Recommended update for python3 SUSE Patch security@suse.de SUSE Security Team SUSE-RU-2020:1342-1 Final 1 1 2020-05-19T11:27:47Z current 2020-05-19T11:27:47Z 2020-05-19T11:27:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for python3 This update for python3 fixes the following issues: - Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2020-1342,Container caasp/v4/hyperkube:v1.17.17-2020-1342,Container caasp/v4/k8s-sidecar:0.1.75-2020-1342,Container ses/6/cephcsi/cephcsi:latest-2020-1342,Container ses/6/rook/ceph:latest-2020-1342,Container ses/7/ceph/ceph:latest-2020-1342,Container ses/7/cephcsi/cephcsi:latest-2020-1342,Container ses/7/prometheus-webhook-snmp:latest-2020-1342,Container ses/7/rook/ceph:latest-2020-1342,Container suse/sle-micro/5.0/toolbox:latest-2020-1342,Container suse/sles/15.2/virt-handler:0.38.1-2020-1342,Container suse/sles/15.2/virt-launcher:0.38.1-2020-1342,SUSE-2020-1342,SUSE-SLE-Module-Basesystem-15-SP1-2020-1342,SUSE-SLE-Module-Development-Tools-15-SP1-2020-1342,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-1342 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/-2020-1342/suse-ru-20201342-1/ Link for SUSE-RU-2020:1342-1 https://lists.suse.com/pipermail/sle-updates/2020-May/014755.html E-Mail link for SUSE-RU-2020:1342-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1149955 SUSE Bug 1149955 https://bugzilla.suse.com/1165894 SUSE Bug 1165894 https://www.suse.com/security/cve/CVE-2019-16056/ SUSE CVE CVE-2019-16056 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/ceph/ceph:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/sle-micro/5.0/toolbox:latest Container suse/sles/15.2/virt-handler:0.38.1 Container suse/sles/15.2/virt-launcher:0.38.1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 libpython3_6m1_0-3.6.10-3.53.1 python3-3.6.10-3.53.1 python3-base-3.6.10-3.53.1 python3-curses-3.6.10-3.53.1 libpython3_6m1_0-32bit-3.6.10-3.53.1 libpython3_6m1_0-64bit-3.6.10-3.53.1 python3-32bit-3.6.10-3.53.1 python3-64bit-3.6.10-3.53.1 python3-base-32bit-3.6.10-3.53.1 python3-base-64bit-3.6.10-3.53.1 python3-dbm-3.6.10-3.53.1 python3-devel-3.6.10-3.53.1 python3-doc-3.6.10-3.53.2 python3-idle-3.6.10-3.53.1 python3-testsuite-3.6.10-3.53.1 python3-tk-3.6.10-3.53.1 python3-tools-3.6.10-3.53.1 libpython3_6m1_0-3.6.10-3.53.1 as a component of Container caasp/v4/389-ds:1.4.2 python3-3.6.10-3.53.1 as a component of Container caasp/v4/389-ds:1.4.2 python3-base-3.6.10-3.53.1 as a component of Container caasp/v4/389-ds:1.4.2 libpython3_6m1_0-3.6.10-3.53.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-3.6.10-3.53.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-base-3.6.10-3.53.1 as a component of Container caasp/v4/hyperkube:v1.17.17 libpython3_6m1_0-3.6.10-3.53.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 python3-3.6.10-3.53.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 python3-base-3.6.10-3.53.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 libpython3_6m1_0-3.6.10-3.53.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-3.6.10-3.53.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-base-3.6.10-3.53.1 as a component of Container ses/6/cephcsi/cephcsi:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container ses/6/rook/ceph:latest python3-3.6.10-3.53.1 as a component of Container ses/6/rook/ceph:latest python3-base-3.6.10-3.53.1 as a component of Container ses/6/rook/ceph:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container ses/7/ceph/ceph:latest python3-3.6.10-3.53.1 as a component of Container ses/7/ceph/ceph:latest python3-base-3.6.10-3.53.1 as a component of Container ses/7/ceph/ceph:latest python3-curses-3.6.10-3.53.1 as a component of Container ses/7/ceph/ceph:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container ses/7/cephcsi/cephcsi:latest python3-3.6.10-3.53.1 as a component of Container ses/7/cephcsi/cephcsi:latest python3-base-3.6.10-3.53.1 as a component of Container ses/7/cephcsi/cephcsi:latest python3-curses-3.6.10-3.53.1 as a component of Container ses/7/cephcsi/cephcsi:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container ses/7/prometheus-webhook-snmp:latest python3-base-3.6.10-3.53.1 as a component of Container ses/7/prometheus-webhook-snmp:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container ses/7/rook/ceph:latest python3-3.6.10-3.53.1 as a component of Container ses/7/rook/ceph:latest python3-base-3.6.10-3.53.1 as a component of Container ses/7/rook/ceph:latest python3-curses-3.6.10-3.53.1 as a component of Container ses/7/rook/ceph:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container suse/sle-micro/5.0/toolbox:latest python3-base-3.6.10-3.53.1 as a component of Container suse/sle-micro/5.0/toolbox:latest libpython3_6m1_0-3.6.10-3.53.