shield Security update for python, python-base

SUSE-SLE-SDK-12-SP4-2018-2520

This update for python, python-base fixes the following issues: Security issues fixed: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663). - CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004). - CVE-2018-1060: Fixed DoS via regular expression catastrophic backtracking in apop() method in pop3lib (bsc#1088009). Bug fixes: - bsc#1086001: python tarfile uses random order.

• Release Date
  Dec 10 2018
• References
  Bugzilla: 1109663, 1086001, 1088004, 1088009
  CVEs: CVE-2018-1000802, CVE-2018-1060, CVE-2018-1061
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.4 aarch64

• Packages
  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock src

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.13-28.16.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 ppc64le

• Packages
  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock src

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.13-28.16.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 s390x

• Packages
  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock src

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.13-28.16.1

  lock rpm

SUSE Linux Enterprise Software Development Kit 12.4 x86_64

• Packages
  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock src

  python-devel
  Include Files and Libraries Mandatory for Building Python Modules

  2.7.13-28.16.1

  lock rpm