Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). This update was imported from the SUSE:SLE-15:Update update project.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1130840
- https://bugzilla.suse.com/1149955
- https://bugzilla.suse.com/1153238
- https://lists.opensuse.org/archives/list/[email protected]/thread/DUNCE6TBYMZ75QK6G6S6XVUETIWV7IX7/#DUNCE6TBYMZ75QK6G6S6XVUETIWV7IX7
- https://www.suse.com/security/cve/CVE-2019-16056
- https://www.suse.com/security/cve/CVE-2019-16935
- https://www.suse.com/security/cve/CVE-2019-9947