Detections
Analytics
SuSE 11.3 Security Update : python (SAT Patch Number 8892)
medium Nessus Plugin ID 72873
Language:
Synopsis
The remote SuSE 11 host is missing one or more security updates.Description
This update for Python fixes the following security issues :- SSL module does not handle certificates that contain hostnames with NULL bytes. (CVE-2013-4238). (bnc#834601)
- Various stdlib read flaws. (CVE-2013-1752) Additionally, the following non-security issues have been fixed:.
(bnc#856836)
- Turn off OpenSSL's aggressive optimizations that conflict with Python's GC. (bnc#859068)
- Setting fips=1 at boot time causes problems with Python due to MD5 usage. (bnc#847135)
Solution
Apply SAT patch number 8892.See Also
https://bugzilla.novell.com/show_bug.cgi?id=834601
https://bugzilla.novell.com/show_bug.cgi?id=847135
https://bugzilla.novell.com/show_bug.cgi?id=856836
https://bugzilla.novell.com/show_bug.cgi?id=859068
http://support.novell.com/security/cve/CVE-2013-1752.html
Plugin Details
Severity: Medium
ID: 72873
File Name: suse_11_python-201402-140224.nasl
Version: 1.5
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 3/7/2014
Updated: 1/19/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:11:python-demo, p-cpe:/a:novell:suse_linux:11:python-base-32bit, p-cpe:/a:novell:suse_linux:11:libpython2_6-1_0-32bit, p-cpe:/a:novell:suse_linux:11:python-xml, p-cpe:/a:novell:suse_linux:11:libpython2_6-1_0, p-cpe:/a:novell:suse_linux:11:python-doc-pdf, p-cpe:/a:novell:suse_linux:11:python-idle, cpe:/o:novell:suse_linux:11, p-cpe:/a:novell:suse_linux:11:python-base, p-cpe:/a:novell:suse_linux:11:python-32bit, p-cpe:/a:novell:suse_linux:11:python-devel, p-cpe:/a:novell:suse_linux:11:python-doc, p-cpe:/a:novell:suse_linux:11:python-gdbm, p-cpe:/a:novell:suse_linux:11:python-tk, p-cpe:/a:novell:suse_linux:11:python-curses, p-cpe:/a:novell:suse_linux:11:python
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 2/24/2014