Security update for python3
This update for python3 fixes the following issues: Update to 3.4.10 (jsc#SLE-9427, bsc#1159208) from 3.4.6: Security issues fixed: - Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063 - CVE-2017-1000158: Fix an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (bsc#1068664).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python3 fixes the following issues: Update to 3.4.10 (jsc#SLE-9427, bsc#1159208) from 3.4.6: Security issues fixed: - Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063 - CVE-2017-1000158: Fix an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (bsc#1068664).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1068664
- https://bugzilla.suse.com/1159208
- https://bugzilla.suse.com/1159623
- https://www.suse.com/security/cve/CVE-2012-0876
- https://www.suse.com/security/cve/CVE-2016-0718
- https://www.suse.com/security/cve/CVE-2016-4472
- https://www.suse.com/security/cve/CVE-2016-9063
- https://www.suse.com/security/cve/CVE-2017-1000158
- https://www.suse.com/security/cve/CVE-2017-9233
- https://www.suse.com/support/update/announcement/2020/suse-su-20200497-1/