Vulmon
Amazon Linux AMI Security Advisory: ALAS-2020-1432
Advisory Release Date: 2020-09-03 22:08 Pacific
Advisory Updated Date: 2020-09-04 04:15 Pacific
Severity:
Medium
References:
CVE-2020-14422
Issue Overview:
Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. (CVE-2020-14422)
Affected Packages:
python34, python36, python35
Issue Correction:
Run yum update python34 to update your system.
Run yum update python36 to update your system.
Run yum update python35 to update your system.
New Packages:
i686:
python34-libs-3.4.10-1.52.amzn1.i686
python34-tools-3.4.10-1.52.amzn1.i686
python34-3.4.10-1.52.amzn1.i686
python34-devel-3.4.10-1.52.amzn1.i686
python34-test-3.4.10-1.52.amzn1.i686
python34-debuginfo-3.4.10-1.52.amzn1.i686
python35-tools-3.5.9-1.28.amzn1.i686
python35-3.5.9-1.28.amzn1.i686
python35-libs-3.5.9-1.28.amzn1.i686
python35-debuginfo-3.5.9-1.28.amzn1.i686
python35-devel-3.5.9-1.28.amzn1.i686
python35-test-3.5.9-1.28.amzn1.i686
python36-tools-3.6.12-1.19.amzn1.i686
python36-3.6.12-1.19.amzn1.i686
python36-debug-3.6.12-1.19.amzn1.i686
python36-test-3.6.12-1.19.amzn1.i686
python36-libs-3.6.12-1.19.amzn1.i686
python36-debuginfo-3.6.12-1.19.amzn1.i686
python36-devel-3.6.12-1.19.amzn1.i686
src:
python34-3.4.10-1.52.amzn1.src
python35-3.5.9-1.28.amzn1.src
python36-3.6.12-1.19.amzn1.src
x86_64:
python34-tools-3.4.10-1.52.amzn1.x86_64
python34-test-3.4.10-1.52.amzn1.x86_64
python34-debuginfo-3.4.10-1.52.amzn1.x86_64
python34-devel-3.4.10-1.52.amzn1.x86_64
python34-libs-3.4.10-1.52.amzn1.x86_64
python34-3.4.10-1.52.amzn1.x86_64
python35-test-3.5.9-1.28.amzn1.x86_64
python35-libs-3.5.9-1.28.amzn1.x86_64
python35-3.5.9-1.28.amzn1.x86_64
python35-tools-3.5.9-1.28.amzn1.x86_64
python35-devel-3.5.9-1.28.amzn1.x86_64
python35-debuginfo-3.5.9-1.28.amzn1.x86_64
python36-test-3.6.12-1.19.amzn1.x86_64
python36-devel-3.6.12-1.19.amzn1.x86_64
python36-3.6.12-1.19.amzn1.x86_64
python36-debuginfo-3.6.12-1.19.amzn1.x86_64
python36-debug-3.6.12-1.19.amzn1.x86_64
python36-tools-3.6.12-1.19.amzn1.x86_64
python36-libs-3.6.12-1.19.amzn1.x86_64