Lucene search

K
suseSuseOPENSUSE-SU-2021:0270-1
HistoryFeb 10, 2021 - 12:00 a.m.

Security update for python (important)

2021-02-1000:00:00
lists.opensuse.org
26
python
security update
buffer overflow
remote code execution
wheel vulnerability
suse
cve-2021-3177
cve-2019-20916
suse:sle-15:update
opensuse leap 15.2

EPSS

0.031

Percentile

91.2%

An update that solves two vulnerabilities and has one
errata is now available.

Description:

This update for python fixes the following issues:

  • buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to
    remote code execution (bsc#1181126, CVE-2021-3177).
  • Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in
    their correct form (bsc#1180686).

This update was imported from the SUSE:SLE-15:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or β€œzypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2021-270=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2i586<Β - openSUSE Leap 15.2 (i586 x86_64):- openSUSE Leap 15.2 (i586 x86_64):.i586.rpm
openSUSE Leap15.2x86_64<Β - openSUSE Leap 15.2 (i586 x86_64):- openSUSE Leap 15.2 (i586 x86_64):.x86_64.rpm
openSUSE Leap15.2noarch<Β - openSUSE Leap 15.2 (noarch):- openSUSE Leap 15.2 (noarch):.noarch.rpm
openSUSE Leap15.2x86_64<Β - openSUSE Leap 15.2 (x86_64):- openSUSE Leap 15.2 (x86_64):.x86_64.rpm