ALAS-2020-1432


Amazon Linux 1 Security Advisory: ALAS-2020-1432
Advisory Release Date: 2020-09-03 22:08 Pacific
Advisory Updated Date: 2023-02-17 00:02 Pacific
Severity: Medium

Issue Overview:

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. (CVE-2020-14422)


Affected Packages:

python34, python35, python36


Issue Correction:
Run yum update python34 to update your system.
Run yum update python36 to update your system.
Run yum update python35 to update your system.

New Packages:
i686:
    python34-libs-3.4.10-1.52.amzn1.i686
    python34-tools-3.4.10-1.52.amzn1.i686
    python34-3.4.10-1.52.amzn1.i686
    python34-devel-3.4.10-1.52.amzn1.i686
    python34-test-3.4.10-1.52.amzn1.i686
    python34-debuginfo-3.4.10-1.52.amzn1.i686
    python35-tools-3.5.9-1.28.amzn1.i686
    python35-3.5.9-1.28.amzn1.i686
    python35-libs-3.5.9-1.28.amzn1.i686
    python35-debuginfo-3.5.9-1.28.amzn1.i686
    python35-devel-3.5.9-1.28.amzn1.i686
    python35-test-3.5.9-1.28.amzn1.i686
    python36-tools-3.6.12-1.19.amzn1.i686
    python36-3.6.12-1.19.amzn1.i686
    python36-debug-3.6.12-1.19.amzn1.i686
    python36-test-3.6.12-1.19.amzn1.i686
    python36-libs-3.6.12-1.19.amzn1.i686
    python36-debuginfo-3.6.12-1.19.amzn1.i686
    python36-devel-3.6.12-1.19.amzn1.i686

src:
    python34-3.4.10-1.52.amzn1.src
    python35-3.5.9-1.28.amzn1.src
    python36-3.6.12-1.19.amzn1.src

x86_64:
    python34-tools-3.4.10-1.52.amzn1.x86_64
    python34-test-3.4.10-1.52.amzn1.x86_64
    python34-debuginfo-3.4.10-1.52.amzn1.x86_64
    python34-devel-3.4.10-1.52.amzn1.x86_64
    python34-libs-3.4.10-1.52.amzn1.x86_64
    python34-3.4.10-1.52.amzn1.x86_64
    python35-test-3.5.9-1.28.amzn1.x86_64
    python35-libs-3.5.9-1.28.amzn1.x86_64
    python35-3.5.9-1.28.amzn1.x86_64
    python35-tools-3.5.9-1.28.amzn1.x86_64
    python35-devel-3.5.9-1.28.amzn1.x86_64
    python35-debuginfo-3.5.9-1.28.amzn1.x86_64
    python36-test-3.6.12-1.19.amzn1.x86_64
    python36-devel-3.6.12-1.19.amzn1.x86_64
    python36-3.6.12-1.19.amzn1.x86_64
    python36-debuginfo-3.6.12-1.19.amzn1.x86_64
    python36-debug-3.6.12-1.19.amzn1.x86_64
    python36-tools-3.6.12-1.19.amzn1.x86_64
    python36-libs-3.6.12-1.19.amzn1.x86_64