SUSE-SU-2020:0114-1
- Source
- https://www.suse.com/support/update/announcement/2020/suse-su-20200114-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0114-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2020:0114-1
- Upstream
- Related
- Published
- 2020-01-16T09:12:11Z
- Modified
- 2025-05-02T04:03:50.781653Z
- Summary
- Security update for python3
- Details
-
This update for python3 to version 3.6.10 fixes the following issues:
- CVE-2017-18207: Fixed a denial of service in Waveread.readfmtchunk() (bsc#1083507).
- CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).
- CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).
- References
-
- https://www.suse.com/support/update/announcement/2020/suse-su-20200114-1/
- https://bugzilla.suse.com/1027282
- https://bugzilla.suse.com/1029377
- https://bugzilla.suse.com/1029902
- https://bugzilla.suse.com/1040164
- https://bugzilla.suse.com/1042670
- https://bugzilla.suse.com/1070853
- https://bugzilla.suse.com/1079761
- https://bugzilla.suse.com/1081750
- https://bugzilla.suse.com/1083507
- https://bugzilla.suse.com/1086001
- https://bugzilla.suse.com/1088004
- https://bugzilla.suse.com/1088009
- https://bugzilla.suse.com/1088573
- https://bugzilla.suse.com/1094814
- https://bugzilla.suse.com/1107030
- https://bugzilla.suse.com/1109663
- https://bugzilla.suse.com/1109847
- https://bugzilla.suse.com/1120644
- https://bugzilla.suse.com/1122191
- https://bugzilla.suse.com/1129346
- https://bugzilla.suse.com/1130840
- https://bugzilla.suse.com/1133452
- https://bugzilla.suse.com/1137942
- https://bugzilla.suse.com/1138459
- https://bugzilla.suse.com/1141853
- https://bugzilla.suse.com/1149121
- https://bugzilla.suse.com/1149792
- https://bugzilla.suse.com/1149955
- https://bugzilla.suse.com/1151490
- https://bugzilla.suse.com/1153238
- https://bugzilla.suse.com/1159035
- https://bugzilla.suse.com/1159622
- https://bugzilla.suse.com/637176
- https://bugzilla.suse.com/658604
- https://bugzilla.suse.com/673071
- https://bugzilla.suse.com/709442
- https://bugzilla.suse.com/743787
- https://bugzilla.suse.com/747125
- https://bugzilla.suse.com/751718
- https://bugzilla.suse.com/754447
- https://bugzilla.suse.com/754677
- https://bugzilla.suse.com/787526
- https://bugzilla.suse.com/809831
- https://bugzilla.suse.com/831629
- https://bugzilla.suse.com/834601
- https://bugzilla.suse.com/871152
- https://bugzilla.suse.com/885662
- https://bugzilla.suse.com/885882
- https://bugzilla.suse.com/917607
- https://bugzilla.suse.com/942751
- https://bugzilla.suse.com/951166
- https://bugzilla.suse.com/983582
- https://bugzilla.suse.com/984751
- https://bugzilla.suse.com/985177
- https://bugzilla.suse.com/985348
- https://bugzilla.suse.com/989523
- https://www.suse.com/security/cve/CVE-2011-3389
- https://www.suse.com/security/cve/CVE-2011-4944
- https://www.suse.com/security/cve/CVE-2012-0845
- https://www.suse.com/security/cve/CVE-2012-1150
- https://www.suse.com/security/cve/CVE-2013-1752
- https://www.suse.com/security/cve/CVE-2013-4238
- https://www.suse.com/security/cve/CVE-2014-2667
- https://www.suse.com/security/cve/CVE-2014-4650
- https://www.suse.com/security/cve/CVE-2016-0772
- https://www.suse.com/security/cve/CVE-2016-1000110
- https://www.suse.com/security/cve/CVE-2016-5636
- https://www.suse.com/security/cve/CVE-2016-5699
- https://www.suse.com/security/cve/CVE-2017-18207
- https://www.suse.com/security/cve/CVE-2018-1000802
- https://www.suse.com/security/cve/CVE-2018-1060
- https://www.suse.com/security/cve/CVE-2018-1061
- https://www.suse.com/security/cve/CVE-2018-14647
- https://www.suse.com/security/cve/CVE-2018-20406
- https://www.suse.com/security/cve/CVE-2018-20852
- https://www.suse.com/security/cve/CVE-2019-10160
- https://www.suse.com/security/cve/CVE-2019-15903
- https://www.suse.com/security/cve/CVE-2019-16056
- https://www.suse.com/security/cve/CVE-2019-16935
- https://www.suse.com/security/cve/CVE-2019-5010
- https://www.suse.com/security/cve/CVE-2019-9636
- https://www.suse.com/security/cve/CVE-2019-9947
Affected packages
SUSE:Linux Enterprise Module for Basesystem 15
python3
Package
- Name
- python3
- Purl
- pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.6.10-3.42.2
Ecosystem specific
{
"binaries": [
{
"python3-curses": "3.6.10-3.42.2",
"python3": "3.6.10-3.42.2",
"python3-dbm": "3.6.10-3.42.2",
"python3-tk": "3.6.10-3.42.2",
"python3-base": "3.6.10-3.42.2",
"python3-idle": "3.6.10-3.42.2",
"python3-devel": "3.6.10-3.42.2",
"libpython3_6m1_0": "3.6.10-3.42.2"
}
]
}python3-base
Package
- Name
- python3-base
- Purl
- pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.6.10-3.42.2
Ecosystem specific
{
"binaries": [
{
"python3-curses": "3.6.10-3.42.2",
"python3": "3.6.10-3.42.2",
"python3-dbm": "3.6.10-3.42.2",
"python3-tk": "3.6.10-3.42.2",
"python3-base": "3.6.10-3.42.2",
"python3-idle": "3.6.10-3.42.2",
"python3-devel": "3.6.10-3.42.2",
"libpython3_6m1_0": "3.6.10-3.42.2"
}
]
}SUSE:Linux Enterprise Module for Basesystem 15 SP1
python3
Package
- Name
- python3
- Purl
- pkg:rpm/suse/python3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.6.10-3.42.2
Ecosystem specific
{
"binaries": [
{
"python3-curses": "3.6.10-3.42.2",
"python3": "3.6.10-3.42.2",
"python3-dbm": "3.6.10-3.42.2",
"python3-tk": "3.6.10-3.42.2",
"python3-base": "3.6.10-3.42.2",
"python3-idle": "3.6.10-3.42.2",
"python3-devel": "3.6.10-3.42.2",
"libpython3_6m1_0": "3.6.10-3.42.2"
}
]
}python3-base
Package
- Name
- python3-base
- Purl
- pkg:rpm/suse/python3-base&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.6.10-3.42.2
Ecosystem specific
{
"binaries": [
{
"python3-curses": "3.6.10-3.42.2",
"python3": "3.6.10-3.42.2",
"python3-dbm": "3.6.10-3.42.2",
"python3-tk": "3.6.10-3.42.2",
"python3-base": "3.6.10-3.42.2",
"python3-idle": "3.6.10-3.42.2",
"python3-devel": "3.6.10-3.42.2",
"libpython3_6m1_0": "3.6.10-3.42.2"
}
]
}