An update of the python3 package has been released.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4333-2 advisory.

    USN-4333-1 fixed vulnerabilities in Python. This update provides the corresponding update for Ubuntu 20.04     LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Python reports :

An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header.

This update for python to version 2.7.17 fixes the following issues :

Syncing with lots of upstream bug fixes and security fixes.

Bug fixes :

CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).

CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094).

CVE-2020-8492: Fixed a regular expression in urllib that was prone to denial of service via HTTP (bsc#1162367).

Fixed mismatches between libpython and python-base versions (bsc#1162224).

Fixed segfault in libpython2.7.so.1 (bsc#1073748).

Unified packages among openSUSE:Factory and SLE versions (bsc#1159035).

Added idle.desktop and idle.appdata.xml to provide IDLE in menus (bsc#1153830).

Excluded tsl_check files from python-base to prevent file conflict with python-strict-tls-checks package (bsc#945401).

Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894).

Additionally a new 'shared-python-startup' package is provided containing startup files.

python-rpm-macros was updated to fix :

Do not write .pyc files for tests (bsc#1171561)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of python27 installed on the remote host is prior to 2.7.18-1.138. The version of python34 installed on the remote host is prior to 3.4.10-1.50. The version of python35 installed on the remote host is prior to 3.5.7-1.26. The version of python36 installed on the remote host is prior to 3.6.11-1.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1407 advisory.

    Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1     allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client     because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking. (CVE-2020-8492)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python34 installed on the remote host is prior to 3.4.10-1.51. The version of python35 installed on the remote host is prior to 3.5.9-1.27. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1429 advisory.

    In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an     infinite loop when opened by tarfile.open, because _proc_pax lacks header validation. (CVE-2019-20907)

    An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0.
    CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument     to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP     header. This is similar to theCVE-2019-9740query string issue and theCVE-2019-9947path string issue. (This     is not exploitable when glibc hasCVE-2016-10739fixed.) A CRLF injection flaw was discovered in python in     the way URLs are handled when doing an HTTP/HTTPS connection (e.g. through urlopen() or HTTPConnection).
    An attacker who can control the url parameter passed to urlopen method in the urllib/urllib2 modules can     inject CRLF sequences and HTTP headers by abusing the host part of the URL. (CVE-2019-18348)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for python3 fixes the following issues :

Fixed CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support calls eval() on content retrieved via HTTP.

Change setuptools and pip version numbers according to new wheels

Handful of changes to make python36 compatible with SLE15 and SLE12 (jsc#ECO-2799, jsc#SLE-13738)

add triplets for mips-r6 and riscv

RISC-V needs CTYPES_PASS_BY_REF_HACK

Update to 3.6.12 (bsc#1179193)

Ensure python3.dll is loaded from correct locations when Python is embedded

The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This resulted in always causing hash collisions. The fix uses hash() to generate hash values for the tuple of (address, mask length, network address).

Prevent http header injection by rejecting control characters in http.client.putrequest(&acirc;&#128;&brvbar;).

Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing.

Avoid infinite loop when reading specially crafted TAR files using the tarfile module

This release also fixes CVE-2020-26116 (bsc#1177211) and CVE-2019-20907 (bsc#1174091).

Update to 3.6.11 :

Disallow CR or LF in email.headerregistry. Address arguments to guard against header injection attacks.

Disallow control characters in hostnames in http.client, addressing CVE-2019-18348. Such potentially malicious header injection URLs now cause a InvalidURL to be raised. (bsc#1155094)

CVE-2020-8492: The AbstractBasicAuthHandler class of the urllib.request module uses an inefficient regular expression which can be exploited by an attacker to cause a denial of service. Fix the regex to prevent the catastrophic backtracking. Vulnerability reported by Ben Caller and Matt Schwager.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
135405	Photon OS 3.0: Python3 PHSA-2020-3.0-0073	Nessus	PhotonOS Local Security Checks	2020/4/12	2025/8/22	medium
136281	Ubuntu 20.04 LTS : Python vulnerabilities (USN-4333-2)	Nessus	Ubuntu Local Security Checks	2020/5/1	2024/10/29	medium
136443	FreeBSD : Python -- CRLF injection via the host part of the url passed to urlopen() (ca595a25-91d8-11ea-b470-080027846a02)	Nessus	FreeBSD Local Security Checks	2020/5/11	2024/3/13	medium
137580	SUSE SLES12 Security Update : python (SUSE-SU-2020:1524-1)	Nessus	SuSE Local Security Checks	2020/6/18	2024/3/6	medium
139087	Amazon Linux AMI : python27, python34, python35, python36 (ALAS-2020-1407)	Nessus	Amazon Linux Local Security Checks	2020/7/30	2024/12/11	medium
140089	Amazon Linux AMI : python34, python35 (ALAS-2020-1429)	Nessus	Amazon Linux Local Security Checks	2020/8/31	2024/12/11	medium
144586	SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:3930-1)	Nessus	SuSE Local Security Checks	2020/12/24	2024/1/31	critical

检测

插件搜索

medium

medium

medium

medium

medium

medium

critical