← Search the atlas
SUSE-SU-2020:1524-1
Not scored
Security update for python
This update for python to version 2.7.17 fixes the following issues:
Syncing with lots of upstream bug fixes and security fixes.
Bug fixes:
- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094).
- CVE-2020-8492: Fixed a regular expression in urllib that was prone to denial of service via HTTP (bsc#1162367).
- Fixed mismatches between libpython and python-base versions (bsc#1162224).
- Fixed segfault in libpython2.7.so.1 (bsc#1073748).
- Unified packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Added idle.desktop and idle.appdata.xml to provide IDLE in menus (bsc#1153830).
- Excluded tsl_check files from python-base to prevent file conflict with python-strict-tls-checks package (bsc#945401).
- Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894).
Additionally a new 'shared-python-startup' package is provided containing startup files.
python-rpm-macros was updated to fix:
- Do not write .pyc files for tests (bsc#1171561)
Exploit probability
Not scored
Published
June 3, 2020
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
shared-python-startup
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
python
SUSE:Linux Enterprise Server 12 SP2-BCL
python-rpm-macros
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
python
SUSE:OpenStack Cloud 8
python-base
SUSE:Linux Enterprise Server 12 SP2-LTSS
shared-python-startup
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
python
SUSE:OpenStack Cloud Crowbar 8
shared-python-startup
SUSE:Linux Enterprise Server 12 SP3-BCL
python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
python
SUSE:Linux Enterprise Server 12 SP4
shared-python-startup
SUSE:HPE Helion OpenStack 8
python
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
python-doc
SUSE:Linux Enterprise Software Development Kit 12 SP4
python-rpm-macros
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
python-doc
SUSE:OpenStack Cloud Crowbar 8
python-rpm-macros
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
shared-python-startup
SUSE:Linux Enterprise Server 12 SP3-LTSS
python
SUSE:OpenStack Cloud 7
python
SUSE:HPE Helion OpenStack 8
python-rpm-macros
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
python-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
shared-python-startup
SUSE:Enterprise Storage 5
shared-python-startup
SUSE:OpenStack Cloud 7
python-rpm-macros
SUSE:Linux Enterprise Server 12 SP2-LTSS
python-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
python-rpm-macros
SUSE:HPE Helion OpenStack 8
shared-python-startup
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
python
SUSE:Linux Enterprise Server 12 SP4
python-base
SUSE:Linux Enterprise Workstation Extension 12 SP5
python-base
SUSE:Enterprise Storage 5
python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
python-rpm-macros
SUSE:OpenStack Cloud 8
shared-python-startup
SUSE:Linux Enterprise Server 12 SP5
python
SUSE:Linux Enterprise Server 12 SP3-BCL
python-base
SUSE:Linux Enterprise Server 12 SP5
shared-python-startup
SUSE:Linux Enterprise Server 12 SP3-BCL
python-rpm-macros
SUSE:Linux Enterprise Server 12 SP1-LTSS
python-rpm-macros
SUSE:OpenStack Cloud Crowbar 8
python
SUSE:Linux Enterprise Server 12 SP3-LTSS
python-base
SUSE:Linux Enterprise Server 12 SP2-BCL
python-base
SUSE:Linux Enterprise Server 12 SP1-LTSS
python-base
SUSE:OpenStack Cloud 8
python
SUSE:Linux Enterprise Server 12 SP3-BCL
shared-python-startup
SUSE:Enterprise Storage 5
python-rpm-macros
SUSE:OpenStack Cloud Crowbar 8
python-base
SUSE:Linux Enterprise Workstation Extension 12 SP4
python-base
SUSE:Linux Enterprise Server 12 SP3-LTSS
python-doc
SUSE:Linux Enterprise Server 12 SP1-LTSS
python-doc
SUSE:OpenStack Cloud 7
python-base
SUSE:OpenStack Cloud 7
python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
python-base
SUSE:OpenStack Cloud 8
python-doc
SUSE:Linux Enterprise Server 12 SP3-BCL
python
SUSE:Linux Enterprise Server 12 SP2-LTSS
python-doc
SUSE:Linux Enterprise Server 12 SP2-LTSS
python-rpm-macros
SUSE:Linux Enterprise Server 12 SP1-LTSS
shared-python-startup
SUSE:OpenStack Cloud Crowbar 8
python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
python-doc
SUSE:Enterprise Storage 5
python-base
SUSE:Linux Enterprise Server 12 SP4
python-rpm-macros
SUSE:OpenStack Cloud 8
python-rpm-macros
SUSE:Linux Enterprise Server 12 SP2-BCL
shared-python-startup
SUSE:Linux Enterprise Server 12 SP1-LTSS
python
SUSE:Enterprise Storage 5
python
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
python-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
python-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
shared-python-startup
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
shared-python-startup
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
python-rpm-macros
SUSE:Linux Enterprise Server 12 SP5
python-rpm-macros
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
python-doc
SUSE:OpenStack Cloud 7
shared-python-startup
SUSE:Linux Enterprise Software Development Kit 12 SP5
python-rpm-macros
SUSE:HPE Helion OpenStack 8
python-base
SUSE:Linux Enterprise Server 12 SP5
python-base
SUSE:Linux Enterprise Server 12 SP4
python
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
python-base
SUSE:Linux Enterprise Server 12 SP3-LTSS
shared-python-startup
SUSE:Linux Enterprise Server 12 SP3-LTSS
python-rpm-macros
SUSE:Linux Enterprise Server 12 SP4
python-doc
SUSE:Linux Enterprise Server 12 SP2-LTSS
python
SUSE:Linux Enterprise Server 12 SP5
python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
python-rpm-macros
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
python-rpm-macros
SUSE:HPE Helion OpenStack 8
python-doc
SUSE:Linux Enterprise Server 12 SP2-BCL
python
SUSE:Linux Enterprise Server 12 SP2-BCL
python-doc
SUSE:Linux Enterprise Software Development Kit 12 SP4
python-base
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2020:1524-1
This update for python to version 2.7.17 fixes the following issues:
Syncing with lots of upstream bug fixes and security fixes.
Bug fixes:
- CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094).
- CVE-2020-8492: Fixed a regular expression in urllib that was prone to denial of service via HTTP (bsc#1162367).
- Fixed mismatches between libpython and python-base versions (bsc#1162224).
- Fixed segfault in libpython2.7.so.1 (bsc#1073748).
- Unified packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Added idle.desktop and idle.appdata.xml to provide IDLE in menus (bsc#1153830).
- Excluded tsl_check files from python-base to prevent file conflict with python-strict-tls-checks package (bsc#945401).
- Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894).
Additionally a new 'shared-python-startup' package is provided containing startup files.
python-rpm-macros was updated to fix:
- Do not write .pyc files for tests (bsc#1171561)
View original source ↗
05 / REFERENCES
Further evidence