Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Stay Secure with the Latest Linux Advisories

Mageia Large Esm H800
Mageia

Mageia Libevent Critical Security Update CVE-2026-63379 Advisory 2026-0294

Calendar White Jul 24, 2026
Critical
Mageia Large Esm H900
Mageia

Mageia Transmission Critical Clickjacking Vulnerability Fix 2026-0293

Calendar White Jul 24, 2026
Critical
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Advisory 2026-21435-1 perl-XML-Bare Moderate Risk

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H800
openSUSE

openSUSE Leap 16.0 transport Significant Security Update CVE-2026-39821

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 Gh Important Security Threat CVE-2026-39821

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 net-tools Low Denial of Service CVE-2024-58251

Calendar White Jul 24, 2026
Low
Opensuse Large Esm H800
openSUSE

openSUSE Perl-HTTP-Date Moderate CPU Exhaustion Fix CVE-2026-14741

Calendar White Jul 24, 2026
moderate
Opensuse Large Esm H900
openSUSE

openSUSE ImageMagick Important Memory Leak Policy Bypass Vuln 2026-21426-1

Calendar White Jul 24, 2026
Important
Opensuse Large Esm H900
openSUSE

openSUSE Leap 16.0 PackageKit Moderate Authorization Issue CVE-2026-10294

Calendar White Jul 24, 2026
moderate
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 9 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysecurity issuefedora

Fedora 32: 2021-b6b6093b3a Critical: Python3 Docs Information Disclosure

**Update to 3.8.9.** [Full changelog.](https://docs.python.org/release/3.8.9/whatsnew/changelog.html) Contains security fix for CVE-2021-3426. ---- **Update to 3.8.8.** [Full changelog.](https://docs.python.org/release/3.8.8/whatsnew/changelog.html) Contains security fix for CVE-2021-23336.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-b6b6093b3a 2021-04-23 15:04:50.170419 --------------------------------------------------------------------------------Name : python3-docs Product : Fedora 32 Version : 3.8.9 Release : 1.fc32 URL : https://www.python.org/ Summary : Documentation for the Python 3 programming language Description : The python3-docs package contains documentation on the Python 3 programming language and interpreter. --------------------------------------------------------------------------------Update Information: **Update to 3.8.9.** [Full changelog.](https://docs.python.org/release/3.8.9/whatsnew/changelog.html) Contains security fix for CVE-2021-3426. ---- **Update to 3.8.8.** [Full changelog.](https://docs.python.org/release/3.8.8/whatsnew/changelog.html) Contains security fix for CVE-2021-23336. --------------------------------------------------------------------------------ChangeLog: * Tue Apr 6 2021 Tomas Hrnciar - 3.8.9-1 - Update to 3.8.9 --------------------------------------------------------------------------------References: [ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters https://bugzilla.redhat.com/show_bug.cgi?id=1928904 [ 2 ] Bug #1935913 - CVE-2021-3426 python: information disclosure via pydoc https://bugzilla.redhat.com/show_bug.cgi?id=1935913 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade--advisory FEDORA-2021-b6b6093b3a' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Important revision for Fedora 32 Python3-manuals to tackle various cybersecurity vulnerabilities found in the latest updates.. Fedora Update, Python Security, Documentation Upgrade. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 23, 2021 •Critical Fedora
197
Ls Advisories Deblts Esm H240
Price Tag%201security advisorybuffer overflowcode execution

