shield Security update for python3

SUSE-SLE-Module-Web-Scripting-12-2018-1886

This update for python3 provides the following fixes: These security issues were fixed: - CVE-2018-1061: Prevent catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could have used this flaw to cause denial of service (bsc#1088004). - CVE-2018-1060: Prevent catastrophic backtracking in pop3lib's apop() method. An attacker could have used this flaw to cause denial of service (bsc#1088009). These non-security issues were fixed: - Sort files and directories when creating tarfile archives so that they are created in a more predictable way. (bsc#1086001) - Add -fwrapv to OPTS (bsc#1107030)

• Release Date
  Sep 12 2018
• References
  Bugzilla: 1088004, 1088009, 1107030, 1086001
  CVEs: CVE-2018-1060, CVE-2018-1061
• Type
  security
• Severity
  moderate

cloud_download Downloads

Web and Scripting Module 12 aarch64

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.6-25.16.1 lock rpm

  python3
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

Web and Scripting Module 12 s390x

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.6-25.16.1 lock rpm

  python3
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

Web and Scripting Module 12 x86_64

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.6-25.16.1 lock rpm

  python3
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

Web and Scripting Module 12 ppc64le

• Packages
  libpython3_4m1_0
  Python Interpreter shared library

  3.4.6-25.16.1 lock rpm

  python3
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src

  python3-base
  Python3 Interpreter

  3.4.6-25.16.1 lock rpm lock src