ALAS-2020-1432


Amazon Linux AMI Security Advisory: ALAS-2020-1432
Advisory Release Date: 2020-09-03 22:08 Pacific
Advisory Updated Date: 2020-09-04 04:15 Pacific
Severity: Medium
References: CVE-2020-14422 

Issue Overview:

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface objects, and this attacker can cause many dictionary entries to be created. (CVE-2020-14422 )


Affected Packages:

python34, python36, python35


Issue Correction:
Run yum update python34 to update your system.
Run yum update python36 to update your system.
Run yum update python35 to update your system.

New Packages:
i686:
    python34-libs-3.4.10-1.52.amzn1.i686
    python34-tools-3.4.10-1.52.amzn1.i686
    python34-3.4.10-1.52.amzn1.i686
    python34-devel-3.4.10-1.52.amzn1.i686
    python34-test-3.4.10-1.52.amzn1.i686
    python34-debuginfo-3.4.10-1.52.amzn1.i686
    python35-tools-3.5.9-1.28.amzn1.i686
    python35-3.5.9-1.28.amzn1.i686
    python35-libs-3.5.9-1.28.amzn1.i686
    python35-debuginfo-3.5.9-1.28.amzn1.i686
    python35-devel-3.5.9-1.28.amzn1.i686
    python35-test-3.5.9-1.28.amzn1.i686
    python36-tools-3.6.12-1.19.amzn1.i686
    python36-3.6.12-1.19.amzn1.i686
    python36-debug-3.6.12-1.19.amzn1.i686
    python36-test-3.6.12-1.19.amzn1.i686
    python36-libs-3.6.12-1.19.amzn1.i686
    python36-debuginfo-3.6.12-1.19.amzn1.i686
    python36-devel-3.6.12-1.19.amzn1.i686

src:
    python34-3.4.10-1.52.amzn1.src
    python35-3.5.9-1.28.amzn1.src
    python36-3.6.12-1.19.amzn1.src

x86_64:
    python34-tools-3.4.10-1.52.amzn1.x86_64
    python34-test-3.4.10-1.52.amzn1.x86_64
    python34-debuginfo-3.4.10-1.52.amzn1.x86_64
    python34-devel-3.4.10-1.52.amzn1.x86_64
    python34-libs-3.4.10-1.52.amzn1.x86_64
    python34-3.4.10-1.52.amzn1.x86_64
    python35-test-3.5.9-1.28.amzn1.x86_64
    python35-libs-3.5.9-1.28.amzn1.x86_64
    python35-3.5.9-1.28.amzn1.x86_64
    python35-tools-3.5.9-1.28.amzn1.x86_64
    python35-devel-3.5.9-1.28.amzn1.x86_64
    python35-debuginfo-3.5.9-1.28.amzn1.x86_64
    python36-test-3.6.12-1.19.amzn1.x86_64
    python36-devel-3.6.12-1.19.amzn1.x86_64
    python36-3.6.12-1.19.amzn1.x86_64
    python36-debuginfo-3.6.12-1.19.amzn1.x86_64
    python36-debug-3.6.12-1.19.amzn1.x86_64
    python36-tools-3.6.12-1.19.amzn1.x86_64
    python36-libs-3.6.12-1.19.amzn1.x86_64