Debian 9 LTS DLA-2619-1 Critical: Python3.5 Security Threats

Three security issues have been discovered in python3.5: CVE-2021-3177 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2619-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Anton Gladky April 05, 2021 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : python3.5 Version : 3.5.3-1+deb9u4 CVE ID : CVE-2021-3177 CVE-2021-3426 CVE-2021-23336 Three security issues have been discovered in python3.5: CVE-2021-3177 Python 3.x has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input. This occurs because sprintf is used unsafely. CVE-2021-3426 Running `pydoc -p` allows other local users to extract arbitrary files. The `/getfile?key=path` URL allows to read arbitrary file on the filesystem. The fix removes the "getfile" feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). CVE-2021-23336 The Python3.5 vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter. **Attention, API-change!** Please be sure your software is working properly if it uses `urllib.parse.parse_qs` or `urllib.parse.parse_qsl`, `cgi.parse` or`cgi.parse_multipart`. Earlier Python versions allowed using both ``;`` and ``&`` as query parameter separators in `urllib.parse.parse_qs` and `urllib.parse.parse_qsl`. Due to security concerns, and to conform with newer W3C recommendations, this has been changed to allow only a single separator key, with ``&`` as the default. This change also affects `cgi.parse` and `cgi.parse_multipart` as they use the affected functions internally. For more details, please see their respective documentation. For Debian 9 stretch, these problems have been fixed in version 3.5.3-1+deb9u4. We recommend that you upgrade your python3.5 packages. For the detailed security status of python3.5 please refer to its security tracker page at: Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . The latest Debian LTS Advisory DLA-2620-1 tackles multiple vulnerabilities in python3.6, implementing significant changes aimed at reinforcing security.. Python3 Security, Debian Advisory, Security Update, Code Execution Safety, Web Cache Risk. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Apr 05, 2021 •Critical Debian LTS
Banner 4 1028x280 1708121825 1771600306
203
Ls Advisories Mageia Esm H240
Price Tag%201security advisorymoderateweb cache poisoning

Mageia 7: MGASA-2021-0171 Moderate: python-bottle Web Cache Poisoning

Updated python-bottle packages fix security vulnerability: python-bottle before 0.12.19 is vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the . MGASA-2021-0171 - Updated python-bottle packages fix security vulnerability Publication date: 02 Apr 2021 URL: https://advisories.mageia.org/MGASA-2021-0171.html Type: security Affected Mageia releases: 7 CVE: CVE-2020-28473 Updated python-bottle packages fix security vulnerability: python-bottle before 0.12.19 is vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter (CVE-2020-28473). References: - https://bugs.mageia.org/show_bug.cgi?id=28219 - https://lists.debian.org/debian-lts-announce/2021/01/msg00019.html - https://www.cve.org/CVERecord?id=CVE-2020-28473 SRPMS: - 7/core/python-bottle-0.12.16-1.1.mga7 . MGASA-2021-0171 - Updated python-bottle packages fix security vulnerability Publication date: 02 Apr. python-bottle, updated, packages, security, vulnerability, vulnerabl. . LinuxSecurity.com Team

Calendar%202 Apr 02, 2021 Mageia
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderate severityweb cache poisoning

SUSE MicroOS 5.1: SUSE-SU-2023:0563-1 Critical: Credential Theft Risk

An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0947-1 Rating: moderate References: #1182379 Cross-References: CVE-2021-23336 CVSS scores: CVE-2021-23336 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2021-23336 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE MicroOS 5.0 SUSE Linux Enterprise Module for Development Tools 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: - python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE MicroOS 5.0: zypper in -t patch SUSE-SUSE-MicroOS-5.0-2021-947=1 - SUSE Linux Enterprise Module for Development Tools 15-SP2: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP2-2021-947=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2021-947=1 Package List: - SUSE MicroOS 5.0 (aarch64 x86_64): libpython3_6m1_0-3.6.13-3.78.1 libpython3_6m1_0-debuginfo-3.6.13-3.78.1 python3-3.6.13-3.78.1 python3-base-3.6.13-3.78.1 python3-base-debuginfo-3.6.13-3.78.1 python3-core-debugsource-3.6.13-3.78.1 python3-debuginfo-3.6.13-3.78.1 python3-debugsource-3.6.13-3.78.1 - SUSE Linux Enterprise Module for Development Tools 15-SP2 (aarch64 ppc64le s390x x86_64): python3-tools-3.6.13-3.78.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): libpython3_6m1_0-3.6.13-3.78.1 libpython3_6m1_0-debuginfo-3.6.13-3.78.1 python3-3.6.13-3.78.1 python3-base-3.6.13-3.78.1 python3-curses-3.6.13-3.78.1 python3-curses-debuginfo-3.6.13-3.78.1 python3-dbm-3.6.13-3.78.1 python3-dbm-debuginfo-3.6.13-3.78.1 python3-debuginfo-3.6.13-3.78.1 python3-debugsource-3.6.13-3.78.1 python3-devel-3.6.13-3.78.1 python3-devel-debuginfo-3.6.13-3.78.1 python3-idle-3.6.13-3.78.1 python3-tk-3.6.13-3.78.1 python3-tk-debuginfo-3.6.13-3.78.1 References: https://www.suse.com/security/cve/CVE-2021-23336.html https://bugzilla.suse.com/1182379 . An essential patch has been released for python3 targeting vulnerabilities linked to web cache poisoning. Discover the steps to implement this correction.. SUSE MicroOS Update, Python3 Security Patch, Web Cache Poisoning. . LinuxSecurity.com Team

