p PatchFirst

SUSE-SU-2021:4104-1

SUSE-SU-2021:4104-1 · Security update for python3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc (bsc#1183374). - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server (bsc#1189241). - CVE-2021-3737: Fixed ReDoS in urllib.request (bsc#1189287). - We do not require python-rpm-macros package (bsc#1180125). - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). - Stop providing 'python' symbol, which means python2 currently (bsc#1185588). - Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • python3 SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-10.9.1

    Update to 3.6.15-10.9.1

  • python3-core SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-10.9.1

    Update to 3.6.15-10.9.1

  • python3-core SUSE:Linux Enterprise Module for Development Tools 15 SP3

    Affected ranges
    • ECOSYSTEM: < 3.6.15-10.9.1

    Update to 3.6.15-10.9.1

Original sources

Check your server →