openSUSE-SU-2021:3489-1
openSUSE-SU-2021:3489-1 · Security update for python
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
Fix available
- Published
- Updated
Affected products and versions
python openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 2.7.18-33.1
Update to 2.7.18-33.1
python-base openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 2.7.18-33.1
Update to 2.7.18-33.1
python-doc openSUSE:Leap 15.3
- Affected ranges
- ECOSYSTEM: < 2.7.18-33.1
Update to 2.7.18-33.1
Original sources
- https://lists.opensuse.org/archives/list/[email protected]/thread/WU6W7MZS6RUFRYSZTBDYHTA2EBBSY2QJ/
- https://bugzilla.suse.com/1189241
- https://bugzilla.suse.com/1189287
- https://www.suse.com/security/cve/CVE-2021-3733
- https://www.suse.com/security/cve/CVE-2021-3737
- https://osv.dev/vulnerability/openSUSE-SU-2021:3489-1