Calendar%202 Mar 24, 2021 SuSE
Banner 4 1028x280 1708121825 1771600306
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisoryfedoraupdate

Fedora 34: FEDORA-2021-e525e48886 Critical: Web Cache Poisoning Problem

Update to python3-3.9.2, see https://docs.python.org/3/whatsnew/3.9.html for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-e525e48886 2021-03-19 19:51:22.365691 --------------------------------------------------------------------------------Name : mingw-python3 Product : Fedora 34 Version : 3.9.2 Release : 2.fc34 URL : https://www.python.org/ Summary : MinGW Windows python3 Description : MinGW Windows python3 library. --------------------------------------------------------------------------------Update Information: Update to python3-3.9.2, see https://docs.python.org/3/whatsnew/3.9.html for details. --------------------------------------------------------------------------------ChangeLog: * Sat Feb 27 2021 Sandro Mani - 3.9.2-2 - Pass --enable-loadable-sqlite-extensions --------------------------------------------------------------------------------References: [ 1 ] Bug #1928912 - CVE-2021-23336 mingw-python3: python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928912 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-e525e48886' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora 34 has released an update for mingw-python3 to fix a security vulnerability tied to URL query string parameters, urging users to update promptly to mitigate risks. Fedora Update, Python Security, Web Cache Poisoning, Windows Library. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 19, 2021 •Critical Fedora
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderateupdate

Fedora 34: 2021-E22BB0E548 Moderate: Django Web Cache Poisoning Issue

update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-e22bb0e548 2021-03-19 19:51:22.365268 --------------------------------------------------------------------------------Name : python-django Product : Fedora 34 Version : 3.1.7 Release : 1.fc34 URL : https://www.djangoproject.com/ Summary : A high-level Python Web framework Description : Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY (Don't Repeat Yourself) principle. --------------------------------------------------------------------------------Update Information: update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542) --------------------------------------------------------------------------------ChangeLog: * Fri Mar 5 2021 Matthias Runge - 3.1.7-1 - update to 3.1.7, fix CVE-2021-23336 (rhbz#1931542) --------------------------------------------------------------------------------References: [ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters https://bugzilla.redhat.com/show_bug.cgi?id=1928904 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-e22bb0e548' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announcemailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Upgrading to python-django 3.1.7 in Fedora 34 mitigates web cache poisoning vulnerabilities and enhances overall security.. python-django update, Fedora security fix, web framework patch. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Mar 19, 2021 •Important Fedora
Banner 4 1028x280 1708121825 1771600306
100
Ls Advisories Suse Esm H240
Price Tag%201security advisorymoderateupdate

