File _patchinfo of Package patchinfo.13684

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.13684

<patchinfo incident="13684">
  <issue tracker="bnc" id="1138459">VUL-0: CVE-2019-10160: python,python3,python27: python: regression of  due to functional fix to allow port numbers in netloc</issue>
  <issue tracker="bnc" id="534721">VUL-1: python: libexpat vulnerable to "million laughts" attack</issue>
  <issue tracker="bnc" id="945401">python file conflict</issue>
  <issue tracker="bnc" id="898572">VUL-0: CVE-2014-7185: python: potential buffer overflow</issue>
  <issue tracker="bnc" id="1130840">VUL-1: CVE-2019-9947: python,python3,python27: CRLF injection is possible if the attacker controls a url parameter</issue>
  <issue tracker="bnc" id="747794">Python multiprocessing.pool: Thread tries to join itself</issue>
  <issue tracker="bnc" id="1078485">python-base test_multiprocessing on self.assertTrue(got_signal[0]) failure ppc64le</issue>
  <issue tracker="bnc" id="989523">VUL-1: CVE-2016-1000110: python,python3: Python CGIHandler: sets environmental variable based on user supplied Proxy request header</issue>
  <issue tracker="bnc" id="426563">Offlineimap does not work with SSL connections</issue>
  <issue tracker="bnc" id="1088004">VUL-1: CVE-2018-1061: python,python3: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib</issue>
  <issue tracker="bnc" id="1078326">python-devel has dependency on /usr/bin/python3</issue>
  <issue tracker="bnc" id="441088">No module named _bsddb</issue>
  <issue tracker="bnc" id="1073748">Segfault in libpython2.7.so.1</issue>
  <issue tracker="bnc" id="834601">VUL-0: CVE-2013-4238: python: SSL module does not handle certificates that contain hostnames with NULL bytes</issue>
  <issue tracker="bnc" id="1081750">python tarfile uses random order</issue>
  <issue tracker="bnc" id="298378">osc fails when $https_proxy is set</issue>
  <issue tracker="bnc" id="1042670">Python and python3 fail to build with openssl-1.1</issue>
  <issue tracker="bnc" id="399190">~/.pyhistory every growing</issue>
  <issue tracker="bnc" id="766778">python modules requiring _Py_HashSecret don't depend on updated libpython2_7</issue>
  <issue tracker="bnc" id="718009"></issue>
  <issue tracker="bnc" id="964182">python has multiple bogus integer overflow checks</issue>
  <issue tracker="bnc" id="885882">VUL-0: CVE-2014-4650: python: CGIHTTPServer does not properly handle encoded URL</issue>
  <issue tracker="bnc" id="1079300">VUL-0: CVE-2018-1000030: python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c</issue>
  <issue tracker="bnc" id="1073269">python-base fails to build on s390x and ppc64le</issue>
  <issue tracker="bnc" id="985348">VUL-0: CVE-2016-5699: python,python3: http protocol steam injection attack</issue>
  <issue tracker="bnc" id="794139">devel:languages:python:Factory/python: Bug: gettext.py patch for language bundle breaks if domain is None, e.g. application gnome-schedule</issue>
  <issue tracker="bnc" id="831442">openSUSE:12.3/python-base: Bug</issue>
  <issue tracker="bnc" id="1153238">VUL-0: CVE-2019-16935: python,python3,python36,python27: XSS vulnerability in  the  documentation XML-RPC server in server_title field</issue>
  <issue tracker="bnc" id="1083507">VUL-0: CVE-2017-18207: python,python3: The Wave_read._read_fmt_chunk function in Lib/wave.py does not ensure a nonzero channel value, which allows attackers to cause a denial of service</issue>
  <issue tracker="bnc" id="214983">https proxy support broken in python 2.5's urllib2?</issue>
  <issue tracker="bnc" id="638233">VUL-0: python: accept() implementation in async core is broken =&gt; more subcases</issue>
  <issue tracker="bnc" id="804978">/etc/pythonstart throws an exception if HOME doesn't exist</issue>
