p PatchFirst

SUSE-SU-2020:1339-1

SUSE-SU-2020:1339-1 · Security update for python

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).

Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • python SUSE:Linux Enterprise Module for Basesystem 15 SP1

    Affected ranges
    • ECOSYSTEM: < 2.7.17-7.38.1

    Update to 2.7.17-7.38.1

  • python-base SUSE:Linux Enterprise Module for Basesystem 15 SP1

    Affected ranges
    • ECOSYSTEM: < 2.7.17-7.38.1

    Update to 2.7.17-7.38.1

  • python SUSE:Linux Enterprise Module for Desktop Applications 15 SP1

    Affected ranges
    • ECOSYSTEM: < 2.7.17-7.38.1

    Update to 2.7.17-7.38.1

  • python SUSE:Linux Enterprise Module for Python 2 15 SP1

    Affected ranges
    • ECOSYSTEM: < 2.7.17-7.38.1

    Update to 2.7.17-7.38.1

  • python-base SUSE:Linux Enterprise Module for Python 2 15 SP1

    Affected ranges
    • ECOSYSTEM: < 2.7.17-7.38.1

    Update to 2.7.17-7.38.1

Original sources

Check your server →