Security update for python SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:2408-1 Final 1 1 2018-08-17T08:41:29Z current 2018-08-17T08:41:29Z 2018-08-17T08:41:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for python This update for python-base fixes the following issues: Security issues fixed: - CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004). - CVE-2018-1060: Fixed DoS via regular expression catastrophic backtracking in apop() method in pop3lib (bsc#1088009). - CVE-2016-5636: Fixed heap overflow in zipimporter module (bsc#985177) Bug fixes: - bsc#1086001: python tarfile uses random order. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-python-13737,sleposp3-python-13737,slessp3-python-13737,slessp4-python-13737 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20182408-1/ Link for SUSE-SU-2018:2408-1 https://lists.suse.com/pipermail/sle-security-updates/2018-August/004463.html E-Mail link for SUSE-SU-2018:2408-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1086001 SUSE Bug 1086001 https://bugzilla.suse.com/1088004 SUSE Bug 1088004 https://bugzilla.suse.com/1088009 SUSE Bug 1088009 https://bugzilla.suse.com/985177 SUSE Bug 985177 https://www.suse.com/security/cve/CVE-2016-5636/ SUSE CVE CVE-2016-5636 page https://www.suse.com/security/cve/CVE-2018-1060/ SUSE CVE CVE-2018-1060 page https://www.suse.com/security/cve/CVE-2018-1061/ SUSE CVE CVE-2018-1061 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 python-32bit-2.6.9-40.15.1 python-demo-2.6.9-40.15.1 python-devel-2.6.9-40.15.1 python-doc-2.6-8.40.15.1 python-doc-pdf-2.6-8.40.15.1 python-gdbm-2.6.9-40.15.1 python-idle-2.6.9-40.15.1 python-tk-2.6.9-40.15.1 libpython2_6-1_0-2.6.9-40.15.1 python-2.6.9-40.15.1 python-base-2.6.9-40.15.1 python-curses-2.6.9-40.15.1 python-xml-2.6.9-40.15.1 libpython2_6-1_0-32bit-2.6.9-40.15.1 python-base-32bit-2.6.9-40.15.1 libpython2_6-1_0-x86-2.6.9-40.15.1 python-base-x86-2.6.9-40.15.1 python-x86-2.6.9-40.15.1 libpython2_6-1_0-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-base-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-curses-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-demo-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-doc-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-doc-pdf-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-gdbm-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-idle-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-tk-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 python-xml-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 libpython2_6-1_0-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libpython2_6-1_0-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-base-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-base-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-curses-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-demo-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-doc-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-doc-pdf-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-gdbm-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-idle-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-tk-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS python-xml-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS libpython2_6-1_0-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpython2_6-1_0-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-base-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-base-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-curses-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-demo-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-doc-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-doc-pdf-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-gdbm-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-idle-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-tk-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA python-xml-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpython2_6-1_0-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpython2_6-1_0-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpython2_6-1_0-x86-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-base-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-base-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-base-x86-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-curses-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-demo-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-doc-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-doc-pdf-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-gdbm-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-idle-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-tk-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-x86-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 python-xml-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpython2_6-1_0-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libpython2_6-1_0-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libpython2_6-1_0-x86-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-base-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-base-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-base-x86-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-curses-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-demo-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-doc-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-doc-pdf-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-gdbm-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-idle-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-tk-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-x86-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-xml-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 python-32bit-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-demo-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-devel-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-doc-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-doc-pdf-2.6-8.40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-gdbm-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-idle-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 python-tk-2.6.9-40.15.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. CVE-2016-5636 SUSE Linux Enterprise Point of Sale 11 SP3:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-devel-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-tk-2.6.9-40.15.1 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182408-1/ https://www.suse.com/security/cve/CVE-2016-5636.html CVE-2016-5636 https://bugzilla.suse.com/1065451 SUSE Bug 1065451 https://bugzilla.suse.com/1106262 SUSE Bug 1106262 https://bugzilla.suse.com/985177 SUSE Bug 985177 python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service. CVE-2018-1060 SUSE Linux Enterprise Point of Sale 11 SP3:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-devel-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-tk-2.6.9-40.15.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182408-1/ https://www.suse.com/security/cve/CVE-2018-1060.html CVE-2018-1060 https://bugzilla.suse.com/1088009 SUSE Bug 1088009 python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service. CVE-2018-1061 SUSE Linux Enterprise Point of Sale 11 SP3:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Point of Sale 11 SP3:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-LTSS:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-base-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server 11 SP4:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpython2_6-1_0-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-base-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-curses-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-tk-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-x86-2.6.9-40.15.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:python-xml-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-32bit-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-demo-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-devel-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-doc-2.6-8.40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-doc-pdf-2.6-8.40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-gdbm-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-idle-2.6.9-40.15.1 SUSE Linux Enterprise Software Development Kit 11 SP4:python-tk-2.6.9-40.15.1 important 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20182408-1/ https://www.suse.com/security/cve/CVE-2018-1061.html CVE-2018-1061 https://bugzilla.suse.com/1088004 SUSE Bug 1088004