Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2020-0114-1.NASL
HistoryJan 17, 2020 - 12:00 a.m.

SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)

2020-01-1700:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
29

8.5 High

AI Score

Confidence

High

JSON

This update for python3 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2020:0114-1.
# The text itself is copyright (C) SUSE.
#

include('compat.inc');

if (description)
{
  script_id(133036);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/03/29");

  script_cve_id(
    "CVE-2011-3389",
    "CVE-2011-4944",
    "CVE-2012-0845",
    "CVE-2012-1150",
    "CVE-2013-1752",
    "CVE-2013-4238",
    "CVE-2014-2667",
    "CVE-2014-4650",
    "CVE-2016-0772",
    "CVE-2016-1000110",
    "CVE-2016-5636",
    "CVE-2016-5699",
    "CVE-2017-18207",
    "CVE-2018-1000802",
    "CVE-2018-1060",
    "CVE-2018-1061",
    "CVE-2018-14647",
    "CVE-2018-20406",
    "CVE-2018-20852",
    "CVE-2019-10160",
    "CVE-2019-15903",
    "CVE-2019-16056",
    "CVE-2019-16935",
    "CVE-2019-5010",
    "CVE-2019-9636",
    "CVE-2019-9947"
  );
  script_bugtraq_id(
    49388,
    49778,
    51239,
    52732,
    61738,
    63804,
    66521,
    68147
  );
  script_xref(name:"CEA-ID", value:"CEA-2019-0547");

  script_name(english:"SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SUSE host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"This update for python3 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in
Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for
multiple @ (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat
(bsc#1149429).

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1027282");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1029377");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1029902");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1040164");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1042670");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1070853");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1079761");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1081750");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1083507");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1086001");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1088004");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1088009");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1088573");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1094814");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1107030");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1109663");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1109847");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1120644");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1122191");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1129346");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1130840");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1133452");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1137942");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1138459");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1141853");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1149121");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1149792");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1149955");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1151490");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1153238");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1159035");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=1159622");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=637176");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=658604");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=673071");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=709442");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=743787");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=747125");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=751718");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=754447");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=754677");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=787526");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=809831");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=831629");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=834601");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=871152");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=885662");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=885882");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=917607");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=942751");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=951166");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=983582");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=984751");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=985177");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=985348");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.suse.com/show_bug.cgi?id=989523");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2011-3389/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2011-4944/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2012-0845/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2012-1150/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2013-1752/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2013-4238/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2014-2667/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2014-4650/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2016-0772/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2016-1000110/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2016-5636/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2016-5699/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2017-18207/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-1000802/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-1060/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-1061/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-14647/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-20406/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2018-20852/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-10160/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-15903/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-16056/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-16935/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-5010/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-9636/");
  script_set_attribute(attribute:"see_also", value:"https://www.suse.com/security/cve/CVE-2019-9947/");
  # https://www.suse.com/support/update/announcement/2020/suse-su-20200114-1/
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?4a736fc2");
  script_set_attribute(attribute:"solution", value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15-SP1 :

zypper in -t patch
SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2020-114=1

SUSE Linux Enterprise Module for Open Buildservice Development Tools
15 :

zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2020-114=1

SUSE Linux Enterprise Module for Development Tools 15-SP1 :

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP1-2020-114=1

SUSE Linux Enterprise Module for Development Tools 15 :

zypper in -t patch SUSE-SLE-Module-Development-Tools-15-2020-114=1

SUSE Linux Enterprise Module for Basesystem 15-SP1 :

