安全公告详情

NS-SA-2020-0089

2020-12-08 09:15:38

简介

moderate: evince/python3 security update

严重级别

moderate

主题

An update for evince/python3 is now available for NewStart CGSL MAIN 5.05/CGSL CORE 5.05.
NewStart Security has rated this update as having a security impact of moderate. A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.

详细描述

evince: Evince is simple multi-page document viewer. It can display and print Portable Document Format (PDF), PostScript (PS) and Encapsulated PostScript (EPS) files. When supported by the document format, evince allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms. Support for other document formats such as DVI and DJVU can be added by installing additional backends.
python3: Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3-libs package, which should be installed automatically along with python3. The remaining parts of the Python standard library are broken out into the python3-tkinter and python3-test packages, which may need to be installed separately. Documentation for Python is provided in the python3-docs package. Packages containing additional libraries for Python are generally named with the "python3-" prefix.


Security Fix(es):
evince: The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.(CVE-2019-11459)
evince: bugfix
python3: .cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.(CVE-2018-20852)
python3: An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.(CVE-2019-16056)
python3: bugfix


Solution:
For details on how to apply this update, which includes the changes described in this advisory, refer to:
http://security.gd-linux.com/how_to_apply_patch.html
Remember the build tag is 5.05.F9B3.

影响组件

  • evince
  • python3

影响产品

  • CGSL MAIN 5.05
  • CGSL CORE 5.05

更新包

{"fix":[{"product":"CGSL MAIN 5.05","pkgs":[{"binary":["evince-3.28.2-9.el7.x86_64.rpm","evince-devel-3.28.2-9.el7.x86_64.rpm","evince-dvi-3.28.2-9.el7.x86_64.rpm","evince-debuginfo-3.28.2-9.el7.x86_64.rpm","evince-browser-plugin-3.28.2-9.el7.x86_64.rpm","evince-libs-3.28.2-9.el7.x86_64.rpm","evince-nautilus-3.28.2-9.el7.x86_64.rpm"],"source":"evince-3.28.2-9.el7.src.rpm"},{"binary":["python3-3.6.8-13.el7.x86_64.rpm","python3-debug-3.6.8-13.el7.x86_64.rpm","python3-idle-3.6.8-13.el7.x86_64.rpm","python3-devel-3.6.8-13.el7.x86_64.rpm","python3-test-3.6.8-13.el7.x86_64.rpm","python3-libs-3.6.8-13.el7.x86_64.rpm","python3-tkinter-3.6.8-13.el7.x86_64.rpm"],"source":"python3-3.6.8-13.el7.src.rpm"}]},{"product":"CGSL CORE 5.05","pkgs":[{"binary":["evince-browser-plugin-3.28.2-9.el7.x86_64.rpm","evince-3.28.2-9.el7.x86_64.rpm","evince-debuginfo-3.28.2-9.el7.x86_64.rpm","evince-libs-3.28.2-9.el7.x86_64.rpm","evince-dvi-3.28.2-9.el7.x86_64.rpm","evince-devel-3.28.2-9.el7.x86_64.rpm","evince-nautilus-3.28.2-9.el7.x86_64.rpm"],"source":"evince-3.28.2-9.el7.src.rpm"},{"binary":["python3-3.6.8-13.el7.x86_64.rpm","python3-debug-3.6.8-13.el7.x86_64.rpm","python3-devel-3.6.8-13.el7.x86_64.rpm","python3-idle-3.6.8-13.el7.x86_64.rpm","python3-libs-3.6.8-13.el7.x86_64.rpm","python3-test-3.6.8-13.el7.x86_64.rpm","python3-tkinter-3.6.8-13.el7.x86_64.rpm"],"source":"python3-3.6.8-13.el7.src.rpm"}]}]}

CVE

参考