Уведомление безопасности SUSE-SU-2018:1372-1

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

SUSE

libpython2_7-1_0 (any) libpython2_7-1_0-32bit (any) libpython2_7-1_0-debuginfo (any) libpython2_7-1_0-debuginfo-32bit (any) python (any) python-32bit (any) python-base (any) python-base-32bit (any) python-base-debuginfo (any) python-base-debuginfo-32bit (any) python-base-debugsource (any) python-curses (any) python-curses-debuginfo (any) python-debuginfo (any) python-debuginfo-32bit (any) python-debugsource (any) python-demo (any) python-devel (any) python-doc (any) python-doc-pdf (any) python-gdbm (any) python-gdbm-debuginfo (any) python-idle (any) python-tk (any) python-tk-debuginfo (any) python-xml (any) python-xml-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Desktop 12-SP3, OpenStack Cloud Magnum Orchestration 7, SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP3, SUSE CaaS Platform ALL, SUSE Linux Enterprise Workstation Extension 12-SP3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
python-base-debuginfo - 2.7.13-28.3.2
python-base-debugsource - 2.7.13-28.3.2
python-devel - 2.7.13-28.3.2
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
python-curses-debuginfo - 2.7.13-28.3.2
python - 2.7.13-28.3.2
python-devel - 2.7.13-28.3.2
python-base-debugsource - 2.7.13-28.3.2
libpython2_7-1_0-32bit - 2.7.13-28.3.2
python-debugsource - 2.7.13-28.3.2
python-base - 2.7.13-28.3.2
python-tk - 2.7.13-28.3.2
python-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0 - 2.7.13-28.3.2
python-base-debuginfo-32bit - 2.7.13-28.3.2
python-base-debuginfo - 2.7.13-28.3.2
python-curses - 2.7.13-28.3.2
python-xml - 2.7.13-28.3.2
python-tk-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0-debuginfo - 2.7.13-28.3.2
python-xml-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0-debuginfo-32bit - 2.7.13-28.3.2
OpenStack Cloud Magnum Orchestration 7:
x86_64:
python - 2.7.13-28.3.2
python-base-debugsource - 2.7.13-28.3.2
python-debugsource - 2.7.13-28.3.2
python-base - 2.7.13-28.3.2
python-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0 - 2.7.13-28.3.2
python-base-debuginfo - 2.7.13-28.3.2
python-xml - 2.7.13-28.3.2
libpython2_7-1_0-debuginfo - 2.7.13-28.3.2
python-xml-debuginfo - 2.7.13-28.3.2
SUSE Enterprise Storage 5:
aarch64, x86_64:
python-debuginfo - 2.7.13-28.3.2
python-strict-tls-check - 2.7.13-28.3.2
python-debugsource - 2.7.13-28.3.2
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
python-curses-debuginfo - 2.7.13-28.3.2
python - 2.7.13-28.3.2
python-xml-debuginfo - 2.7.13-28.3.2
python-base-debugsource - 2.7.13-28.3.2
python-curses - 2.7.13-28.3.2
python-debugsource - 2.7.13-28.3.2
python-gdbm - 2.7.13-28.3.2
python-base - 2.7.13-28.3.2
python-demo - 2.7.13-28.3.2
python-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0 - 2.7.13-28.3.2
python-idle - 2.7.13-28.3.2
python-base-debuginfo - 2.7.13-28.3.2
python-gdbm-debuginfo - 2.7.13-28.3.2
python-tk - 2.7.13-28.3.2
python-tk-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0-debuginfo - 2.7.13-28.3.2
python-xml - 2.7.13-28.3.2
SUSE Linux Enterprise Server 12-SP3:
s390x, x86_64:
libpython2_7-1_0-32bit - 2.7.13-28.3.2
python-32bit - 2.7.13-28.3.2
python-base-debuginfo-32bit - 2.7.13-28.3.2
python-debuginfo-32bit - 2.7.13-28.3.2
python-base-32bit - 2.7.13-28.3.2
libpython2_7-1_0-debuginfo-32bit - 2.7.13-28.3.2
SUSE Linux Enterprise Server 12-SP3:
noarch:
python-doc - 2.7.13-28.3.3
python-doc-pdf - 2.7.13-28.3.3
SUSE CaaS Platform ALL:
x86_64:
python - 2.7.13-28.3.2
python-base-debugsource - 2.7.13-28.3.2
python-debugsource - 2.7.13-28.3.2
python-base - 2.7.13-28.3.2
python-debuginfo - 2.7.13-28.3.2
libpython2_7-1_0 - 2.7.13-28.3.2
python-base-debuginfo - 2.7.13-28.3.2
python-xml - 2.7.13-28.3.2
libpython2_7-1_0-debuginfo - 2.7.13-28.3.2
python-xml-debuginfo - 2.7.13-28.3.2
SUSE Linux Enterprise Workstation Extension 12-SP3:
x86_64:
python-base-debuginfo - 2.7.13-28.3.2
python-base-debugsource - 2.7.13-28.3.2
python-devel - 2.7.13-28.3.2

http://lists.suse.com/pipermail/sle-security-updates/2018-May/004074.html
https://bugzilla.suse.com/1068664
https://bugzilla.suse.com/1079300

Источник: CVE
Наименование: CVE-2017-1000158
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000158

Источник: CVE
Наименование: CVE-2018-1000030
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000030