gpp_maybe Security update for python3

SUSE-SLE-Module-Web-Scripting-12-2020-2699

This update for python3 fixes the following issues: - CVE-2019-20907: Fixed denial of service by avoiding possible infinite loop in specifically crafted tarball (bsc#1174091). - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service (bsc#1173274). - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840). - If the locale is "C", coerce it to C.UTF-8 (bsc#1162423).

• Release Date
  Sep 21 2020
• References
  Bugzilla: 1088009, 1130840, 1174091, 1088004, 1162423, 1141853, 1173274, 1153238, 1174701, 1149955
  CVEs: CVE-2020-14422, CVE-2018-14647, CVE-2019-16935, CVE-2019-20907, CVE-2019-16056, CVE-2019-9947, CVE-2018-20852
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 12 ppc64le

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.52.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.52.1 lock rpm

Web and Scripting Module 12 aarch64

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.52.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.52.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.52.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.52.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.52.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.52.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.52.1 lock rpm