Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE: 2020:3930-1 Important: Python3 Denial Of Service Correction

suse
Calendar Grey December 23, 2020
Scroller Suse
This release includes several vital improvements and functionalities for php7 in the Ubuntu environment, bolstering protection.
An update that fixes 8 vulnerabilities, contains two features is now available

Summary

This update for python3 fixes the following issues: - Fixed CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support calls eval() on content retrieved via HTTP. - Change setuptools and pip version numbers according to new wheels - Handful of changes to make python36 compatible with SLE15 and SLE12 (jsc#ECO-2799, jsc#SLE-13738) - add triplets for mips-r6 and riscv - RISC-V needs CTYPES_PASS_BY_REF_HACK Update to 3.6.12 (bsc#1179193) * Ensure python3.dll is loaded from correct locations when Python is embedded * The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This resulted in always causing hash collisions. The fix uses hash() to generate hash values for the tuple of (address,

Topics%20covered

Topics Covered

security advisory denial of service software update security fix important SUSE python3

References

#1155094 #1174091 #1174571 #1174701 #1177211

#1178009 #1179193 #1179630 ECO-2799 SLE-13738

Cross- CVE-2019-16935 CVE-2019-18348 CVE-2019-20907

CVE-2019-5010 CVE-2020-14422 CVE-2020-26116

CVE-2020-27619 CVE-2020-8492

Affected Products:

SUSE Linux Enterprise Server for SAP 15

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Module for Development Tools 15-SP3

SUSE Linux Enterprise Module for Development Tools 15-SP2

SUSE Linux Enterprise Module for Development Tools 15-SP1

SUSE Linux Enterprise Module for Basesystem 15-SP3

SUSE Linux Enterprise Module for Basesystem 15-SP2

SUSE Linux Enterprise Module for Basesystem 15-SP1

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise H...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:3930-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service software update security fix important SUSE python3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.