Security update for python3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0886-1 Final 1 1 2021-03-19T14:49:11Z current 2021-03-19T14:49:11Z 2021-03-19T14:49:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python3 This update for python3 fixes the following issues: - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-Azure-BYOS-2021-886,Image SLES12-SP4-EC2-HVM-BYOS-2021-886,Image SLES12-SP4-GCE-BYOS-2021-886,Image SLES12-SP4-SAP-Azure-2021-886,Image SLES12-SP4-SAP-Azure-BYOS-2021-886,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2021-886,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2021-886,Image SLES12-SP4-SAP-EC2-HVM-2021-886,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2021-886,Image SLES12-SP4-SAP-GCE-2021-886,Image SLES12-SP4-SAP-GCE-BYOS-2021-886,Image SLES12-SP5-Azure-BYOS-2021-886,Image SLES12-SP5-Azure-Basic-On-Demand-2021-886,Image SLES12-SP5-Azure-HPC-BYOS-2021-886,Image SLES12-SP5-Azure-HPC-On-Demand-2021-886,Image SLES12-SP5-Azure-SAP-BYOS-2021-886,Image SLES12-SP5-Azure-SAP-On-Demand-2021-886,Image SLES12-SP5-Azure-Standard-On-Demand-2021-886,Image SLES12-SP5-EC2-BYOS-2021-886,Image SLES12-SP5-EC2-ECS-On-Demand-2021-886,Image SLES12-SP5-EC2-On-Demand-2021-886,Image SLES12-SP5-EC2-SAP-BYOS-2021-886,Image SLES12-SP5-EC2-SAP-On-Demand-2021-886,Image SLES12-SP5-GCE-BYOS-2021-886,Image SLES12-SP5-GCE-On-Demand-2021-886,Image SLES12-SP5-GCE-SAP-BYOS-2021-886,Image SLES12-SP5-GCE-SAP-On-Demand-2021-886,Image SLES12-SP5-OCI-BYOS-BYOS-2021-886,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2021-886,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2021-886,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2021-886,SUSE-2021-886,SUSE-SLE-Module-Web-Scripting-12-2021-886,SUSE-SLE-SDK-12-SP5-2021-886,SUSE-SLE-SERVER-12-SP5-2021-886 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210886-1/ Link for SUSE-SU-2021:0886-1 https://lists.suse.com/pipermail/sle-security-updates/2021-March/008520.html E-Mail link for SUSE-SU-2021:0886-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1182379 SUSE Bug 1182379 https://www.suse.com/security/cve/CVE-2021-23336/ SUSE CVE CVE-2021-23336 page Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 libpython3_4m1_0-3.4.10-25.66.1 python3-3.4.10-25.66.1 python3-base-3.4.10-25.66.1 python3-curses-3.4.10-25.66.1 libpython3_4m1_0-32bit-3.4.10-25.66.1 libpython3_4m1_0-64bit-3.4.10-25.66.1 python3-32bit-3.4.10-25.66.1 python3-64bit-3.4.10-25.66.1 python3-base-32bit-3.4.10-25.66.1 python3-base-64bit-3.4.10-25.66.1 python3-dbm-3.4.10-25.66.1 python3-devel-3.4.10-25.66.1 python3-doc-3.4.10-25.66.1 python3-doc-pdf-3.4.10-25.66.1 python3-idle-3.4.10-25.66.1 python3-testsuite-3.4.10-25.66.1 python3-tk-3.4.10-25.66.1 python3-tools-3.4.10-25.66.1 libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-Azure-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-Azure-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-Azure-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-GCE-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-GCE-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-GCE-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production libpython3_4m1_0-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-base-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production python3-curses-3.4.10-25.66.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production libpython3_4m1_0-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-base-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 python3-curses-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 libpython3_4m1_0-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_4m1_0-32bit-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-base-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-curses-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-devel-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 python3-tk-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server 12 SP5 libpython3_4m1_0-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpython3_4m1_0-32bit-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-base-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-curses-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-devel-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-tk-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python3-dbm-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 python3-devel-3.4.10-25.66.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter. CVE-2021-23336 Image SLES12-SP4-Azure-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-Azure-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP4-Azure-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP4-EC2-HVM-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-EC2-HVM-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP4-EC2-HVM-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP4-GCE-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-GCE-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP4-GCE-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-Azure:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-EC2-HVM:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE:python3-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE:python3-base-3.4.10-25.66.1 Image SLES12-SP4-SAP-GCE:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-Azure-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-Azure-Basic-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-Basic-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-Basic-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-Azure-HPC-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-HPC-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-HPC-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-Azure-HPC-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-HPC-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-HPC-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-Azure-SAP-On-Demand:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-Azure-Standard-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-Azure-Standard-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-Azure-Standard-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-EC2-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-EC2-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-EC2-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-EC2-ECS-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-EC2-ECS-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-EC2-ECS-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-EC2-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-EC2-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-EC2-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-EC2-SAP-On-Demand:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-GCE-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-GCE-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-GCE-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-GCE-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-GCE-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-GCE-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-On-Demand:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-On-Demand:python3-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-On-Demand:python3-base-3.4.10-25.66.1 Image SLES12-SP5-GCE-SAP-On-Demand:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python3-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python3-base-3.4.10-25.66.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-base-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:python3-curses-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:libpython3_4m1_0-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-base-3.4.10-25.66.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:python3-curses-3.4.10-25.66.1 SUSE Linux Enterprise Module for Web and Scripting 12:libpython3_4m1_0-3.4.10-25.66.1 SUSE Linux Enterprise Module for Web and Scripting 12:python3-3.4.10-25.66.1 SUSE Linux Enterprise Module for Web and Scripting 12:python3-base-3.4.10-25.66.1 SUSE Linux Enterprise Module for Web and Scripting 12:python3-curses-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:python3-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:python3-base-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:python3-curses-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:python3-devel-3.4.10-25.66.1 SUSE Linux Enterprise Server 12 SP5:python3-tk-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpython3_4m1_0-32bit-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-base-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-curses-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-devel-3.4.10-25.66.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python3-tk-3.4.10-25.66.1 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-dbm-3.4.10-25.66.1 SUSE Linux Enterprise Software Development Kit 12 SP5:python3-devel-3.4.10-25.66.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210886-1/ https://www.suse.com/security/cve/CVE-2021-23336.html CVE-2021-23336 https://bugzilla.suse.com/1182179 SUSE Bug 1182179 https://bugzilla.suse.com/1182379 SUSE Bug 1182379 https://bugzilla.suse.com/1182433 SUSE Bug 1182433