  <issue tracker="bnc" id="747125">VUL-1: CVE-2012-0845: python: (SimpleXMLRPCServer): DoS (excessive CPU usage) via malformed XML-RPC / HTTP POST request</issue>
  <issue tracker="bnc" id="901715">VUL-0: python: Disable SSLv2 in Python by default</issue>
  <issue tracker="bnc" id="637176">Python doesn't have the PEP 370 compatible lib64 path</issue>
  <issue tracker="bnc" id="406051">VUL-0: Multiple python vulnerabilities</issue>
  <issue tracker="bnc" id="432677">update from sles10 sp2 fails due to python issue</issue>
  <issue tracker="bnc" id="551715">extra space with tab completion in python's readline</issue>
  <issue tracker="bnc" id="1109847">VUL-0: CVE-2018-14647: python,python3,python27: Missing salt initialization in _elementtree.c module</issue>
  <issue tracker="bnc" id="425138">python from Factory leads to crashes when using with osc (see comment #9)</issue>
  <issue tracker="bnc" id="430761">Python site module breaks documented behaviour</issue>
  <issue tracker="bnc" id="697251">python-2.7.1 on 11.4</issue>
  <issue tracker="bnc" id="617751">system-config-printer localization problem (maybe for all languages)</issue>
  <issue tracker="bnc" id="1122191">VUL-0: CVE-2019-5010: python,python3,python27: NULL pointer dereference using a specially crafted X509 certificate causes DOS</issue>
  <issue tracker="bnc" id="1086001">python tarfile uses random order</issue>
  <issue tracker="bnc" id="935856">python: python3: The Logjam Attack / weakdh.org</issue>
  <issue tracker="bnc" id="997436">[TRACKERBUG] FATE#321075: [ECO] Python 2.7 for the Teradata SLE11 products</issue>
  <issue tracker="bnc" id="856835">VUL-1: CVE-2013-1753: python: gzip decompression bomb</issue>
  <issue tracker="bnc" id="836739">mercurial hardcodes  /etc/ssl/ca-bundle.pem</issue>
  <issue tracker="bnc" id="1141853">VUL-0: CVE-2018-20852: python,python3,python27: http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending cookies to the wrong server</issue>
  <issue tracker="bnc" id="1149792">openssl 1.1.1c causes build failures in other packages</issue>
  <issue tracker="bnc" id="1113755">[openssl1.1.1][staging] python fails to build / errorin the test suite</issue>
  <issue tracker="bnc" id="751718">VUL-0: python: hash collision DoS</issue>
  <issue tracker="bnc" id="1027282">Update python to 2.7.13 and python3 to 3.4.6</issue>
  <issue tracker="bnc" id="707667">Python module DLFCN can not be found.</issue>
  <issue tracker="bnc" id="1130847">VUL-1: CVE-2019-9948: python,python3,python27: support of the local_file: scheme makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs</issue>
  <issue tracker="bnc" id="658604">Python distutils setup does not allow user installation of Python packages</issue>
  <issue tracker="bnc" id="1149955">VUL-0: CVE-2019-16056: python,python3,python36,python27: The email module wrongly parses email addresses</issue>
  <issue tracker="bnc" id="673071">pyconfig has defines that break building of packages.</issue>
  <issue tracker="bnc" id="525295">python: fix potential hang during ssl handshake</issue>
  <issue tracker="bnc" id="985177">VUL-1: CVE-2016-5636: python3,python: Heap overflow in zipimporter module</issue>
  <issue tracker="bnc" id="1041090">trackerbug: packages do not build reproducibly from unsorted input</issue>
  <issue tracker="bnc" id="1159035">Unify python packages over different distributions</issue>
  <issue tracker="bnc" id="682554">VUL-0: python urllib, urllib2: Improper management of ftp:// and file:// URL schemes</issue>
  <issue tracker="bnc" id="1129346">VUL-0: CVE-2019-9636: python3,python27: python: Information Disclosure due to urlsplit improper NFKC normalization</issue>
  <issue tracker="bnc" id="436966">nothing provides python-base = 2.6.0 needed by python-2.6.0-1.1.ia64</issue>
  <issue tracker="bnc" id="572673">[openSUSE:11.2/python] No ipv6 support</issue>
