SUSE-SU-2015:1344-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2015/suse-su-20151344-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:1344-1
Upstream
  • CVE-2013-1752
Related
Published
2015-06-30T13:56:32Z
Modified
2026-02-04T03:45:47Z
Summary
Security update for python
Details

This update to python 2.7.9 fixes the following issues:

  • python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64

From the version update to 2.7.9:

  • contains full backport of ssl module from Python 3.4 (PEP466)

  • HTTPS certificate validation enabled by default (PEP476)

  • SSLv3 disabled by default (bnc#901715)

  • backported ensurepip module (PEP477)

  • fixes several missing CVEs from last release: CVE-2013-1752, CVE-2013-1753

  • dropped upstreamed patches: python-2.7.6-poplib.patch, smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch

  • dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it with ssl module from Python 3

  • libffi was upgraded upstream, seems to contain our changes, so dropping libffi-ppc64le.diff as well

  • python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional 'import ssl' from test_urllib2_localnet that caused it to fail without ssl

  • skip test_thread in qemu_linux_user mode

From the version update to 2.7.8:

  • fixes CVE-2014-4650 directory traversal in CGIHTTPServer
  • fixes CVE-2014-7185 (bnc#898572) potential buffer overflow in buffer()

Also the DH parameters were increased to 2048 bit to fix logjam security issue (bsc#935856)

References

Affected packages

SUSE:Linux Enterprise Desktop 12
python

Package

Name
python
Purl
pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-devel": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
python-base

Package

Name
python-base
Purl
pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Desktop%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-devel": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
SUSE:Linux Enterprise Server 12
python

Package

Name
python
Purl
pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-32bit": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-base-32bit": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-demo": "2.7.9-14.1",
            "python-doc": "2.7.9-14.3",
            "python-doc-pdf": "2.7.9-14.3",
            "python-gdbm": "2.7.9-14.1",
            "python-idle": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
python-base

Package

Name
python-base
Purl
pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-32bit": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-base-32bit": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-demo": "2.7.9-14.1",
            "python-doc": "2.7.9-14.3",
            "python-doc-pdf": "2.7.9-14.3",
            "python-gdbm": "2.7.9-14.1",
            "python-idle": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
python-doc

Package

Name
python-doc
Purl
pkg:rpm/suse/python-doc&distro=SUSE%20Linux%20Enterprise%20Server%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.3

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-32bit": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-base-32bit": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-demo": "2.7.9-14.1",
            "python-doc": "2.7.9-14.3",
            "python-doc-pdf": "2.7.9-14.3",
            "python-gdbm": "2.7.9-14.1",
            "python-idle": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
SUSE:Linux Enterprise Server for SAP Applications 12
python

Package

Name
python
Purl
pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-32bit": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-base-32bit": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-demo": "2.7.9-14.1",
            "python-doc": "2.7.9-14.3",
            "python-doc-pdf": "2.7.9-14.3",
            "python-gdbm": "2.7.9-14.1",
            "python-idle": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
python-base

Package

Name
python-base
Purl
pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-32bit": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-base-32bit": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-demo": "2.7.9-14.1",
            "python-doc": "2.7.9-14.3",
            "python-doc-pdf": "2.7.9-14.3",
            "python-gdbm": "2.7.9-14.1",
            "python-idle": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
python-doc

Package

Name
python-doc
Purl
pkg:rpm/suse/python-doc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.3

Ecosystem specific 

{
    "binaries": [
        {
            "libpython2_7-1_0": "2.7.9-14.1",
            "libpython2_7-1_0-32bit": "2.7.9-14.1",
            "python": "2.7.9-14.1",
            "python-32bit": "2.7.9-14.1",
            "python-base": "2.7.9-14.1",
            "python-base-32bit": "2.7.9-14.1",
            "python-curses": "2.7.9-14.1",
            "python-demo": "2.7.9-14.1",
            "python-doc": "2.7.9-14.3",
            "python-doc-pdf": "2.7.9-14.3",
            "python-gdbm": "2.7.9-14.1",
            "python-idle": "2.7.9-14.1",
            "python-tk": "2.7.9-14.1",
            "python-xml": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
SUSE:Linux Enterprise Software Development Kit 12
python-base

Package

Name
python-base
Purl
pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "python-devel": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"
SUSE:Linux Enterprise Workstation Extension 12
python-base

Package

Name
python-base
Purl
pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.7.9-14.1

Ecosystem specific 

{
    "binaries": [
        {
            "python-devel": "2.7.9-14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:1344-1.json"