SUSE-SU-2018:2408-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2018:2408-1

UNKNOWN

Security update for python

Published Aug 17, 2018

Modified 7 years ago

Fix available

Details

This update for python-base fixes the following issues:

Security issues fixed:

CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004).
CVE-2018-1060: Fixed DoS via regular expression catastrophic backtracking in apop() method in pop3lib (bsc#1088009).
CVE-2016-5636: Fixed heap overflow in zipimporter module (bsc#985177)

Bug fixes:

bsc#1086001: python tarfile uses random order.

Affected Packages(18 packages)

libpython2_6-1_0

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python-base

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python-curses

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python-demo

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python-doc

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6-8.40.15.1

python-doc-pdf

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6-8.40.15.1

python-gdbm

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python-idle

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

python-tk

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP3-LTSSSUSE Linux Enterprise Server 11 SP3-TERADATASUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4

Fixed in:

2.6.9-40.15.1

References

https://bugzilla.suse.com/1086001

https://bugzilla.suse.com/1088004

https://bugzilla.suse.com/1088009

https://bugzilla.suse.com/985177

https://www.suse.com/security/cve/CVE-2016-5636

https://www.suse.com/security/cve/CVE-2018-1060

https://www.suse.com/security/cve/CVE-2018-1061

https://www.suse.com/support/update/announcement/2018/suse-su-20182408-1/

Upstream

CVE-2016-5636 CVE-2018-1060 CVE-2018-1061

Related

CVE-2016-5636 CVE-2018-1060 CVE-2018-1061

Ecosystems(6)

SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4

Timeline

PublishedAug 17, 2018

ModifiedAug 17, 2018