shield Security update for python3

SUSE-SLE-Module-Web-Scripting-12-2020-854

This update for python3 fixes the following issue: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urllib that was prone to denial of service via HTTP (bsc#1162367). - Fixed an issue with version missmatch (bsc#1162224). - Rename idle icons to idle3 in order to not conflict with python2 variant of the package. (bsc#1165894)

• Release Date
  Apr 2 2020
• References
  Bugzilla: 1165894, 1155094, 1162367, 1162224, 1162825
  CVEs: CVE-2019-9674, CVE-2020-8492, CVE-2019-18348
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 12 aarch64

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.45.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.45.1 lock rpm

Web and Scripting Module 12 ppc64le

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.45.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.45.1 lock rpm

Web and Scripting Module 12 s390x

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.45.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.45.1 lock rpm

Web and Scripting Module 12 x86_64

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.10-25.45.1 lock rpm

  python3
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.10-25.45.1 lock rpm lock src

  python3-curses
  Python Interface to the (N)Curses Library

  3.4.10-25.45.1 lock rpm