FlawAtlas
Search the atlas
SUSE-SU-2019:2053-2 Not scored

Security update for python3

This update for python3 fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML document (bsc#1109847). - CVE-2018-1000802: Fixed a command injection in the shutil module (bsc#1109663).

Exploit probability Not scored
Published August 6, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 5 python3
SUSE:Enterprise Storage 5 python3-base
SUSE:HPE Helion OpenStack 8 python3
SUSE:HPE Helion OpenStack 8 python3-base
SUSE:Linux Enterprise Server 12 SP3-BCL python3
SUSE:Linux Enterprise Server 12 SP3-BCL python3-base
SUSE:Linux Enterprise Server 12 SP3-LTSS python3
SUSE:Linux Enterprise Server 12 SP3-LTSS python3-base
SUSE:OpenStack Cloud Crowbar 8 python3
SUSE:OpenStack Cloud Crowbar 8 python3-base

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:2053-2

This update for python3 fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML document (bsc#1109847). - CVE-2018-1000802: Fixed a command injection in the shutil module (bsc#1109663).

View original source

05 / REFERENCES

Further evidence