Bugzilla – Bug 1194146
VUL-0: CVE-2021-4189: python39,python,python36,python3,python27: ftplib should not use the host from the PASV response
Last modified: 2022-12-09 07:35:55 UTC
rh#2036020 The problem is ftp client trust the host from PASV response by default, A malicious server can trick ftp client into connecting back to a given IP address and port. This may make ftp client scan ports and extract service banner from private network. References: https://bugs.python.org/issue43285 References: https://bugzilla.redhat.com/show_bug.cgi?id=2036020 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-4189
Affected: - SUSE:SLE-11-SP1:Update / python - SUSE:SLE-12-SP1:Update / python - SUSE:SLE-15:Update / python - SUSE:SLE-11-SP1:Update:Teradata / python27 - SUSE:SLE-12:Update / python3 The fix was already introduced in newer SLE codestreams for python3, and for the python36 and python39 packages. Also affected on openSUSE: - openSUSE:Factory / python
This is an autogenerated message for OBS integration: This bug (1194146) was mentioned in https://build.opensuse.org/request/show/951983 Factory / python
This is an autogenerated message for OBS integration: This bug (1194146) was mentioned in https://build.opensuse.org/request/show/953031 Factory / python
SUSE-SU-2022:0882-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1194146,1195396 CVE References: CVE-2021-4189,CVE-2022-0391 JIRA References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP5 (src): python3-3.4.10-25.85.2, python3-base-3.4.10-25.85.1 SUSE Linux Enterprise Server 12-SP5 (src): python3-3.4.10-25.85.2, python3-base-3.4.10-25.85.1 SUSE Linux Enterprise Module for Web Scripting 12 (src): python3-3.4.10-25.85.2, python3-base-3.4.10-25.85.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Hi Matej, could you also submit SUSE:SLE-12-SP4:Update/python?
openSUSE-SU-2022:1091-1: An update that solves three vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1175619,1186819,1194146,1195396 CVE References: CVE-2021-3572,CVE-2021-4189,CVE-2022-0391 JIRA References: Sources used: openSUSE Leap 15.4 (src): python-2.7.18-150000.38.1, python-base-2.7.18-150000.38.2, python-doc-2.7.18-150000.38.1 openSUSE Leap 15.3 (src): python-2.7.18-150000.38.1, python-base-2.7.18-150000.38.2, python-doc-2.7.18-150000.38.1
SUSE-SU-2022:1091-1: An update that solves three vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1175619,1186819,1194146,1195396 CVE References: CVE-2021-3572,CVE-2021-4189,CVE-2022-0391 JIRA References: Sources used: SUSE Linux Enterprise Realtime Extension 15-SP2 (src): python-2.7.18-150000.38.1, python-base-2.7.18-150000.38.2 SUSE Linux Enterprise Module for Python2 15-SP3 (src): python-2.7.18-150000.38.1, python-base-2.7.18-150000.38.2 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src): python-2.7.18-150000.38.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): python-2.7.18-150000.38.1, python-base-2.7.18-150000.38.2 SUSE Linux Enterprise Module Python3 15-SP4 (src): python-base-2.7.18-150000.38.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
The Salt Bundle is not affected as it contains Python 3.9.6 and will switch to 3.10.2 soon.
SUSE-SU-2022:1140-1: An update that solves two vulnerabilities, contains one feature and has one errata is now available. Category: security (moderate) Bug References: 1187784,1194146,1195396 CVE References: CVE-2021-4189,CVE-2022-0391 JIRA References: SLE-18105 Sources used: SUSE OpenStack Cloud Crowbar 9 (src): python-2.7.18-33.8.1, python-base-2.7.18-33.8.1, python-doc-2.7.18-33.8.1 SUSE OpenStack Cloud 9 (src): python-2.7.18-33.8.1, python-base-2.7.18-33.8.1, python-doc-2.7.18-33.8.1 SUSE Linux Enterprise Workstation Extension 12-SP5 (src): python-base-2.7.18-33.8.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): python-2.7.18-33.8.1, python-base-2.7.18-33.8.1, python-doc-2.7.18-33.8.1 SUSE Linux Enterprise Server 12-SP5 (src): python-2.7.18-33.8.1, python-base-2.7.18-33.8.1, python-doc-2.7.18-33.8.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): python-2.7.18-33.8.1, python-base-2.7.18-33.8.1, python-doc-2.7.18-33.8.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
(In reply to Gabriele Sonnu from comment #14) > Hi Matej, could you also submit SUSE:SLE-12-SP4:Update/python? I think it has been already fixed, at least I see CVE-2021-4189-ftplib-trust-PASV-resp.patch there.
All fixed and packages released.
Mistakenly closed, security bugs are just reassigned.
This is an autogenerated message for OBS integration: This bug (1194146) was mentioned in https://build.opensuse.org/request/show/981989 Factory / python