Security update for python, python-base
This update for python, python-base fixes the following issues: Security issues fixed: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663). - CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004). - CVE-2018-1060: Fixed DoS via regular expression catastrophic backtracking in apop() method in pop3lib (bsc#1088009). Bug fixes: - bsc#1086001: python tarfile uses random order.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for python, python-base fixes the following issues: Security issues fixed: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663). - CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004). - CVE-2018-1060: Fixed DoS via regular expression catastrophic backtracking in apop() method in pop3lib (bsc#1088009). Bug fixes: - bsc#1086001: python tarfile uses random order.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1086001
- https://bugzilla.suse.com/1088004
- https://bugzilla.suse.com/1088009
- https://bugzilla.suse.com/1109663
- https://www.suse.com/security/cve/CVE-2018-1000802
- https://www.suse.com/security/cve/CVE-2018-1060
- https://www.suse.com/security/cve/CVE-2018-1061
- https://www.suse.com/support/update/announcement/2018/suse-su-20183554-2/