SUSE: 2021:0794-1 Moderate: Python Web Cache Poisoning Fix

An update that fixes two vulnerabilities is now available. . SUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0794-1 Rating: moderate References: #1182379 Cross-References: CVE-2019-18348 CVE-2021-23336 CVSS scores: CVE-2019-18348 (NVD) : 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2019-18348 (SUSE): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2021-23336 (NVD) : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CVE-2021-23336 (SUSE): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 7 SUSE Linux Enterprise Workstation Extension 12-SP5 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP2 SUSE Linux Enterprise Server 12-SP5 SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP2-LTSS SUSE Linux Enterprise Server 12-SP2-BCL HPE Helion Openstack 8 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator(bsc#1182379). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2021-794=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-794=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2021-794=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2021-794=1 - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2021-794=1 - SUSE Linux Enterprise Workstation Extension 12-SP5: zypper in -t patch SUSE-SLE-WE-12-SP5-2021-794=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2021-794=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-794=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2021-794=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-794=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2021-794=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-794=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-794=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2021-794=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2021-794=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2021-794=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE OpenStack Cloud Crowbar 9 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE OpenStack Cloud Crowbar 8 (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE OpenStack Cloud Crowbar 8 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE OpenStack Cloud 9 (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE OpenStack Cloud 9 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE OpenStack Cloud 8 (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE OpenStack Cloud 8 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE OpenStack Cloud 7 (s390x x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE OpenStack Cloud 7 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Workstation Extension 12-SP5 (x86_64): python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP3 (x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP12-SP3 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server for SAP 12-SP2 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP5 (s390x x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP5 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (s390x x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (s390x x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server12-SP3-BCL (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 python-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (s390x x86_64): libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP2-LTSS (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - HPE Helion Openstack 8 (x86_64): libpython2_7-1_0-2.7.18-28.67.1 libpython2_7-1_0-32bit-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-2.7.18-28.67.1 libpython2_7-1_0-debuginfo-32bit-2.7.18-28.67.1 python-2.7.18-28.67.1 python-32bit-2.7.18-28.67.1 python-base-2.7.18-28.67.1 python-base-32bit-2.7.18-28.67.1 python-base-debuginfo-2.7.18-28.67.1 python-base-debuginfo-32bit-2.7.18-28.67.1 python-base-debugsource-2.7.18-28.67.1 python-curses-2.7.18-28.67.1 python-curses-debuginfo-2.7.18-28.67.1 python-debuginfo-2.7.18-28.67.1 python-debuginfo-32bit-2.7.18-28.67.1 python-debugsource-2.7.18-28.67.1 python-demo-2.7.18-28.67.1 python-devel-2.7.18-28.67.1 python-gdbm-2.7.18-28.67.1 python-gdbm-debuginfo-2.7.18-28.67.1 python-idle-2.7.18-28.67.1 python-tk-2.7.18-28.67.1 python-tk-debuginfo-2.7.18-28.67.1 python-xml-2.7.18-28.67.1 python-xml-debuginfo-2.7.18-28.67.1 - HPE Helion Openstack 8 (noarch): python-doc-2.7.18-28.67.1 python-doc-pdf-2.7.18-28.67.1 References: https://www.suse.com/security/cve/CVE-2019-18348.html https://www.suse.com/security/cve/CVE-2021-23336.html https://bugzilla.suse.com/1182379 . SUSE's Security Update offers a moderate fix for Python flaws, mitigating risks associated with possible web cache poisoning issues.. SUSE Python Update, Web Cache Poisoning, Python Update Fix. . LinuxSecurity.com Team

Calendar%202 Mar 16, 2021 SuSE
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorysecurity updatefedora

Fedora 33: 2021-b76ede8f4d Critical Update: mingw-python3 Web Cache Threat

Update to python3-3.9.2, see https://docs.python.org/3/whatsnew/3.9.html for details.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-b76ede8f4d 2021-03-15 01:17:22.121076 --------------------------------------------------------------------------------Name : mingw-python3 Product : Fedora 33 Version : 3.9.2 Release : 1.fc33 URL : https://www.python.org/ Summary : MinGW Windows python3 Description : MinGW Windows python3 library. --------------------------------------------------------------------------------Update Information: Update to python3-3.9.2, see https://docs.python.org/3/whatsnew/3.9.html for details. --------------------------------------------------------------------------------ChangeLog: * Mon Feb 22 2021 Sandro Mani - 3.9.2-1 - Update to 3.9.2 * Mon Feb 15 2021 Sandro Mani - 3.9.1-4 - MACHDEP=win32 * Tue Jan 26 2021 Fedora Release Engineering - 3.9.1-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1928912 - CVE-2021-23336 mingw-python3: python: Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928912 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-b76ede8f4d' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Important Fedora Patch for mingw-python3 3.9.2 resolving potential web cache contamination issue is currently released. Please upgrade immediately.. fedora update,minGW library,web cache fix,python3 update,security advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Mar 14, 2021 •Critical Fedora
Banner 4 1028x280 1708121825 1771600306
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics