Security update for python3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1557-1 Final 1 1 2021-05-11T07:50:36Z current 2021-05-11T07:50:36Z 2021-05-11T07:50:36Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python3 This update for python3 fixes the following issues: - CVE-2021-3426: Fixed an information disclosure via pydoc (bsc#1183374) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/389-ds:1.4.2-2021-1557,Container caasp/v4/hyperkube:v1.17.17-2021-1557,Container caasp/v4/k8s-sidecar:0.1.75-2021-1557,Container ses/6/cephcsi/cephcsi:latest-2021-1557,Container ses/6/rook/ceph:latest-2021-1557,Container ses/7/cephcsi/cephcsi:latest-2021-1557,Container ses/7/prometheus-webhook-snmp:latest-2021-1557,Container ses/7/rook/ceph:latest-2021-1557,Container suse/sles/15.2/virt-handler:0.38.1-2021-1557,Container suse/sles/15.2/virt-launcher:0.38.1-2021-1557,SUSE-2021-1557,SUSE-SLE-Module-Basesystem-15-SP2-2021-1557,SUSE-SLE-Module-Basesystem-15-SP3-2021-1557,SUSE-SLE-Module-Development-Tools-15-SP2-2021-1557,SUSE-SLE-Module-Development-Tools-15-SP3-2021-1557,SUSE-SUSE-MicroOS-5.0-2021-1557 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211557-1/ Link for SUSE-SU-2021:1557-1 https://lists.suse.com/pipermail/sle-security-updates/2021-May/008753.html E-Mail link for SUSE-SU-2021:1557-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1183374 SUSE Bug 1183374 https://www.suse.com/security/cve/CVE-2021-3426/ SUSE CVE CVE-2021-3426 page Container caasp/v4/389-ds:1.4.2 Container caasp/v4/hyperkube:v1.17.17 Container caasp/v4/k8s-sidecar:0.1.75 Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/prometheus-webhook-snmp:latest Container ses/7/rook/ceph:latest Container suse/sles/15.2/virt-handler:0.38.1 Container suse/sles/15.2/virt-launcher:0.38.1 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Development Tools 15 SP3 libpython3_6m1_0-3.6.13-3.81.1 python3-3.6.13-3.81.2 python3-base-3.6.13-3.81.1 python3-curses-3.6.13-3.81.2 libpython3_6m1_0-32bit-3.6.13-3.81.1 libpython3_6m1_0-64bit-3.6.13-3.81.1 python3-32bit-3.6.13-3.81.2 python3-64bit-3.6.13-3.81.2 python3-base-32bit-3.6.13-3.81.1 python3-base-64bit-3.6.13-3.81.1 python3-dbm-3.6.13-3.81.2 python3-devel-3.6.13-3.81.1 python3-doc-3.6.13-3.81.1 python3-doc-devhelp-3.6.13-3.81.1 python3-idle-3.6.13-3.81.2 python3-testsuite-3.6.13-3.81.1 python3-tk-3.6.13-3.81.2 python3-tools-3.6.13-3.81.1 libpython3_6m1_0-3.6.13-3.81.1 as a component of Container caasp/v4/389-ds:1.4.2 python3-3.6.13-3.81.2 as a component of Container caasp/v4/389-ds:1.4.2 python3-base-3.6.13-3.81.1 as a component of Container caasp/v4/389-ds:1.4.2 libpython3_6m1_0-3.6.13-3.81.1 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-3.6.13-3.81.2 as a component of Container caasp/v4/hyperkube:v1.17.17 python3-base-3.6.13-3.81.1 as a component of Container caasp/v4/hyperkube:v1.17.17 libpython3_6m1_0-3.6.13-3.81.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 python3-3.6.13-3.81.2 as a component of Container caasp/v4/k8s-sidecar:0.1.75 python3-base-3.6.13-3.81.1 as a component of Container caasp/v4/k8s-sidecar:0.1.75 libpython3_6m1_0-3.6.13-3.81.1 as a component of Container ses/6/cephcsi/cephcsi:latest python3-3.6.13-3.81.2 as a component of Container ses/6/cephcsi/cephcsi:latest python3-base-3.6.13-3.81.1 as a component of Container ses/6/cephcsi/cephcsi:latest libpython3_6m1_0-3.6.13-3.81.1 as a component of Container ses/6/rook/ceph:latest python3-3.6.13-3.81.2 as a component of Container ses/6/rook/ceph:latest python3-base-3.6.13-3.81.1 as a component of Container ses/6/rook/ceph:latest libpython3_6m1_0-3.6.13-3.81.1 as a component of Container ses/7/cephcsi/cephcsi:latest python3-3.6.13-3.81.2 as a component of Container ses/7/cephcsi/cephcsi:latest python3-base-3.6.13-3.81.1 as a component of Container ses/7/cephcsi/cephcsi:latest python3-curses-3.6.13-3.81.2 as a component of Container ses/7/cephcsi/cephcsi:latest libpython3_6m1_0-3.6.13-3.81.1 as a component of Container ses/7/prometheus-webhook-snmp:latest python3-base-3.6.13-3.81.1 as a component of Container ses/7/prometheus-webhook-snmp:latest libpython3_6m1_0-3.6.13-3.81.1 as a component of Container ses/7/rook/ceph:latest python3-3.6.13-3.81.2 as a component of Container ses/7/rook/ceph:latest python3-base-3.6.13-3.81.1 as a component of Container ses/7/rook/ceph:latest python3-curses-3.6.13-3.81.2 as a component of Container ses/7/rook/ceph:latest libpython3_6m1_0-3.6.13-3.81.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 python3-base-3.6.13-3.81.1 as a component of Container suse/sles/15.2/virt-handler:0.38.1 libpython3_6m1_0-3.6.13-3.81.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 python3-base-3.6.13-3.81.