p PatchFirst

SUSE-SU-2020:0467-1

SUSE-SU-2020:0467-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367). Non-security issue fixed: - If the locale is 'C', coerce it to C.UTF-8 (bsc#1162423).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP1

    Affected ranges
    • ECOSYSTEM: < 3.6.10-3.47.2

    Update to 3.6.10-3.47.2

  • python3-base SUSE:Linux Enterprise Module for Basesystem 15 SP1

    Affected ranges
    • ECOSYSTEM: < 3.6.10-3.47.2

    Update to 3.6.10-3.47.2

  • python3-base SUSE:Linux Enterprise Module for Development Tools 15 SP1

    Affected ranges
    • ECOSYSTEM: < 3.6.10-3.47.2

    Update to 3.6.10-3.47.2

Original sources

Check your server →