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-114=1

SUSE Linux Enterprise Module for Basesystem 15 :

zypper in -t patch SUSE-SLE-Module-Basesystem-15-2020-114=1");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2016-5636");
  script_set_attribute(attribute:"cvss3_score_source", value:"CVE-2019-9636");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"in_the_news", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2011/09/06");
  script_set_attribute(attribute:"patch_publication_date", value:"2020/01/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/01/17");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libpython3_6m1_0");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libpython3_6m1_0-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libpython3_6m1_0-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-base-32bit-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-base-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-base-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-curses");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-curses-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-dbm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-dbm-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-devel-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-testsuite");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-testsuite-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-tk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-tk-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:python3-tools");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:15");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED15|SLES15)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED15 / SLES15", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES15" && (! preg(pattern:"^(0|1)$", string:sp))) audit(AUDIT_OS_NOT, "SLES15 SP0/1", os_ver + " SP" + sp);
if (os_ver == "SLED15" && (! preg(pattern:"^(0|1)$", string:sp))) audit(AUDIT_OS_NOT, "SLED15 SP0/1", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"libpython3_6m1_0-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"libpython3_6m1_0-32bit-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"python3-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"python3-32bit-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"python3-base-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", cpu:"x86_64", reference:"python3-base-32bit-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"libpython3_6m1_0-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"libpython3_6m1_0-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-base-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-base-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-base-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-curses-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-curses-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-dbm-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-dbm-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-devel-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-devel-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-idle-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-testsuite-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-testsuite-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-tk-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-tk-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"1", reference:"python3-tools-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", cpu:"x86_64", reference:"libpython3_6m1_0-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", cpu:"x86_64", reference:"python3-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", cpu:"x86_64", reference:"python3-base-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libpython3_6m1_0-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"libpython3_6m1_0-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-base-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-base-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-base-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-curses-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-curses-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-dbm-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-dbm-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-devel-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-devel-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-idle-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-testsuite-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-testsuite-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-tk-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-tk-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLES15", sp:"0", reference:"python3-tools-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"libpython3_6m1_0-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"libpython3_6m1_0-32bit-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"python3-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"python3-32bit-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"python3-base-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", cpu:"x86_64", reference:"python3-base-32bit-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"libpython3_6m1_0-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"libpython3_6m1_0-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-base-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-base-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-base-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-curses-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-curses-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-dbm-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-dbm-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-devel-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-devel-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-idle-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-testsuite-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-testsuite-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-tk-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-tk-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"1", reference:"python3-tools-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", cpu:"x86_64", reference:"libpython3_6m1_0-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", cpu:"x86_64", reference:"python3-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", cpu:"x86_64", reference:"python3-base-32bit-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libpython3_6m1_0-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"libpython3_6m1_0-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-base-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-base-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-base-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-curses-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-curses-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-dbm-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-dbm-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-debugsource-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-devel-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-devel-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-idle-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-testsuite-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-testsuite-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-tk-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-tk-debuginfo-3.6.10-3.42.2")) flag++;
if (rpm_check(release:"SLED15", sp:"0", reference:"python3-tools-3.6.10-3.42.2")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "python3");
}
VendorProductVersionCPE
novellsuse_linuxlibpython3_6m1_0p-cpe:/a:novell:suse_linux:libpython3_6m1_0
novellsuse_linuxlibpython3_6m1_0-32bit-debuginfop-cpe:/a:novell:suse_linux:libpython3_6m1_0-32bit-debuginfo
novellsuse_linuxlibpython3_6m1_0-debuginfop-cpe:/a:novell:suse_linux:libpython3_6m1_0-debuginfo
novellsuse_linuxpython3p-cpe:/a:novell:suse_linux:python3
novellsuse_linuxpython3-32bit-debuginfop-cpe:/a:novell:suse_linux:python3-32bit-debuginfo
novellsuse_linuxpython3-basep-cpe:/a:novell:suse_linux:python3-base
novellsuse_linuxpython3-base-32bit-debuginfop-cpe:/a:novell:suse_linux:python3-base-32bit-debuginfo
novellsuse_linuxpython3-base-debuginfop-cpe:/a:novell:suse_linux:python3-base-debuginfo
novellsuse_linuxpython3-base-debugsourcep-cpe:/a:novell:suse_linux:python3-base-debugsource
novellsuse_linuxpython3-cursesp-cpe:/a:novell:suse_linux:python3-curses
Rows per page:
1-10 of 241