  <issue tracker="bnc" id="1111793">TLS1.2 support for python packages on SLES11-SP3-TD</issue>
  <issue tracker="bnc" id="754447">VUL-1: python: distutils creates ~/.pypirc insecurely</issue>
  <issue tracker="bnc" id="581765">VUL-0: python: denial of service by processing malformed XML ("Expat vulnerability")</issue>
  <issue tracker="bnc" id="577032"></issue>
  <issue tracker="bnc" id="462375">smoltGui crashes at startup</issue>
  <issue tracker="bnc" id="827982">python: enable ssl default certificate validation</issue>
  <issue tracker="bnc" id="380942">Python does not find its HTML documentation</issue>
  <issue tracker="bnc" id="857470">python: bdist_rpm broken</issue>
  <issue tracker="bnc" id="1088009">VUL-1: CVE-2018-1060: python,python3: DOS via regular expression catastrophic backtracking in apop() method in pop3lib</issue>
  <issue tracker="bnc" id="437293">obsolete -XXbit packages during system upgrade</issue>
  <issue tracker="bnc" id="1084650">GCC 8: python-base is miscompiled</issue>
  <issue tracker="bnc" id="984751">VUL-1: CVE-2016-0772: python,python3: smtplib StartTLS stripping attack</issue>
  <issue tracker="bnc" id="1068664">VUL-0: CVE-2017-1000158: python,python27: CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (and possible arbitrary code e</issue>
  <issue tracker="bnc" id="603255">VUL-1: python: Python rgbimg and audiop overflows</issue>
  <issue tracker="bnc" id="379534">VUL-0: python multiple buffer overflows PyString_FromStringAndSize()</issue>
  <issue tracker="bnc" id="856836">VUL-1: CVE-2013-1752: python: various stdlib read flaws</issue>
  <issue tracker="bnc" id="863741">VUL-0: CVE-2014-1912: python: buffer overflow in socket.recvfrom_into</issue>
  <issue tracker="bnc" id="1153830">No application launcher for Phyton IDLE in K-launcher.</issue>
  <issue tracker="bnc" id="367853">gcc miscompiles an overflow test when -fwrapv is disabled</issue>
  <issue tracker="bnc" id="346490">%py_requires incorrect</issue>
  <issue tracker="cve" id="2019-9947"/>
  <issue tracker="cve" id="2007-2052"/>
  <issue tracker="cve" id="2011-4944"/>
  <issue tracker="cve" id="2016-0772"/>
  <issue tracker="cve" id="2008-3143"/>
  <issue tracker="cve" id="2018-20852"/>
  <issue tracker="cve" id="2013-1753"/>
  <issue tracker="cve" id="2008-2315"/>
  <issue tracker="cve" id="2019-16935"/>
  <issue tracker="cve" id="2019-10160"/>
  <issue tracker="cve" id="2019-16056"/>
  <issue tracker="cve" id="2017-18207"/>
  <issue tracker="cve" id="2013-4238"/>
  <issue tracker="cve" id="2016-5699"/>
  <issue tracker="cve" id="2018-14647"/>
  <issue tracker="cve" id="2014-7185"/>
  <issue tracker="cve" id="2008-3144"/>
  <issue tracker="cve" id="2008-1721"/>
  <issue tracker="cve" id="2018-1000802"/>
  <issue tracker="cve" id="2019-9636"/>
  <issue tracker="cve" id="2014-1912"/>
  <issue tracker="cve" id="2011-3389"/>
  <issue tracker="cve" id="2012-0845"/>
  <issue tracker="cve" id="2014-4650"/>
  <issue tracker="cve" id="2018-1000030"/>
  <issue tracker="cve" id="2012-1150"/>
  <issue tracker="cve" id="2008-2316"/>
  <issue tracker="cve" id="2018-1061"/>
  <issue tracker="cve" id="2017-1000158"/>
  <issue tracker="cve" id="2019-9948"/>
  <issue tracker="cve" id="2018-1060"/>
  <issue tracker="cve" id="2013-1752"/>
  <issue tracker="cve" id="2008-3142"/>
  <issue tracker="cve" id="2016-1000110"/>
  <issue tracker="cve" id="2011-1521"/>
  <issue tracker="cve" id="2019-5010"/>
  <issue tracker="cve" id="2016-5636"/>
  <issue tracker="fate" id="318838"/>
  <issue tracker="fate" id="305065"/>
  <issue tracker="fate" id="318300"/>
  <issue tracker="fate" id="321075"/>
  <issue tracker="jsc" id="ECO-379"/>
  <issue tracker="jsc" id="PM-1365"/>
  <packager>mcepl</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for python</summary>
  <description>This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.13684

Places