Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 606
Alerts This Week
Warning Icon 1 606

SUSE: 2022:1485-1 Moderate: Python39 DoS And Unicode Issues

suse
Calendar Grey May 2, 2022
Scroller Suse
Release update for python39 focused on vital fixes, boosting efficiency and safeguarding features on SUSE Linux environments.
An update that solves three vulnerabilities, contains one feature and has two fixes is now available

Summary

This update for python39 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). - Update to 3.9.10 (jsc#SLE-23849) - Remove shebangs from from python-base libraries in _libdir. (bsc#1193179) - Update to 3.9.9: * Core and Builtins + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples. + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo. + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na. + bpo-45167: Fix deepcopying of types.GenericAlias objects. + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(),

Topics%20covered

Topics Covered

security advisory moderate software update DoS SUSE unicode python39

References

#1186819 #1189241 #1189287 #1189356 #1193179

SLE-23849

Cross- CVE-2021-3572 CVE-2021-3733 CVE-2021-3737

CVSS scores:

CVE-2021-3572 (NVD) : 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

CVE-2021-3572 (SUSE): 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

CVE-2021-3733 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-3733 (SUSE): 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVE-2021-3737 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2021-3737 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

SUSE Linux Enterprise Desktop 15-SP3

SUSE Linux Enterprise High Performance Computing 15-SP3

SUSE Linux Enterprise Module for Basesystem 15-SP3

SUSE Linux Enterprise Module for Development Tools 15-SP3

Announcement ID: SUSE-SU-2022:1485-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate software update DoS SUSE unicode python39

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.