shield Security update for python
sdksp4-python-13818


This update for python fixes the following issue: - CVE-2018-14647: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM (bsc#1109847)

  • Release Date
    Oct 16 2018
  • References
    Bugzilla: 1109847
    CVEs: CVE-2018-14647
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    python-base
    Debug sources for package python-base
    2.6.9-40.21.1 lock src
    python-devel
    Include Files and Libraries Mandatory for Building Python Modules
    2.6.9-40.21.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    python
    Python Interpreter
    2.6.9-40.21.2 lock src
    python-base
    Debug sources for package python-base
    2.6.9-40.21.1 lock src
    python-demo
    Python Demonstration Scripts
    2.6.9-40.21.2 lock rpm
    python-devel
    Include Files and Libraries Mandatory for Building Python Modules
    2.6.9-40.21.1 lock rpm
    python-doc
    Additional Package Documentation for Python.
    2.6-8.40.21.1 lock rpm lock src
    python-doc-pdf
    Python PDF Documentation
    2.6-8.40.21.1 lock rpm
    python-gdbm
    Python Interface to the GDBM Library
    2.6.9-40.21.2 lock rpm
    python-idle
    An Integrated Development Environment for Python
    2.6.9-40.21.2 lock rpm
    python-tk
    TkInter - Python Tk Interface
    2.6.9-40.21.2 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    python-base
    Debug sources for package python-base
    2.6.9-40.21.1 lock src
    python-devel
    Include Files and Libraries Mandatory for Building Python Modules
    2.6.9-40.21.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    python-base
    Debug sources for package python-base
    2.6.9-40.21.1 lock src
    python-devel
    Include Files and Libraries Mandatory for Building Python Modules
    2.6.9-40.21.1 lock rpm
SUSE Linux Enterprise Software Development Kit 11.4 unknown
  • Packages
    python
    Python Interpreter
    2.6.9-40.21.2 lock src
    python-32bit
    Python Interpreter
    2.6.9-40.21.2 lock rpm
    python-base
    Debug sources for package python-base
    2.6.9-40.21.1 lock src
    python-demo
    Python Demonstration Scripts
    2.6.9-40.21.2 lock rpm
    python-devel
    Include Files and Libraries Mandatory for Building Python Modules
    2.6.9-40.21.1 lock rpm
    python-doc
    Additional Package Documentation for Python.
    2.6-8.40.21.1 lock rpm lock src
    python-doc-pdf
    Python PDF Documentation
    2.6-8.40.21.1 lock rpm
    python-gdbm
    Python Interface to the GDBM Library
    2.6.9-40.21.2 lock rpm
    python-idle
    An Integrated Development Environment for Python
    2.6.9-40.21.2 lock rpm
    python-tk
    TkInter - Python Tk Interface
    2.6.9-40.21.2 lock rpm