openSUSE-SU-2021:4104-1

openSUSE-SU-2021:4104-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc (bsc#1183374). - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server (bsc#1189241). - CVE-2021-3737: Fixed ReDoS in urllib.request (bsc#1189287). - We do not require python-rpm-macros package (bsc#1180125). - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). - Stop providing 'python' symbol, which means python2 currently (bsc#1185588). - Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668).

Fix available

Published

2021-12-16T10:14:25Z

Updated

2025-05-07T18:12:56.112758Z

Stack: system

Check your server →