Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
100
security advisorymoderateSUSESUSE 12-SP5: 2021:0886-1 Moderate: Python3 Web Cache Poisoning
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0886-1 Rating: moderate References: #1182379 Cross-References: CVE-2021-23336 CVSS scores: CVE-2021-23336 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2021-23336 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Module for Web Scripting 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-886=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-886=1 - SUSE Linux Enterprise Module for Web Scripting 12: zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2021-886=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): python3-base-debuginfo-3.4.10-25.66.1 python3-base-debugsource-3.4.10-25.66.1 python3-dbm-3.4.10-25.66.1 python3-dbm-debuginfo-3.4.10-25.66.1 python3-debuginfo-3.4.10-25.66.1 python3-debugsource-3.4.10-25.66.1 python3-devel-3.4.10-25.66.1 - SUSE Linux Enterprise Software Development Kit 12-SP5 (ppc64le s390x x86_64): python3-devel-debuginfo-3.4.10-25.66.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libpython3_4m1_0-3.4.10-25.66.1 libpython3_4m1_0-debuginfo-3.4.10-25.66.1 python3-3.4.10-25.66.1 python3-base-3.4.10-25.66.1 python3-base-debuginfo-3.4.10-25.66.1 python3-base-debugsource-3.4.10-25.66.1 python3-curses-3.4.10-25.66.1 python3-curses-debuginfo-3.4.10-25.66.1 python3-debuginfo-3.4.10-25.66.1 python3-debugsource-3.4.10-25.66.1 python3-devel-3.4.10-25.66.1 python3-tk-3.4.10-25.66.1 python3-tk-debuginfo-3.4.10-25.66.1 - SUSE Linux Enterprise Server 12-SP5 (ppc64le s390x x86_64): python3-devel-debuginfo-3.4.10-25.66.1 - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64): libpython3_4m1_0-32bit-3.4.10-25.66.1 libpython3_4m1_0-debuginfo-32bit-3.4.10-25.66.1 python3-base-debuginfo-32bit-3.4.10-25.66.1 - SUSE Linux Enterprise Module for Web Scripting 12 (aarch64 ppc64le s390x x86_64): libpython3_4m1_0-3.4.10-25.66.1 libpython3_4m1_0-debuginfo-3.4.10-25.66.1 python3-3.4.10-25.66.1 python3-base-3.4.10-25.66.1 python3-base-debuginfo-3.4.10-25.66.1 python3-base-debugsource-3.4.10-25.66.1 python3-curses-3.4.10-25.66.1 python3-debuginfo-3.4.10-25.66.1 python3-debugsource-3.4.10-25.66.1 References: https://www.suse.com/security/cve/CVE-2021-23336.html https://bugzilla.suse.com/1182379 . A critical vulnerability in python3 exposes SUSE systems to web cache poisoning attacks. Immediate action is required to protect web applications and user data. Python3 Security Update, SUSE Web Cache Fix, SUSE Python3 Patch. . LinuxSecurity.com Team
Mar 19, 2021
SuSE
89
security advisorymoderateupdateFedora 34: 2021-E22BB0E548 Moderate: Django Web Cache Poisoning Issue
update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-e22bb0e548 2021-03-19 19:51:22.365268 --------------------------------------------------------------------------------Name : python-django Product : Fedora 34 Version : 3.1.7 Release : 1.fc34 URL : https://www.djangoproject.com/ Summary : A high-level Python Web framework Description : Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle. --------------------------------------------------------------------------------Update Information: update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542) --------------------------------------------------------------------------------ChangeLog: * Fri Mar 5 2021 Matthias Runge - 3.1.7-1 - update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542) --------------------------------------------------------------------------------References: [ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters https://bugzilla.redhat.com/show_bug.cgi?id=1928904 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-e22bb0e548' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announcemailing list --
Mar 19, 2021
•Important
Fedora
89
security advisoryfedoraupdateFedora 34 FEDORA-2021-5a09621ebb Critical: Python Web Cache Threat
Python 3.10.0a6. Security fix for CVE-2021-23336.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-5a09621ebb 2021-03-19 19:51:22.364602 --------------------------------------------------------------------------------Name : python3.10 Product : Fedora 34 Version : 3.10.0~a6 Release : 1.fc34 URL : https://www.python.org/ Summary : Version 3.10 of the Python interpreter Description : Python 3.10 package for developers. This package exists to allow developers to test their code against a newer version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.10, update your Fedora to a newer version once Python 3.10 is stable. --------------------------------------------------------------------------------Update Information: Python 3.10.0a6. Security fix for CVE-2021-23336. --------------------------------------------------------------------------------ChangeLog: * Tue Mar 2 2021 Tomas Hrnciar - 3.10.0~a6-1 - Update to 3.10.0a6 --------------------------------------------------------------------------------References: [ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters https://bugzilla.redhat.com/show_bug.cgi?id=1928904 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-5a09621ebb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 19, 2021
