Test ID:	1.3.6.1.4.1.25623.1.1.13.2019.293.01
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2019-293-01)
Summary:	The remote host is missing an update for the 'python' package(s) announced via the SSA:2019-293-01 advisory.
Description:	Summary: The remote host is missing an update for the 'python' package(s) announced via the SSA:2019-293-01 advisory. Vulnerability Insight: New python packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/python-2.7.17-i586-1_slack14.2.txz: Upgraded. This update fixes bugs and security issues: Update vendorized expat library version to 2.2.8. Disallow URL paths with embedded whitespace or control characters into the underlying http client request. Such potentially malicious header injection URLs now cause an httplib.InvalidURL exception to be raised. Avoid file reading by disallowing ``local-file://`` and ``local_file://`` URL schemes in :func:`urllib.urlopen`, :meth:`urllib.URLopener.open` and :meth:`urllib.URLopener.retrieve`. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'python' package(s) on Slackware 14.0, Slackware 14.1, Slackware 14.2, Slackware current. Solution: Please install the updated package(s). CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-15903 Bugtraq: 20190917 [slackware-security] expat (SSA:2019-259-01) (Google Search) https://seclists.org/bugtraq/2019/Sep/30 Bugtraq: 20190923 [SECURITY] [DSA 4530-1] expat security update (Google Search) https://seclists.org/bugtraq/2019/Sep/37 Bugtraq: 20191021 [slackware-security] python (SSA:2019-293-01) (Google Search) https://seclists.org/bugtraq/2019/Oct/29 Bugtraq: 20191101 [SECURITY] [DSA 4549-1] firefox-esr security update (Google Search) https://seclists.org/bugtraq/2019/Nov/1 Bugtraq: 20191118 [SECURITY] [DSA 4571-1] thunderbird security update (Google Search) https://seclists.org/bugtraq/2019/Nov/24 Bugtraq: 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra (Google Search) https://seclists.org/bugtraq/2019/Dec/23 Bugtraq: 20191211 APPLE-SA-2019-12-10-5 tvOS 13.3 (Google Search) https://seclists.org/bugtraq/2019/Dec/21 Bugtraq: 20191211 APPLE-SA-2019-12-10-8 watchOS 6.1.1 (Google Search) https://seclists.org/bugtraq/2019/Dec/17 https://github.com/libexpat/libexpat/issues/342 https://security.netapp.com/advisory/ntap-20190926-0004/ https://support.apple.com/kb/HT210785 https://support.apple.com/kb/HT210788 https://support.apple.com/kb/HT210789 https://support.apple.com/kb/HT210790 https://support.apple.com/kb/HT210793 https://support.apple.com/kb/HT210794 https://support.apple.com/kb/HT210795 Debian Security Information: DSA-4530 (Google Search) https://www.debian.org/security/2019/dsa-4530 Debian Security Information: DSA-4549 (Google Search) https://www.debian.org/security/2019/dsa-4549 Debian Security Information: DSA-4571 (Google Search) https://www.debian.org/security/2019/dsa-4571 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BDUTI5TVQWIGGQXPEVI4T2ENHFSBMIBP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S26LGXXQ7YF2BP3RGOWELBFKM6BHF6UG/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A4TZKPJFTURRLXIGLB34WVKQ5HGY6JJA/ http://seclists.org/fulldisclosure/2019/Dec/23 http://seclists.org/fulldisclosure/2019/Dec/26 http://seclists.org/fulldisclosure/2019/Dec/27 http://seclists.org/fulldisclosure/2019/Dec/30 https://security.gentoo.org/glsa/201911-08 http://packetstormsecurity.com/files/154503/Slackware-Security-Advisory-expat-Updates.html http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.html http://packetstormsecurity.com/files/154947/Slackware-Security-Advisory-mozilla-firefox-Updates.html https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43 https://github.com/libexpat/libexpat/issues/317 https://github.com/libexpat/libexpat/pull/318 https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.debian.org/debian-lts-announce/2019/11/msg00006.html https://lists.debian.org/debian-lts-announce/2019/11/msg00017.html RedHat Security Advisories: RHSA-2019:3210 https://access.redhat.com/errata/RHSA-2019:3210 RedHat Security Advisories: RHSA-2019:3237 https://access.redhat.com/errata/RHSA-2019:3237 RedHat Security Advisories: RHSA-2019:3756 https://access.redhat.com/errata/RHSA-2019:3756 SuSE Security Announcement: openSUSE-SU-2019:2204 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00080.html SuSE Security Announcement: openSUSE-SU-2019:2205 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00081.html SuSE Security Announcement: openSUSE-SU-2019:2420 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00000.html SuSE Security Announcement: openSUSE-SU-2019:2424 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00002.html SuSE Security Announcement: openSUSE-SU-2019:2425 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00003.html SuSE Security Announcement: openSUSE-SU-2019:2447 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00013.html SuSE Security Announcement: openSUSE-SU-2019:2451 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00016.html SuSE Security Announcement: openSUSE-SU-2019:2452 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00018.html SuSE Security Announcement: openSUSE-SU-2019:2459 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00017.html SuSE Security Announcement: openSUSE-SU-2019:2464 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00019.html SuSE Security Announcement: openSUSE-SU-2020:0010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html SuSE Security Announcement: openSUSE-SU-2020:0086 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html https://usn.ubuntu.com/4132-1/ https://usn.ubuntu.com/4132-2/ https://usn.ubuntu.com/4165-1/ https://usn.ubuntu.com/4202-1/ https://usn.ubuntu.com/4335-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-9740 BugTraq ID: 107466 http://www.securityfocus.com/bid/107466 https://security.netapp.com/advisory/ntap-20190619-0005/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/ https://security.gentoo.org/glsa/202003-26 https://bugs.python.org/issue36276 https://www.oracle.com/security-alerts/cpujul2022.html https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html http://www.openwall.com/lists/oss-security/2021/02/04/2 RedHat Security Advisories: RHSA-2019:1260 https://access.redhat.com/errata/RHSA-2019:1260 RedHat Security Advisories: RHSA-2019:2030 https://access.redhat.com/errata/RHSA-2019:2030 RedHat Security Advisories: RHSA-2019:3335 https://access.redhat.com/errata/RHSA-2019:3335 RedHat Security Advisories: RHSA-2019:3520 https://access.redhat.com/errata/RHSA-2019:3520 RedHat Security Advisories: RHSA-2019:3725 https://access.redhat.com/errata/RHSA-2019:3725 SuSE Security Announcement: openSUSE-SU-2019:2131 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html SuSE Security Announcement: openSUSE-SU-2019:2133 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html https://usn.ubuntu.com/4127-1/ https://usn.ubuntu.com/4127-2/ Common Vulnerability Exposure (CVE) ID: CVE-2019-9948 BugTraq ID: 107549 http://www.securityfocus.com/bid/107549 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/ https://bugs.python.org/issue35907 https://github.com/python/cpython/pull/11842 https://lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0@%3Cissues.bookkeeper.apache.org%3E https://lists.debian.org/debian-lts-announce/2019/07/msg00011.html RedHat Security Advisories: RHSA-2019:1700 https://access.redhat.com/errata/RHSA-2019:1700 SuSE Security Announcement: openSUSE-SU-2019:1273 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html SuSE Security Announcement: openSUSE-SU-2019:1580 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.