SUSE-SU-2019:0223-1
- Source
- https://www.suse.com/support/update/announcement/2019/suse-su-20190223-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:0223-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2019:0223-1
- Upstream
- Related
- Published
- 2019-02-01T14:42:21Z
- Modified
- 2026-03-11T07:05:01Z
- Summary
- Security update for python
- Details
-
This update for python fixes the following issues:
Security issues fixed:
- CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack (bsc#984751)
- CVE-2016-5636: heap overflow when importing malformed zip files (bsc#985177)
- CVE-2016-5699: incorrect validation of HTTP headers allow header injection (bsc#985348)
- CVE-2016-1000110: HTTPoxy vulnerability in urllib, fixed by disregarding HTTP_PROXY when REQUEST_METHOD is also set (bsc#989523)
- CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
- References
-
- https://www.suse.com/support/update/announcement/2019/suse-su-20190223-1/
- https://bugzilla.suse.com/1122191
- https://bugzilla.suse.com/984751
- https://bugzilla.suse.com/985177
- https://bugzilla.suse.com/985348
- https://bugzilla.suse.com/989523
- https://www.suse.com/security/cve/CVE-2016-0772
- https://www.suse.com/security/cve/CVE-2016-1000110
- https://www.suse.com/security/cve/CVE-2016-5636
- https://www.suse.com/security/cve/CVE-2016-5699
- https://www.suse.com/security/cve/CVE-2019-5010
Affected packages
SUSE:Linux Enterprise Server 12-LTSS
python
Package
- Name
- python
- Purl
- pkg:rpm/suse/python&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.7.9-16.7.1
Ecosystem specific
{
"binaries": [
{
"libpython2_7-1_0": "2.7.9-16.7.2",
"libpython2_7-1_0-32bit": "2.7.9-16.7.2",
"python": "2.7.9-16.7.1",
"python-32bit": "2.7.9-16.7.1",
"python-base": "2.7.9-16.7.2",
"python-base-32bit": "2.7.9-16.7.2",
"python-curses": "2.7.9-16.7.1",
"python-demo": "2.7.9-16.7.1",
"python-doc": "2.7.9-16.7.2",
"python-doc-pdf": "2.7.9-16.7.2",
"python-gdbm": "2.7.9-16.7.1",
"python-idle": "2.7.9-16.7.1",
"python-tk": "2.7.9-16.7.1",
"python-xml": "2.7.9-16.7.2"
}
]
}python-base
Package
- Name
- python-base
- Purl
- pkg:rpm/suse/python-base&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.7.9-16.7.2
Ecosystem specific
{
"binaries": [
{
"libpython2_7-1_0": "2.7.9-16.7.2",
"libpython2_7-1_0-32bit": "2.7.9-16.7.2",
"python": "2.7.9-16.7.1",
"python-32bit": "2.7.9-16.7.1",
"python-base": "2.7.9-16.7.2",
"python-base-32bit": "2.7.9-16.7.2",
"python-curses": "2.7.9-16.7.1",
"python-demo": "2.7.9-16.7.1",
"python-doc": "2.7.9-16.7.2",
"python-doc-pdf": "2.7.9-16.7.2",
"python-gdbm": "2.7.9-16.7.1",
"python-idle": "2.7.9-16.7.1",
"python-tk": "2.7.9-16.7.1",
"python-xml": "2.7.9-16.7.2"
}
]
}python-doc
Package
- Name
- python-doc
- Purl
- pkg:rpm/suse/python-doc&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.7.9-16.7.2
Ecosystem specific
{
"binaries": [
{
"libpython2_7-1_0": "2.7.9-16.7.2",
"libpython2_7-1_0-32bit": "2.7.9-16.7.2",
"python": "2.7.9-16.7.1",
"python-32bit": "2.7.9-16.7.1",
"python-base": "2.7.9-16.7.2",
"python-base-32bit": "2.7.9-16.7.2",
"python-curses": "2.7.9-16.7.1",
"python-demo": "2.7.9-16.7.1",
"python-doc": "2.7.9-16.7.2",
"python-doc-pdf": "2.7.9-16.7.2",
"python-gdbm": "2.7.9-16.7.1",
"python-idle": "2.7.9-16.7.1",
"python-tk": "2.7.9-16.7.1",
"python-xml": "2.7.9-16.7.2"
}
]
}