Back
    Linux Security
    Linux Security
    Linux Security

    SUSE: 2020:3597-1 important: python

    Date 02 Dec 2020
    Category SuSE Linux Distribution - Security Advisories
    242
    Posted By LinuxSecurity Advisories
    An update that fixes one vulnerability is now available. 
    
   SUSE Security Update: Security update for python
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:3597-1
Rating:             important
References:         #1176262 
Cross-References:   CVE-2019-20916
Affected Products:
                    SUSE Linux Enterprise Server for SAP 15
                    SUSE Linux Enterprise Server 15-LTSS
                    SUSE Linux Enterprise Module for Python2 15-SP3
                    SUSE Linux Enterprise Module for Python2 15-SP2
                    SUSE Linux Enterprise Module for Python2 15-SP1
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP3
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP2
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP1
                    SUSE Linux Enterprise Module for Basesystem 15-SP3
                    SUSE Linux Enterprise Module for Basesystem 15-SP2
                    SUSE Linux Enterprise Module for Basesystem 15-SP1
                    SUSE Linux Enterprise High Performance Computing 15-LTSS
                    SUSE Linux Enterprise High Performance Computing 15-ESPOS
______________________________________________________________________________

   An update that fixes one vulnerability is now available.

Description:

   This update for python fixes the following issues:

   - Fixed a directory traversal in _download_http_url() (bsc#1176262
     CVE-2019-20916)


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server for SAP 15:

      zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2020-3597=1

   - SUSE Linux Enterprise Server 15-LTSS:

      zypper in -t patch SUSE-SLE-Product-SLES-15-2020-3597=1

   - SUSE Linux Enterprise Module for Python2 15-SP3:

      zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2020-3597=1

   - SUSE Linux Enterprise Module for Python2 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Python2-15-SP2-2020-3597=1

   - SUSE Linux Enterprise Module for Python2 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Python2-15-SP1-2020-3597=1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP3:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2020-3597=1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-3597=1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-3597=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP3:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2020-3597=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2020-3597=1

   - SUSE Linux Enterprise Module for Basesystem 15-SP1:

      zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-3597=1

   - SUSE Linux Enterprise High Performance Computing 15-LTSS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-2020-3597=1

   - SUSE Linux Enterprise High Performance Computing 15-ESPOS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-2020-3597=1



Package List:

   - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64):

      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Python2 15-SP2 (aarch64 ppc64le s390x x86_64):

      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Python2 15-SP1 (aarch64 ppc64le s390x x86_64):

      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-tk-2.7.17-7.47.1
      python-tk-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-tk-2.7.17-7.47.1
      python-tk-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (aarch64 ppc64le s390x x86_64):

      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-tk-2.7.17-7.47.1
      python-tk-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1

   - SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1

   - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1

   - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64):

      libpython2_7-1_0-2.7.17-7.47.1
      libpython2_7-1_0-debuginfo-2.7.17-7.47.1
      python-2.7.17-7.47.1
      python-base-2.7.17-7.47.1
      python-base-debuginfo-2.7.17-7.47.1
      python-base-debugsource-2.7.17-7.47.1
      python-curses-2.7.17-7.47.1
      python-curses-debuginfo-2.7.17-7.47.1
      python-debuginfo-2.7.17-7.47.1
      python-debugsource-2.7.17-7.47.1
      python-devel-2.7.17-7.47.1
      python-gdbm-2.7.17-7.47.1
      python-gdbm-debuginfo-2.7.17-7.47.1
      python-xml-2.7.17-7.47.1
      python-xml-debuginfo-2.7.17-7.47.1


References:

   https://www.suse.com/security/cve/CVE-2019-20916.html
   https://bugzilla.suse.com/1176262

    Get the Latest News & Insights

    Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox

    Related News

    DreamBus, FreakOut Botnets Pose New Threat to Linux Systems
    DreamBus, FreakOut Botnets Pose New Threat to Linux Systems
    Red Hat introduces free RHEL for small production workloads and development teams
    Red Hat introduces free RHEL for small production workloads and development teams
    GeoIP for nftables
    GeoIP for nftables
    Freakout Botnet Targets Unpatched Linux Systems Showcase Image 7 A 15814 Esm W120
    'FreakOut' Botnet Targets Unpatched Linux Systems

    Advisories

    Debian LTS: DLA-2531-1: python-bottle security update
    Date 24 Jan 2021 @ 14:49
    openSUSE: 2021:0150-1 moderate: gdk-pixbuf
    Date 24 Jan 2021 @ 11:16
    openSUSE: 2021:0152-1 moderate: python-autobahn
    Date 24 Jan 2021 @ 11:15
    Debian: DSA-4833-2: gst-plugins-bad1.0 regression update
    Date 24 Jan 2021 @ 06:09

    LinuxSecurity Poll

    'Tis the season of giving! How have you given back to the open-source community?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/49-tis-the-season-of-giving-how-have-you-given-back-to-the-open-source-community?task=poll.vote&format=json
    49
    radio
    [{"id":"171","title":"I've contributed to the development of an open-source project.","votes":"11","type":"x","order":"1","pct":34.38,"resources":[]},{"id":"172","title":"I've reviewed open-source code for security bugs.","votes":"6","type":"x","order":"2","pct":18.75,"resources":[]},{"id":"173","title":"I've made a donation to an open-source project.","votes":"15","type":"x","order":"3","pct":46.88,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

    Please vote first in order to view vote results.


    VIEW MORE POLLS

    bottom 200
    Phishing Is The #1 Cybersecurity Threat Businesses Face

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy. 

    Our Cookie Policy