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 libpython3_6m1_0-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Micro 5.0 python3-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Micro 5.0 python3-base-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Micro 5.0 libpython3_6m1_0-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-base-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-curses-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-dbm-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-devel-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-idle-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-tk-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 libpython3_6m1_0-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-base-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-curses-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-dbm-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-devel-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-idle-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-tk-3.6.13-3.81.2 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 python3-tools-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP2 python3-tools-3.6.13-3.81.1 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7. CVE-2021-3426 Container caasp/v4/389-ds:1.4.2:libpython3_6m1_0-3.6.13-3.81.1 Container caasp/v4/389-ds:1.4.2:python3-3.6.13-3.81.2 Container caasp/v4/389-ds:1.4.2:python3-base-3.6.13-3.81.1 Container caasp/v4/hyperkube:v1.17.17:libpython3_6m1_0-3.6.13-3.81.1 Container caasp/v4/hyperkube:v1.17.17:python3-3.6.13-3.81.2 Container caasp/v4/hyperkube:v1.17.17:python3-base-3.6.13-3.81.1 Container caasp/v4/k8s-sidecar:0.1.75:libpython3_6m1_0-3.6.13-3.81.1 Container caasp/v4/k8s-sidecar:0.1.75:python3-3.6.13-3.81.2 Container caasp/v4/k8s-sidecar:0.1.75:python3-base-3.6.13-3.81.1 Container ses/6/cephcsi/cephcsi:latest:libpython3_6m1_0-3.6.13-3.81.1 Container ses/6/cephcsi/cephcsi:latest:python3-3.6.13-3.81.2 Container ses/6/cephcsi/cephcsi:latest:python3-base-3.6.13-3.81.1 Container ses/6/rook/ceph:latest:libpython3_6m1_0-3.6.13-3.81.1 Container ses/6/rook/ceph:latest:python3-3.6.13-3.81.2 Container ses/6/rook/ceph:latest:python3-base-3.6.13-3.81.1 Container ses/7/cephcsi/cephcsi:latest:libpython3_6m1_0-3.6.13-3.81.1 Container ses/7/cephcsi/cephcsi:latest:python3-3.6.13-3.81.2 Container ses/7/cephcsi/cephcsi:latest:python3-base-3.6.13-3.81.1 Container ses/7/cephcsi/cephcsi:latest:python3-curses-3.6.13-3.81.2 Container ses/7/prometheus-webhook-snmp:latest:libpython3_6m1_0-3.6.13-3.81.1 Container ses/7/prometheus-webhook-snmp:latest:python3-base-3.6.13-3.81.1 Container ses/7/rook/ceph:latest:libpython3_6m1_0-3.6.13-3.81.1 Container ses/7/rook/ceph:latest:python3-3.6.13-3.81.2 Container ses/7/rook/ceph:latest:python3-base-3.6.13-3.81.1 Container ses/7/rook/ceph:latest:python3-curses-3.6.13-3.81.2 Container suse/sles/15.2/virt-handler:0.38.1:libpython3_6m1_0-3.6.13-3.81.1 Container suse/sles/15.2/virt-handler:0.38.1:python3-base-3.6.13-3.81.1 Container suse/sles/15.2/virt-launcher:0.38.1:libpython3_6m1_0-3.6.13-3.81.1 Container suse/sles/15.2/virt-launcher:0.38.1:python3-base-3.6.13-3.81.1 SUSE Linux Enterprise Micro 5.0:libpython3_6m1_0-3.6.13-3.81.1 SUSE Linux Enterprise Micro 5.0:python3-3.6.13-3.81.2 SUSE Linux Enterprise Micro 5.0:python3-base-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:libpython3_6m1_0-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-base-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-curses-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-dbm-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-devel-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-idle-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-tk-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:libpython3_6m1_0-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-base-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-curses-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-dbm-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-devel-3.6.13-3.81.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-idle-3.6.13-3.81.2 SUSE Linux Enterprise Module for Basesystem 15 SP3:python3-tk-3.6.13-3.81.2 SUSE Linux Enterprise Module for Development Tools 15 SP2:python3-tools-3.6.13-3.81.1 SUSE Linux Enterprise Module for Development Tools 15 SP3:python3-tools-3.6.13-3.81.1 moderate 2.7 AV:A/AC:L/Au:S/C:P/I:N/A:N 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211557-1/ https://www.suse.com/security/cve/CVE-2021-3426.html CVE-2021-3426 https://bugzilla.suse.com/1183374 SUSE Bug 1183374