Security update for python
This update for python fixes the following issues:
- CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241)
- CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Matej Cepl (mcepl)
Fixed bugs
bnc#1189241
VUL-0: CVE-2021-3737: python3,python36,python38,python39,python27,python: infinitely reading potential HTTP headers after a 100 Continue status response from the server
bnc#1189287
VUL-0: CVE-2021-3733: python,python-base,python-doc,python27,python27-base,python27-doc,python3,python3-base,python36,python39: ReDoS in urllib.request