| Description: | Summary:
The remote host is missing an update for the 'python' package(s) announced via the SUSE-SU-2021:0355-1 advisory.
Vulnerability Insight:
This update for python fixes the following issues:
buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to
remote code execution (bsc#1181126, CVE-2021-3177).
Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in
their correct form (bsc#1180686).
Affected Software/OS:
'python' package(s) on SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, SUSE Linux Enterprise High Performance Computing 15, SUSE Linux Enterprise High Performance Computing 15-SP1, SUSE Linux Enterprise Module for Basesystem 15-SP2, SUSE Linux Enterprise Module for Basesystem 15-SP3, SUSE Linux Enterprise Module for Desktop Applications 15-SP2, SUSE Linux Enterprise Module for Desktop Applications 15-SP3, SUSE Linux Enterprise Module for Python2 15-SP2, SUSE Linux Enterprise Module for Python2 15-SP3, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15-SP1, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Server for SAP 15-SP1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 4.0.
Solution:
Please install the updated package(s).
CVSS Score:
7.5
CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
