SUSE-SU-2020:3597-1: Security update for python

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15-ESPOS python

SUSE:Linux Enterprise High Performance Computing 15-ESPOS python-base

SUSE:Linux Enterprise High Performance Computing 15-LTSS python

SUSE:Linux Enterprise High Performance Computing 15-LTSS python-base

SUSE:Linux Enterprise Module for Basesystem 15 SP1 python

SUSE:Linux Enterprise Module for Basesystem 15 SP1 python-base

SUSE:Linux Enterprise Module for Basesystem 15 SP2 python

SUSE:Linux Enterprise Module for Basesystem 15 SP2 python-base

SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 python

SUSE:Linux Enterprise Module for Desktop Applications 15 SP2 python

SUSE:Linux Enterprise Module for Python 2 15 SP1 python

SUSE:Linux Enterprise Module for Python 2 15 SP1 python-base

SUSE:Linux Enterprise Module for Python 2 15 SP2 python

SUSE:Linux Enterprise Module for Python 2 15 SP2 python-base

SUSE:Linux Enterprise Server 15-LTSS python

SUSE:Linux Enterprise Server 15-LTSS python-base

SUSE:Linux Enterprise Server for SAP Applications 15 python

SUSE:Linux Enterprise Server for SAP Applications 15 python-base

03 / CONNECTIONS

related CVE-2019-20916

upstream CVE-2019-20916

04 / EVIDENCE

Open Source Vulnerabilities SUSE-SU-2020:3597-1

This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)

05 / REFERENCES