugzilla.suse.com/432677
   https://bugzilla.suse.com/436966
   https://bugzilla.suse.com/437293
   https://bugzilla.suse.com/441088
   https://bugzilla.suse.com/462375
   https://bugzilla.suse.com/525295
   https://bugzilla.suse.com/534721
   https://bugzilla.suse.com/551715
   https://bugzilla.suse.com/572673
   https://bugzilla.suse.com/577032
   https://bugzilla.suse.com/581765
   https://bugzilla.suse.com/603255
   https://bugzilla.suse.com/617751
   https://bugzilla.suse.com/637176
   https://bugzilla.suse.com/638233
   https://bugzilla.suse.com/658604
   https://bugzilla.suse.com/673071
   https://bugzilla.suse.com/682554
   https://bugzilla.suse.com/697251
   https://bugzilla.suse.com/707667
   https://bugzilla.suse.com/718009
   https://bugzilla.suse.com/747125
   https://bugzilla.suse.com/747794
   https://bugzilla.suse.com/751718
   https://bugzilla.suse.com/754447
   https://bugzilla.suse.com/766778
   https://bugzilla.suse.com/794139
   https://bugzilla.suse.com/804978
   https://bugzilla.suse.com/827982
   https://bugzilla.suse.com/831442
   https://bugzilla.suse.com/834601
   https://bugzilla.suse.com/836739
   https://bugzilla.suse.com/856835
   https://bugzilla.suse.com/856836
   https://bugzilla.suse.com/857470
   https://bugzilla.suse.com/863741
   https://bugzilla.suse.com/885882
   https://bugzilla.suse.com/898572
   https://bugzilla.suse.com/901715
   https://bugzilla.suse.com/935856
   https://bugzilla.suse.com/945401
   https://bugzilla.suse.com/964182
   https://bugzilla.suse.com/984751
   https://bugzilla.suse.com/985177
   https://bugzilla.suse.com/985348
   https://bugzilla.suse.com/989523
   https://bugzilla.suse.com/997436

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates