Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
100
security advisoryimportantSUSE Linux Enterprise ServerSUSE 12-SP3: 2022:2249-1 Important: Python Command Injection Risk
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2249-1 Rating: important References: #1198511 Cross-References: CVE-2015-20107 CVSS scores: CVE-2015-20107 (NVD) : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2015-20107 (SUSE): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L Affected Products: HPE Helion Openstack 8 SUSE Linux Enterprise Server 12-SP2-BCL SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server for SAP 12-SP3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-2249=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-2249=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2022-2249=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2022-2249=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-2249=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patchSUSE-SLE-SERVER-12-SP2-BCL-2022-2249=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2022-2249=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-devel-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 - SUSE OpenStack Cloud Crowbar 8 (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - SUSE OpenStack Cloud 8 (x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-devel-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 - SUSE OpenStack Cloud 8 (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 python-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-devel-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (x86_64): libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 python-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-devel-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (s390x x86_64): libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - SUSE Linux Enterprise Server 12-SP3-BCL (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-devel-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 - SUSE Linux Enterprise Server12-SP2-BCL (x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - HPE Helion Openstack 8 (noarch): python-doc-2.7.18-28.87.1 python-doc-pdf-2.7.18-28.87.1 - HPE Helion Openstack 8 (x86_64): libpython2_7-1_0-2.7.18-28.87.1 libpython2_7-1_0-32bit-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-2.7.18-28.87.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.87.1 python-2.7.18-28.87.1 python-32bit-2.7.18-28.87.1 python-base-2.7.18-28.87.1 python-base-32bit-2.7.18-28.87.1 python-base-debuginfo-2.7.18-28.87.1 python-base-debuginfo-32bit-2.7.18-28.87.1 python-base-debugsource-2.7.18-28.87.1 python-curses-2.7.18-28.87.1 python-curses-debuginfo-2.7.18-28.87.1 python-debuginfo-2.7.18-28.87.1 python-debuginfo-32bit-2.7.18-28.87.1 python-debugsource-2.7.18-28.87.1 python-demo-2.7.18-28.87.1 python-devel-2.7.18-28.87.1 python-gdbm-2.7.18-28.87.1 python-gdbm-debuginfo-2.7.18-28.87.1 python-idle-2.7.18-28.87.1 python-tk-2.7.18-28.87.1 python-tk-debuginfo-2.7.18-28.87.1 python-xml-2.7.18-28.87.1 python-xml-debuginfo-2.7.18-28.87.1 References: https://www.suse.com/security/cve/CVE-2015-20107.html https://bugzilla.suse.com/1198511 . Enhanced Python for SUSE addresses command injection vulnerabilities—SUSE-SU-2022:2250-1, severity critical.. SUSE Security Update, python patch, command injection fix, HPE Helion OpenStack, update procedures. . Severity: Important. LinuxSecurity.com Team
Jul 04, 2022
•Important
SuSE
89
security advisorymoderateFedoraFedora 29: 2018-09-26 Moderate: Python2 Command Injection Notice
Security fix for CVE-2018-1000802. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-ae70d262b0 2018-09-26 20:19:35.843588 --------------------------------------------------------------------------------Name : python2 Product : Fedora 29 Version : 2.7.15 Release : 10.fc29 URL : https://www.python.org/ Summary : An interpreted, interactive, object-oriented programming language Description : Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especially how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been removed in the 3.x line. Note that documentation for Python 2 is provided in the python2-docs package. This package provides the "python2" executable; most of the actual implementation is within the "python2-libs" package. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-1000802 --------------------------------------------------------------------------------References: [ 1 ] Bug #1631420 - CVE-2018-1000802 python: Command injection in the shutil module https://bugzilla.redhat.com/show_bug.cgi?id=1631420 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-ae70d262b0' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 26, 2018
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!