•Critical
Fedora
202
security advisorymoderatesoftware updateopenSUSE: 2021:0435-1 Moderate: Python Web Cache Poisoning
An update that fixes one vulnerability is now available. . openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0435-1 Rating: moderate References: #1182379 Cross-References: CVE-2021-23336 CVSS scores: CVE-2021-23336 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2021-23336 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: openSUSE Leap 15.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-435=1 Package List: - openSUSE Leap 15.2 (i586 x86_64): libpython2_7-1_0-2.7.18-lp152.3.15.1 libpython2_7-1_0-debuginfo-2.7.18-lp152.3.15.1 python-2.7.18-lp152.3.15.1 python-base-2.7.18-lp152.3.15.1 python-base-debuginfo-2.7.18-lp152.3.15.1 python-base-debugsource-2.7.18-lp152.3.15.1 python-curses-2.7.18-lp152.3.15.1 python-curses-debuginfo-2.7.18-lp152.3.15.1 python-debuginfo-2.7.18-lp152.3.15.1 python-debugsource-2.7.18-lp152.3.15.1 python-demo-2.7.18-lp152.3.15.1 python-devel-2.7.18-lp152.3.15.1 python-gdbm-2.7.18-lp152.3.15.1 python-gdbm-debuginfo-2.7.18-lp152.3.15.1 python-idle-2.7.18-lp152.3.15.1 python-tk-2.7.18-lp152.3.15.1 python-tk-debuginfo-2.7.18-lp152.3.15.1 python-xml-2.7.18-lp152.3.15.1 python-xml-debuginfo-2.7.18-lp152.3.15.1 - openSUSE Leap 15.2 (noarch): python-doc-2.7.18-lp152.3.15.1 python-doc-pdf-2.7.18-lp152.3.15.1 - openSUSE Leap 15.2 (x86_64): libpython2_7-1_0-32bit-2.7.18-lp152.3.15.1 libpython2_7-1_0-32bit-debuginfo-2.7.18-lp152.3.15.1 python-32bit-2.7.18-lp152.3.15.1 python-32bit-debuginfo-2.7.18-lp152.3.15.1 python-base-32bit-2.7.18-lp152.3.15.1 python-base-32bit-debuginfo-2.7.18-lp152.3.15.1 References: https://www.suse.com/security/cve/CVE-2021-23336.html https://bugzilla.suse.com/1182379 . Patch addressing web cache pollution flaw in Python launched for openSUSE. Upgrade immediately to enhance protection.. openSUSE Security Update, Python Fix, Cache Poisoning, Software Patch. . LinuxSecurity.com Team
Mar 17, 2021
OpenSUSE
89
security advisorysecurity updatefedoraFedora 33: 2021-b76ede8f4d Critical Update: mingw-python3 Web Cache Threat
Update to python3-3.9.2, see https://docs.python.org/3/whatsnew/3.9.html for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-b76ede8f4d 2021-03-15 01:17:22.121076 --------------------------------------------------------------------------------Name : mingw-python3 Product : Fedora 33 Version : 3.9.2 Release : 1.fc33 URL : https://www.python.org/ Summary : MinGW Windows python3 Description : MinGW Windows python3 library. --------------------------------------------------------------------------------Update Information: Update to python3-3.9.2, see https://docs.python.org/3/whatsnew/3.9.html for details. --------------------------------------------------------------------------------ChangeLog: * Mon Feb 22 2021 Sandro Mani - 3.9.2-1 - Update to 3.9.2 * Mon Feb 15 2021 Sandro Mani - 3.9.1-4 - MACHDEP=win32 * Tue Jan 26 2021 Fedora Release Engineering - 3.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1928912 - CVE-2021-23336 mingw-python3: python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928912 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-b76ede8f4d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 14, 2021
•Critical
Fedora
89
security advisorycritical issuesecurity issueFedora 32: 2021-309bc2e727 Critical: Web Cache Poisoning Risk
Update to python3-3.8.8, see https://www.python.org/downloads/release/python-388/ for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-309bc2e727 2021-03-15 01:05:35.340615 --------------------------------------------------------------------------------Name : mingw-python3 Product : Fedora 32 Version : 3.8.8 Release : 1.fc32 URL : https://www.python.org/ Summary : MinGW Windows python3 Description : MinGW Windows python3 library. --------------------------------------------------------------------------------Update Information: Update to python3-3.8.8, see https://www.python.org/downloads/release/python-388/ for details. --------------------------------------------------------------------------------ChangeLog: * Mon Feb 22 2021 Sandro Mani - 3.8.8-1 - Update to 3.8.8 --------------------------------------------------------------------------------References: [ 1 ] Bug #1928912 - CVE-2021-23336 mingw-python3: python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928912 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-309bc2e727' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 14, 2021
•Critical
Fedora