References

Related

openvas 77
nessus 56
suse 3
fedora 23
debian 4
osv 4
redhat 6
ubuntu 5
amazon 2
oraclelinux 5
cloudfoundry 3
mageia 5
ibm 4
centos 1
slackware 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0114-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for python3 (openSUSE-SU-2020:0086_1)
2020-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0302-1)
2021-04-19 00:00:00
nessus
nessus
openSUSE Security Update : python3 (openSUSE-2020-86) (BEAST) (httpoxy)
2020-01-22 00:00:00
SUSE SLES12 Security Update : python36 (SUSE-SU-2020:0302-1)
2020-02-04 00:00:00
openSUSE Security Update : python3 (openSUSE-2016-997) (httpoxy)
2016-08-22 00:00:00
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00
Security update for python (moderate)
2019-10-27 00:00:00
Security update for python (moderate)
2019-10-27 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: python35-3.5.7-1.fc29
2019-03-27 15:02:29
[SECURITY] Fedora 28 Update: python35-3.5.7-1.fc28
2019-03-29 02:05:32
[SECURITY] Fedora 30 Update: python35-3.5.7-1.fc30
2019-03-29 19:39:51
debian
debian
[SECURITY] [DLA 1663-1] python3.4 security update
2019-02-07 10:12:00
[SECURITY] [DSA 4306-1] python2.7 security update
2018-09-27 21:05:32
[SECURITY] [DLA 522-1] python2.7 security update
2016-06-21 20:22:20
osv
osv
python3.4 - security update
2019-02-07 00:00:00
python2.7 - security update
2018-09-27 00:00:00
python2.7 - security update
2016-06-21 00:00:00
redhat
redhat
(RHSA-2019:3725) Moderate: rh-python36-python security, bug fix, and enhancement update
2019-11-06 09:12:32
(RHSA-2016:1627) Moderate: rh-python35-python security update
2016-08-18 14:43:57
(RHSA-2016:1626) Moderate: python security update
2016-08-18 14:24:36
ubuntu
ubuntu
Python vulnerabilities
2016-11-22 00:00:00
Python vulnerabilities
2019-09-10 00:00:00
Python vulnerabilities
2019-09-09 00:00:00
amazon
amazon
Important: python
2019-06-25 21:04:00
Medium: python26, python27, python34
2016-07-20 18:00:00
oraclelinux
oraclelinux
python security, bug fix, and enhancement update
2016-11-09 00:00:00
python security and bug fix update
2017-08-07 00:00:00
python security update
2020-10-06 00:00:00
cloudfoundry
cloudfoundry
USN-3134-1: Python vulnerabilities | Cloud Foundry
2016-12-14 00:00:00
USN-4127-1: Python vulnerabilities | Cloud Foundry
2019-09-30 00:00:00
USN-3817-1: Python vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
mageia
mageia
Updated python3 packages fix security vulnerability
2019-04-11 00:25:19
Updated python packages fix security vulnerabilities
2019-01-01 01:42:09
Updated python packages fix security vulnerabilities
2016-06-22 19:36:39
ibm
ibm
Security Bulletin: IBM RackSwitch firmware products are affected by vulnerabilities in Python
2019-03-12 21:05:01
Security Bulletin: Multiple Vulnerabilities in python affects IBM Watson Studio Local
2019-12-20 14:50:32
Security Bulletin: IBM Security Access Manager is affected by vulnerabilities in Python (CVE-2016-0772, CVE-2016-5699, CVE-2016-1000110)
2018-06-16 21:48:05
centos
centos
python, tkinter security update
2016-08-18 17:23:01
slackware
slackware
[slackware-security] python
2019-03-03 22:46:15

8.5 High

AI Score

Confidence

High

JSON
Related for SUSE_SU-2020-0114-1.NASL
openvas77nessus56suse3fedora23debian4osv4redhat6ubuntu5amazon2oraclelinux5cloudfoundry3mageia5ibm4centos1slackware1