This update provides Python 3.4.5, which brings many fixes and enhancements. The following security issues have been fixed :

  - CVE-2016-1000110: CGIHandler could have allowed setting     of HTTP_PROXY environment variable based on     user-supplied Proxy request header. (bsc#989523)

  - CVE-2016-0772: A vulnerability in smtplib could have     allowed a MITM attacker to perform a startTLS stripping     attack. (bsc#984751)

  - CVE-2016-5636: A heap overflow in Python's zipimport     module. (bsc#985177)

  - CVE-2016-5699: A header injection flaw in     urrlib2/urllib/httplib/http.client. (bsc#985348) The     update also includes the following non-security fixes :

  - Don't force 3rd party C extensions to be built with

    -Werror=declaration-after-statement. (bsc#951166)

  - Make urllib proxy var handling behave as usual on POSIX.
    (bsc#983582) For a comprehensive list of changes please     refer to the upstream change log:
    https://docs.python.org/3.4/whatsnew/changelog.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython     (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers     via CRLF sequences in a URL. (CVE-2016-5699)

Note that Nessus relies on the presence of the package as reported by the vendor.

- CVE-2016-0772 A vulnerability in smtplib allowing MITM     attacker to perform a startTLS stripping attack. smtplib     does not seem to raise an exception when the remote end     (smtp server) is capable of negotiating starttls but     fails to respond with 220 (ok) to an explicit call of     SMTP.starttls(). This may allow a malicious MITM to     perform a startTLS stripping attack if the client code     does not explicitly check the response code for     startTLS.

  - CVE-2016-5636 Issue #26171: Fix possible integer     overflow and heap corruption in zipimporter.get_data().

  - CVE-2016-5699 Protocol injection can occur not only if     an application sets a header based on user-supplied     values, but also if the application ever tries to fetch     a URL specified by an attacker (SSRF case) OR if the     application ever accesses any malicious web server     (redirection case).

For Debian 7 'Wheezy', these problems have been fixed in version 2.7.3-6+deb7u3.

We recommend that you upgrade your python2.7 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fixes for CVE-2016-0772 and CVE-2016-5699

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python fixes the following issues :

  - CVE-2016-0772: smtplib vulnerability opens startTLS     stripping attack (bsc#984751)

  - CVE-2016-5699: incorrect validation of HTTP headers     allow header injection (bsc#985348)

  - CVE-2016-1000110: HTTPoxy vulnerability in urllib, fixed     by disregarding HTTP_PROXY when REQUEST_METHOD is also     set (bsc#989523)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Guido Vranken reports :

HTTP header injection in urrlib2/urllib/httplib/http.client with newlines in header values, where newlines have a semantic consequence of denoting the start of an additional header line.

This update for python3 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3 to version 3.6.10 fixes the following issues :

  - CVE-2017-18207: Fixed a denial of service in     Wave_read._read_fmt_chunk() (bsc#1083507).

  - CVE-2019-16056: Fixed an issue where email parsing could     fail for multiple @ (bsc#1149955).

  - CVE-2019-15903: Fixed a heap-based buffer over-read in     libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

It was found that Python's httplib library (used urllib, urllib2 and others) did not properly check HTTP header input in HTTPConnection.putheader(). An attacker could use this flow to inject additional headers in a Python application that allows user provided header name or values. (CVE-2016-5699)

It was found that Python's smtplib library did not return an exception if StartTLS fails to establish correctly in the SMTP.starttls() function. An attacker with ability to launch an active man in the middle attack could strip out the STARTTLS command without generating an exception on the python SMTP client application, preventing the establishment of the TLS layer. (CVE-2016-0772)

A vulnerability was discovered in Python, in the built-in zipimporter.
A specially crafted zip file placed in a module path such that it would be loaded by a later 'import' statement could cause a heap overflow, leading to arbitrary code execution. (CVE-2016-5636)

Python was updated to fix three security issues.

The following vulnerabilities were fixed :

  - CVE-2016-0772: TLS stripping attack on smtplib     (bsc#984751)

  - CVE-2016-5636: zipimporter heap overflow (bsc#985177)

  - CVE-2016-5699: httplib header injection (bsc#985348)

This update also includes all upstream bug fixes and improvements in Python 2.7.12.

It also includes the following packaging changes :

  - reintroduce support for CA directory path

The following tracked packaging issues were fixed :

  - broken overflow checks (bsc#964182)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-1626 advisory.

    - Fix for CVE-2016-1000110 HTTPoxy attack     Resolves: rhbz#1359161
    - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)       Raise an error when STARTTLS fails (upstream patch)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
94969	SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2016:2859-1) (httpoxy)	Nessus	SuSE Local Security Checks	2016/11/18	2026/1/16	critical
219619	Linux Distros Unpatched Vulnerability : CVE-2016-5699	Nessus	Misc.	2025/3/4	2026/9/2	medium
91733	Debian DLA-522-1 : python2.7 security update	Nessus	Debian Local Security Checks	2016/6/22	2021/1/11	critical
92281	Fedora 22 : pypy3 (2016-b046b56518)	Nessus	Fedora Local Security Checks	2016/7/15	2026/2/2	medium
93438	SUSE SLES11 Security Update : python (SUSE-SU-2016:2270-1) (httpoxy)	Nessus	SuSE Local Security Checks	2016/9/12	2026/1/26	medium
94321	SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2016:2653-1) (httpoxy)	Nessus	SuSE Local Security Checks	2016/10/27	2026/1/20	critical
91911	FreeBSD : Python -- HTTP Header Injection in Python urllib (a61374fc-3a4d-11e6-a671-60a44ce6887b)	Nessus	FreeBSD Local Security Checks	2016/7/1	2021/1/4	medium
133036	SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/17	2024/3/29	critical
133172	openSUSE Security Update : python3 (openSUSE-2020-86) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	2020/1/22	2024/3/29	critical
92471	Amazon Linux AMI : python26 / python27,python34 (ALAS-2016-724)	Nessus	Amazon Linux Local Security Checks	2016/7/21	2026/1/30	critical
92595	openSUSE Security Update : python (openSUSE-2016-906)	Nessus	SuSE Local Security Checks	2016/7/28	2026/1/30	critical
93034	Oracle Linux 6 / 7 : python (ELSA-2016-1626)	Nessus	Oracle Linux Local Security Checks	2016/8/19	2026/1/28	medium

检测

插件搜索

critical

medium

critical

medium

medium

critical

medium

critical

critical

critical

critical

medium