SUSE-SU-2019:2050-1
SUSE-SU-2019:2050-1 · Security update for python3
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853). Non-security issue fixed: - Fixed an issue where the SIGINT signal was ignored or not handled (bsc#1094814).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
python3 SUSE:Linux Enterprise Module for Basesystem 15
- Affected ranges
- ECOSYSTEM: < 3.6.8-3.23.1
Update to 3.6.8-3.23.1
python3-base SUSE:Linux Enterprise Module for Basesystem 15
- Affected ranges
- ECOSYSTEM: < 3.6.8-3.23.1
Update to 3.6.8-3.23.1
python3 SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Affected ranges
- ECOSYSTEM: < 3.6.8-3.23.1
Update to 3.6.8-3.23.1
python3-base SUSE:Linux Enterprise Module for Basesystem 15 SP1
- Affected ranges
- ECOSYSTEM: < 3.6.8-3.23.1
Update to 3.6.8-3.23.1
python3-base SUSE:Linux Enterprise Module for Development Tools 15
- Affected ranges
- ECOSYSTEM: < 3.6.8-3.23.1
Update to 3.6.8-3.23.1
python3-base SUSE:Linux Enterprise Module for Development Tools 15 SP1
- Affected ranges
- ECOSYSTEM: < 3.6.8-3.23.1
Update to 3.6.8-3.23.1
Original sources
- https://www.suse.com/support/update/announcement/2019/suse-su-20192050-1/
- https://bugzilla.suse.com/1094814
- https://bugzilla.suse.com/1138459
- https://bugzilla.suse.com/1141853
- https://www.suse.com/security/cve/CVE-2018-20852
- https://www.suse.com/security/cve/CVE-2019-10160
- https://osv.dev/vulnerability/SUSE-SU-2019:2050-1