Security update for python-py SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2236-1 Final 1 1 2021-07-02T15:24:56Z current 2021-07-02T15:24:56Z 2021-07-02T15:24:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python-py This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2021-2236,Image SLES12-SP5-Azure-Basic-On-Demand-2021-2236,Image SLES12-SP5-Azure-HPC-BYOS-2021-2236,Image SLES12-SP5-Azure-HPC-On-Demand-2021-2236,Image SLES12-SP5-Azure-SAP-BYOS-2021-2236,Image SLES12-SP5-Azure-SAP-On-Demand-2021-2236,Image SLES12-SP5-Azure-Standard-On-Demand-2021-2236,Image SLES12-SP5-EC2-BYOS-2021-2236,Image SLES12-SP5-EC2-ECS-On-Demand-2021-2236,Image SLES12-SP5-EC2-On-Demand-2021-2236,Image SLES12-SP5-EC2-SAP-BYOS-2021-2236,Image SLES12-SP5-EC2-SAP-On-Demand-2021-2236,Image SLES12-SP5-GCE-BYOS-2021-2236,Image SLES12-SP5-GCE-On-Demand-2021-2236,Image SLES12-SP5-GCE-SAP-BYOS-2021-2236,Image SLES12-SP5-GCE-SAP-On-Demand-2021-2236,Image SLES12-SP5-OCI-BYOS-BYOS-2021-2236,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2021-2236,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2021-2236,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2021-2236,SUSE-2021-2236,SUSE-OpenStack-Cloud-7-2021-2236,SUSE-SLE-SERVER-12-SP5-2021-2236 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212236-1/ Link for SUSE-SU-2021:2236-1 https://lists.suse.com/pipermail/sle-security-updates/2021-July/009113.html E-Mail link for SUSE-SU-2021:2236-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1179805 SUSE Bug 1179805 https://bugzilla.suse.com/1184505 SUSE Bug 1184505 https://www.suse.com/security/cve/CVE-2020-29651/ SUSE CVE CVE-2020-29651 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 7 python-py-1.8.1-11.12.4 python3-py-1.8.1-11.12.4 python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-Basic-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-SAP-BYOS python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-BYOS python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-SAP-BYOS python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-On-Demand python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-SAP-BYOS python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-OCI-BYOS-BYOS python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS python3-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python-py-1.8.1-11.12.4 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python-py-1.8.1-11.12.4 as a component of SUSE Linux Enterprise Server 12 SP5 python-py-1.8.1-11.12.4 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-py-1.8.1-11.12.4 as a component of SUSE OpenStack Cloud 7 A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality. CVE-2020-29651 Image SLES12-SP5-Azure-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-Basic-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-HPC-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-HPC-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-HPC-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-SAP-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-SAP-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-SAP-On-Demand:python-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-SAP-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-Azure-Standard-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-ECS-On-Demand:python-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-ECS-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-On-Demand:python-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-SAP-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-SAP-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-SAP-On-Demand:python-py-1.8.1-11.12.4 Image SLES12-SP5-EC2-SAP-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-SAP-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-SAP-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-SAP-On-Demand:python-py-1.8.1-11.12.4 Image SLES12-SP5-GCE-SAP-On-Demand:python3-py-1.8.1-11.12.4 Image SLES12-SP5-OCI-BYOS-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python-py-1.8.1-11.12.4 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python3-py-1.8.1-11.12.4 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python-py-1.8.1-11.12.4 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python-py-1.8.1-11.12.4 SUSE Linux Enterprise Server 12 SP5:python-py-1.8.1-11.12.4 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-py-1.8.1-11.12.4 SUSE OpenStack Cloud 7:python-py-1.8.1-11.12.4 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212236-1/ https://www.suse.com/security/cve/CVE-2020-29651.html CVE-2020-29651 https://bugzilla.suse.com/1179805 SUSE Bug 1179805