FlawAtlas
Search the atlas
SUSE-SU-2019:2743-1 Not scored

Security update for python

This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).

Exploit probability Not scored
Published October 22, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 python
SUSE:Linux Enterprise Module for Basesystem 15 python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1 python
SUSE:Linux Enterprise Module for Basesystem 15 SP1 python-base
SUSE:Linux Enterprise Module for Desktop Applications 15 python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 python
SUSE:Linux Enterprise Module for Python 2 15 SP1 python
SUSE:Linux Enterprise Module for Python 2 15 SP1 python-base

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:2743-1

This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).

View original source

05 / REFERENCES

Further evidence