100
security advisorymoderatesecurity issueSUSE: 2021:0768-1 Moderate: Python Web Cache Poisoning Threat
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0768-1 Rating: moderate References: #1182379 Cross-References: CVE-2021-23336 CVSS scores: CVE-2021-23336 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2021-23336 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE Manager Server 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Module for Python2 15-SP2 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP2 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the followingissues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-768=1 - SUSE Manager Retail Branch Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-768=1 - SUSE Manager Proxy 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-768=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-768=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2021-768=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-768=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-768=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2021-768=1 - SUSE Linux Enterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2021-768=1 - SUSE Linux Enterprise Module for Python2 15-SP2: zypper in -t patch SUSE-SLE-Module-Python2-15-SP2-2021-768=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2021-768=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2021-768=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2021-768=1 -SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-768=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-768=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-768=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2021-768=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2021-768=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-768=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.0 (ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Manager Retail Branch Server 4.0 (x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Manager Proxy 4.0 (x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Module for Python2 15-SP2 (aarch64 ppc64le s390x x86_64): python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64): python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 - SUSE CaaS Platform 4.0 (x86_64): libpython2_7-1_0-2.7.18-7.55.1 libpython2_7-1_0-debuginfo-2.7.18-7.55.1 python-2.7.18-7.55.1 python-base-2.7.18-7.55.1 python-base-debuginfo-2.7.18-7.55.1 python-base-debugsource-2.7.18-7.55.1 python-curses-2.7.18-7.55.1 python-curses-debuginfo-2.7.18-7.55.1 python-debuginfo-2.7.18-7.55.1 python-debugsource-2.7.18-7.55.1 python-devel-2.7.18-7.55.1 python-gdbm-2.7.18-7.55.1 python-gdbm-debuginfo-2.7.18-7.55.1 python-tk-2.7.18-7.55.1 python-tk-debuginfo-2.7.18-7.55.1 python-xml-2.7.18-7.55.1 python-xml-debuginfo-2.7.18-7.55.1 References: https://www.suse.com/security/cve/CVE-2021-23336.html https://bugzilla.suse.com/1182379 . Critical patch issued for Python counters web cache vulnerabilities within SUSE applications. Users encouraged to apply updates for impacted platforms.. SUSE Python Security Update, Cache Poisoning Fix, SUSE Manager Update. . LinuxSecurity.com Team
Mar 11, 2021
SuSE
172
security advisoryhigh severityubuntuUbuntu 20.04 LTS: USN-4742-1 High: Django Remote Access Risk
Django could allow unintended access to network services.. =========================================================================Ubuntu Security Notice USN-4742-1 February 22, 2021 python-django vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.10 - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: Django could allow unintended access to network services. Software Description: - python-django: High-level Python web development framework Details: It was discovered that Django incorrectly accepted semicolons as query parameters. A remote attacker could possibly use this issue to perform a Web Cache Poisoning attack. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.10: python3-django 2:2.2.16-1ubuntu0.2 Ubuntu 20.04 LTS: python3-django 2:2.2.12-1ubuntu0.4 Ubuntu 18.04 LTS: python-django 1:1.11.11-1ubuntu1.11 python3-django 1:1.11.11-1ubuntu1.11 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4742-1 CVE-2021-23336 Package Information: https://launchpad.net/ubuntu/+source/python-django/2:2.2.16-1ubuntu0.2 https://launchpad.net/ubuntu/+source/python-django/2:2.2.12-1ubuntu0.4 https://launchpad.net/ubuntu/+source/python-django/1:1.11.11-1ubuntu1.11 . A vulnerability in Django allows for unauthorized entry, affecting Ubuntu's security architecture and potentially leading to Web Cache Poisoning incidents.. Django Vulnerability, Ubuntu Security Notice, Network Services Access. . Severity: Important. LinuxSecurity.com Team
Feb 22, 2021
•Important
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!