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 python3-base-3.6.10-3.53.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 libpython3_6m1_0-3.6.10-3.53.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 python3-base-3.6.10-3.53.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 libpython3_6m1_0-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-base-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-curses-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-dbm-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-devel-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-idle-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-testsuite-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-tk-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 python3-tools-3.6.10-3.53.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally. CVE-2019-16056 Container caasp/v4/389-ds:1.4.2:libpython3_6m1_0-3.6.10-3.53.1 Container caasp/v4/389-ds:1.4.2:python3-3.6.10-3.53.1 Container caasp/v4/389-ds:1.4.2:python3-base-3.6.10-3.53.1 Container caasp/v4/hyperkube:v1.17.17:libpython3_6m1_0-3.6.10-3.53.1 Container caasp/v4/hyperkube:v1.17.17:python3-3.6.10-3.53.1 Container caasp/v4/hyperkube:v1.17.17:python3-base-3.6.10-3.53.1 Container caasp/v4/k8s-sidecar:0.1.75:libpython3_6m1_0-3.6.10-3.53.1 Container caasp/v4/k8s-sidecar:0.1.75:python3-3.6.10-3.53.1 Container caasp/v4/k8s-sidecar:0.1.75:python3-base-3.6.10-3.53.1 Container ses/6/cephcsi/cephcsi:latest:libpython3_6m1_0-3.6.10-3.53.1 Container ses/6/cephcsi/cephcsi:latest:python3-3.6.10-3.53.1 Container ses/6/cephcsi/cephcsi:latest:python3-base-3.6.10-3.53.1 Container ses/6/rook/ceph:latest:libpython3_6m1_0-3.6.10-3.53.1 Container ses/6/rook/ceph:latest:python3-3.6.10-3.53.1 Container ses/6/rook/ceph:latest:python3-base-3.6.10-3.53.1 Container ses/7/ceph/ceph:latest:libpython3_6m1_0-3.6.10-3.53.1 Container ses/7/ceph/ceph:latest:python3-3.6.10-3.53.1 Container ses/7/ceph/ceph:latest:python3-base-3.6.10-3.53.1 Container ses/7/ceph/ceph:latest:python3-curses-3.6.10-3.53.1 Container ses/7/cephcsi/cephcsi:latest:libpython3_6m1_0-3.6.10-3.53.1 Container ses/7/cephcsi/cephcsi:latest:python3-3.6.10-3.53.1 Container ses/7/cephcsi/cephcsi:latest:python3-base-3.6.10-3.53.1 Container ses/7/cephcsi/cephcsi:latest:python3-curses-3.6.10-3.53.1 Container ses/7/prometheus-webhook-snmp:latest:libpython3_6m1_0-3.6.10-3.53.1 Container ses/7/prometheus-webhook-snmp:latest:python3-base-3.6.10-3.53.1 Container ses/7/rook/ceph:latest:libpython3_6m1_0-3.6.10-3.53.1 Container ses/7/rook/ceph:latest:python3-3.6.10-3.53.1 Container ses/7/rook/ceph:latest:python3-base-3.6.10-3.53.1 Container ses/7/rook/ceph:latest:python3-curses-3.6.10-3.53.1 Container suse/sle-micro/5.0/toolbox:latest:libpython3_6m1_0-3.6.10-3.53.1 Container suse/sle-micro/5.0/toolbox:latest:python3-base-3.6.10-3.53.1 Container suse/sles/15.2/virt-handler:0.38.1:libpython3_6m1_0-3.6.10-3.53.1 Container suse/sles/15.2/virt-handler:0.38.1:python3-base-3.6.10-3.53.1 Container suse/sles/15.2/virt-launcher:0.38.1:libpython3_6m1_0-3.6.10-3.53.1 Container suse/sles/15.2/virt-launcher:0.38.1:python3-base-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:libpython3_6m1_0-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-base-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-curses-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-dbm-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-devel-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-idle-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-testsuite-3.6.10-3.53.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:python3-tk-3.6.10-3.53.1 SUSE Linux Enterprise Module for Development Tools 15 SP1:python3-tools-3.6.10-3.53.1 moderate 5 AV:N/AC:L/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/-2020-1342/suse-ru-20201342-1/ https://www.suse.com/security/cve/CVE-2019-16056.html CVE-2019-16056 https://bugzilla.suse.com/1149955 SUSE Bug 1149955