Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Производитель ПО
Наименование ПО
python3-cryptography
(any)
python3-cryptography-debuginfo
(any)
python3-pyOpenSSL
(any)
python3-setuptools
(any)
python-cryptography
(any)
python-cryptography-debuginfo
(any)
python-cryptography-debugsource
(any)
python-pyOpenSSL
(any)
python-setuptools
(any)
Описание
Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE OpenStack Cloud 7, SUSE CaaS Platform ALL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Desktop 12-SP4, SUSE Linux Enterprise Module for Containers 12, OpenStack Cloud Magnum Orchestration 7, SUSE Linux Enterprise Module for Public Cloud 12, SUSE Linux Enterprise Server 12-SP1-LTSS, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server 12-SP4, SUSE CaaS Platform 3.0, SUSE Linux Enterprise Desktop 12-SP3, SUSE Enterprise Storage 4, SUSE OpenStack Cloud 6-LTSS
Как исправить
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Server 12-SP2-BCL:
x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP2-BCL:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE OpenStack Cloud 7:
s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
SUSE OpenStack Cloud 7:
aarch64, s390x, x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE OpenStack Cloud 7:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Server 12-SP4:
aarch64, ppc64le, s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python3-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP4:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Server 12-SP2-LTSS:
ppc64le, s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP2-LTSS:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Software Development Kit 12-SP4:
noarch:
python3-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Desktop 12-SP4:
x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python3-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Desktop 12-SP4:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP3:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Module for Containers 12:
noarch:
python-setuptools - 18.0.1-4.8.1
OpenStack Cloud Magnum Orchestration 7:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
OpenStack Cloud Magnum Orchestration 7:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
noarch:
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Module for Public Cloud 12:
noarch:
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Server for SAP 12-SP2:
ppc64le, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server for SAP 12-SP2:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE CaaS Platform ALL:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE CaaS Platform ALL:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE CaaS Platform 3.0:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE CaaS Platform 3.0:
noarch:
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Desktop 12-SP3:
noarch:
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Enterprise Storage 4:
x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Enterprise Storage 4:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE OpenStack Cloud 6-LTSS:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Software Development Kit 12-SP3:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Server 12-SP2-BCL:
x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP2-BCL:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE OpenStack Cloud 7:
s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
SUSE OpenStack Cloud 7:
aarch64, s390x, x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE OpenStack Cloud 7:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Server 12-SP4:
aarch64, ppc64le, s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python3-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP4:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Server 12-SP2-LTSS:
ppc64le, s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP2-LTSS:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Software Development Kit 12-SP4:
noarch:
python3-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Desktop 12-SP4:
x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python3-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Desktop 12-SP4:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server 12-SP3:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Module for Containers 12:
noarch:
python-setuptools - 18.0.1-4.8.1
OpenStack Cloud Magnum Orchestration 7:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
OpenStack Cloud Magnum Orchestration 7:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Server 12-SP1-LTSS:
noarch:
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Module for Public Cloud 12:
noarch:
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
SUSE Linux Enterprise Server for SAP 12-SP2:
ppc64le, x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Server for SAP 12-SP2:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE CaaS Platform ALL:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE CaaS Platform ALL:
noarch:
python-setuptools - 18.0.1-4.8.1
SUSE CaaS Platform 3.0:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE CaaS Platform 3.0:
noarch:
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Linux Enterprise Desktop 12-SP3:
noarch:
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE Enterprise Storage 4:
x86_64:
python3-cryptography - 1.3.1-7.13.4
python-cryptography-debuginfo - 1.3.1-7.13.4
python-cryptography-debugsource - 1.3.1-7.13.4
python-cryptography - 1.3.1-7.13.4
SUSE Enterprise Storage 4:
noarch:
python3-pyOpenSSL - 16.0.0-4.11.3
python3-setuptools - 18.0.1-4.8.1
python-setuptools - 18.0.1-4.8.1
python-pyOpenSSL - 16.0.0-4.11.3
SUSE OpenStack Cloud 6-LTSS:
noarch:
python-setuptools - 18.0.1-4.8.1
Ссылки
http://lists.suse.com/pipermail/sle-security-updates/2018-December/004944.html
https://bugzilla.suse.com/1021578
https://bugzilla.suse.com/1111634
https://bugzilla.suse.com/1111635
Источник: CVE
Наименование: CVE-2018-1000808
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000808
Источник: CVE
Наименование: CVE-2018-1000807
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000807
https://bugzilla.suse.com/1021578
https://bugzilla.suse.com/1111634
https://bugzilla.suse.com/1111635
Источник: CVE
Наименование: CVE-2018-1000808
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000808
Источник: CVE
Наименование: CVE-2018-1000807
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000807
