p PatchFirst

SUSE-SU-2019:1352-2

SUSE-SU-2019:1352-2 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 to version 3.6.8 fixes the following issues: Security issue fixed: - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840). Non-security issue fixed: - Fixed broken debuginfo packages by switching off LTO and PGO optimization (bsc#1133452).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP1

    Affected ranges
    • ECOSYSTEM: < 3.6.8-3.16.2

    Update to 3.6.8-3.16.2

  • python3-base SUSE:Linux Enterprise Module for Basesystem 15 SP1

    Affected ranges
    • ECOSYSTEM: < 3.6.8-3.16.2

    Update to 3.6.8-3.16.2

  • python3-base SUSE:Linux Enterprise Module for Development Tools 15 SP1

    Affected ranges
    • ECOSYSTEM: < 3.6.8-3.16.2

    Update to 3.6.8-3.16.2

Original sources

Check your server →