shield Security update for python, python-base

SUSE-SLE-SERVER-12-SP4-2018-2520

This update for python, python-base fixes the following issues: Security issues fixed: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663). - CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004). - CVE-2018-1060: Fixed DoS via regular expression catastrophic backtracking in apop() method in pop3lib (bsc#1088009). Bug fixes: - bsc#1086001: python tarfile uses random order.

• Release Date
  Dec 10 2018
• References
  Bugzilla: 1109663, 1086001, 1088004, 1088009
  CVEs: CVE-2018-1000802, CVE-2018-1060, CVE-2018-1061
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.13-28.16.1

  lock rpm

  python
  Python Interpreter

  2.7.13-28.16.1

  lock rpm

  lock src

  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock rpm

  lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.13-28.16.1

  lock rpm

  python-demo
  Python Demonstration Scripts

  2.7.13-28.16.1

  lock rpm

  python-doc
  Additional Package Documentation for Python

  2.7.13-28.16.1

  lock rpm

  lock src

  python-doc-pdf
  Python PDF Documentation

  2.7.13-28.16.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.13-28.16.1

  lock rpm

  python-idle
  An Integrated Development Environment for Python

  2.7.13-28.16.1

  lock rpm

  python-tk
  TkInter - Python Tk Interface

  2.7.13-28.16.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.13-28.16.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.13-28.16.1

  lock rpm

  python
  Python Interpreter

  2.7.13-28.16.1

  lock rpm

  lock src

  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock rpm

  lock src

  python-curses
  Python Interface to the (N)Curses Library

  2.7.13-28.16.1

  lock rpm

  python-demo
  Python Demonstration Scripts

  2.7.13-28.16.1

  lock rpm

  python-doc
  Additional Package Documentation for Python

  2.7.13-28.16.1

  lock rpm

  lock src

  python-doc-pdf
  Python PDF Documentation

  2.7.13-28.16.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.13-28.16.1

  lock rpm

  python-idle
  An Integrated Development Environment for Python

  2.7.13-28.16.1

  lock rpm

  python-tk
  TkInter - Python Tk Interface

  2.7.13-28.16.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.13-28.16.1

  lock rpm

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.13-28.16.1

  lock rpm

  libpython2_7-1_0-32bit
  Python Interpreter shared library

  2.7.13-28.16.1

  lock rpm

  python
  Python Interpreter

  2.7.13-28.16.1

  lock rpm

  lock src

  python-32bit
  Python Interpreter

  2.7.13-28.16.1

  lock rpm

  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock rpm

  lock src

  python-base-32bit
  Python Interpreter base package

  2.7.13-28.16.1

  lock rpm

  python-curses
  Python Interface to the (N)Curses Library

  2.7.13-28.16.1

  lock rpm

  python-demo
  Python Demonstration Scripts

  2.7.13-28.16.1

  lock rpm

  python-doc
  Additional Package Documentation for Python

  2.7.13-28.16.1

  lock rpm

  lock src

  python-doc-pdf
  Python PDF Documentation

  2.7.13-28.16.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.13-28.16.1

  lock rpm

  python-idle
  An Integrated Development Environment for Python

  2.7.13-28.16.1

  lock rpm

  python-tk
  TkInter - Python Tk Interface

  2.7.13-28.16.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.13-28.16.1

  lock rpm

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libpython2_7-1_0
  Python Interpreter shared library

  2.7.13-28.16.1

  lock rpm

  libpython2_7-1_0-32bit
  Python Interpreter shared library

  2.7.13-28.16.1

  lock rpm

  python
  Python Interpreter

  2.7.13-28.16.1

  lock rpm

  lock src

  python-32bit
  Python Interpreter

  2.7.13-28.16.1

  lock rpm

  python-base
  Python Interpreter base package

  2.7.13-28.16.1

  lock rpm

  lock src

  python-base-32bit
  Python Interpreter base package

  2.7.13-28.16.1

  lock rpm

  python-curses
  Python Interface to the (N)Curses Library

  2.7.13-28.16.1

  lock rpm

  python-demo
  Python Demonstration Scripts

  2.7.13-28.16.1

  lock rpm

  python-doc
  Additional Package Documentation for Python

  2.7.13-28.16.1

  lock rpm

  lock src

  python-doc-pdf
  Python PDF Documentation

  2.7.13-28.16.1

  lock rpm

  python-gdbm
  Python Interface to the GDBM Library

  2.7.13-28.16.1

  lock rpm

  python-idle
  An Integrated Development Environment for Python

  2.7.13-28.16.1

  lock rpm

  python-tk
  TkInter - Python Tk Interface

  2.7.13-28.16.1

  lock rpm

  python-xml
  A Python XML Interface

  2.7.13-28.16.1

  lock rpm