Stay Secure with the Latest Linux Advisories

security advisorysecurity updatedirectory traversal

openSUSE Leap 15.2: 2020:2211-1 Important: Python Directory Traverse Issue

An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:2211-1 Rating: important References: #1176262 Cross-References: CVE-2019-20916 Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-2211=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython2_7-1_0-2.7.17-lp152.3.9.2 libpython2_7-1_0-debuginfo-2.7.17-lp152.3.9.2 python-2.7.17-lp152.3.9.1 python-base-2.7.17-lp152.3.9.2 python-base-debuginfo-2.7.17-lp152.3.9.2 python-base-debugsource-2.7.17-lp152.3.9.2 python-curses-2.7.17-lp152.3.9.1 python-curses-debuginfo-2.7.17-lp152.3.9.1 python-debuginfo-2.7.17-lp152.3.9.1 python-debugsource-2.7.17-lp152.3.9.1 python-demo-2.7.17-lp152.3.9.1 python-devel-2.7.17-lp152.3.9.2 python-gdbm-2.7.17-lp152.3.9.1 python-gdbm-debuginfo-2.7.17-lp152.3.9.1 python-idle-2.7.17-lp152.3.9.1 python-tk-2.7.17-lp152.3.9.1 python-tk-debuginfo-2.7.17-lp152.3.9.1 python-xml-2.7.17-lp152.3.9.2 python-xml-debuginfo-2.7.17-lp152.3.9.2 - openSUSE Leap 15.2 (x86_64): libpython2_7-1_0-32bit-2.7.17-lp152.3.9.2 libpython2_7-1_0-32bit-debuginfo-2.7.17-lp152.3.9.2 python-32bit-2.7.17-lp152.3.9.1 python-32bit-debuginfo-2.7.17-lp152.3.9.1 python-base-32bit-2.7.17-lp152.3.9.2 python-base-32bit-debuginfo-2.7.17-lp152.3.9.2 - openSUSE Leap 15.2 (noarch): python-doc-2.7.17-lp152.3.9.1 python-doc-pdf-2.7.17-lp152.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-20916.html https://bugzilla.suse.com/1176262 _______________________________________________ openSUSE Security Announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe, email This email address is being protected from spambots. You need JavaScript enabled to view it. List Netiquette: List Archives: . This release of Python for openSUSE resolves a critical vulnerability concerning path traversal. Discover further details.. openSUSE Security, Python Update, Directory Traversal Issue. . Severity: Important. LinuxSecurity.com Team

Dec 08, 2020 •Important OpenSUSE