FlawAtlas
Search the atlas
SUSE-SU-2018:1372-1 Not scored

Security update for python

This update for python fixes the following issues: Security issues fixed: - CVE-2017-1000158: Fixed integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution (bsc#1068664). - CVE-2018-1000030: Fixed crash inside the Python interpreter when multiple threads used the same I/O stream concurrently (bsc#1079300).

Exploit probability Not scored
Published May 22, 2018
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 5 python
SUSE:Linux Enterprise Desktop 12 SP3 python
SUSE:Linux Enterprise Desktop 12 SP3 python-base
SUSE:Linux Enterprise Server 12 SP3 python
SUSE:Linux Enterprise Server 12 SP3 python-base
SUSE:Linux Enterprise Server 12 SP3 python-doc
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 python
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 python-base
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 python-doc
SUSE:Linux Enterprise Software Development Kit 12 SP3 python-base
SUSE:Linux Enterprise Workstation Extension 12 SP3 python-base

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2018:1372-1

This update for python fixes the following issues: Security issues fixed: - CVE-2017-1000158: Fixed integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution (bsc#1068664). - CVE-2018-1000030: Fixed crash inside the Python interpreter when multiple threads used the same I/O stream concurrently (bsc#1079300).

View original source

05 / REFERENCES

Further evidence