Уведомление безопасности SUSE-SU-2018:3554-1

Высокая (7.5)

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

SUSE

libpython2_7-1_0 (any) libpython2_7-1_0-32bit (any) libpython2_7-1_0-debuginfo (any) libpython2_7-1_0-debuginfo-32bit (any) python (any) python-32bit (any) python-base (any) python-base-32bit (any) python-base-debuginfo (any) python-base-debuginfo-32bit (any) python-base-debugsource (any) python-curses (any) python-curses-debuginfo (any) python-debuginfo (any) python-debuginfo-32bit (any) python-debugsource (any) python-demo (any) python-devel (any) python-doc (any) python-doc-pdf (any) python-gdbm (any) python-gdbm-debuginfo (any) python-idle (any) python-tk (any) python-tk-debuginfo (any) python-xml (any) python-xml-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Desktop 12-SP3, OpenStack Cloud Magnum Orchestration 7, SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP3, SUSE CaaS Platform ALL, SUSE CaaS Platform 3.0, SUSE Linux Enterprise Workstation Extension 12-SP3

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
python-base-debuginfo - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python-devel - 2.7.13-28.16.1
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
python-curses-debuginfo - 2.7.13-28.16.1
python-debugsource - 2.7.13-28.16.1
python-tk-debuginfo - 2.7.13-28.16.1
python-curses - 2.7.13-28.16.1
python-xml - 2.7.13-28.16.1
python-base-debuginfo - 2.7.13-28.16.1
python-xml-debuginfo - 2.7.13-28.16.1
python-base - 2.7.13-28.16.1
python-base-debuginfo-32bit - 2.7.13-28.16.1
python-devel - 2.7.13-28.16.1
python-debuginfo - 2.7.13-28.16.1
libpython2_7-1_0-32bit - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python - 2.7.13-28.16.1
libpython2_7-1_0 - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo-32bit - 2.7.13-28.16.1
python-tk - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo - 2.7.13-28.16.1
OpenStack Cloud Magnum Orchestration 7:
x86_64:
python-debugsource - 2.7.13-28.16.1
python-xml - 2.7.13-28.16.1
python-xml-debuginfo - 2.7.13-28.16.1
python-base - 2.7.13-28.16.1
python-debuginfo - 2.7.13-28.16.1
python-base-debuginfo - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python - 2.7.13-28.16.1
libpython2_7-1_0 - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo - 2.7.13-28.16.1
SUSE Enterprise Storage 5:
aarch64, x86_64:
python-debuginfo - 2.7.13-28.16.1
python-strict-tls-check - 2.7.13-28.16.1
python-debugsource - 2.7.13-28.16.1
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
python-curses-debuginfo - 2.7.13-28.16.1
python-debugsource - 2.7.13-28.16.1
python-xml - 2.7.13-28.16.1
python-curses - 2.7.13-28.16.1
python-gdbm-debuginfo - 2.7.13-28.16.1
python-tk-debuginfo - 2.7.13-28.16.1
python-xml-debuginfo - 2.7.13-28.16.1
python-base - 2.7.13-28.16.1
python-idle - 2.7.13-28.16.1
python-debuginfo - 2.7.13-28.16.1
python-base-debuginfo - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python - 2.7.13-28.16.1
python-gdbm - 2.7.13-28.16.1
libpython2_7-1_0 - 2.7.13-28.16.1
python-demo - 2.7.13-28.16.1
python-tk - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo - 2.7.13-28.16.1
SUSE Linux Enterprise Server 12-SP3:
s390x, x86_64:
python-base-32bit - 2.7.13-28.16.1
python-base-debuginfo-32bit - 2.7.13-28.16.1
python-debuginfo-32bit - 2.7.13-28.16.1
libpython2_7-1_0-32bit - 2.7.13-28.16.1
python-32bit - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo-32bit - 2.7.13-28.16.1
SUSE Linux Enterprise Server 12-SP3:
noarch:
python-doc-pdf - 2.7.13-28.16.1
python-doc - 2.7.13-28.16.1
SUSE CaaS Platform ALL:
x86_64:
python-debugsource - 2.7.13-28.16.1
python-xml - 2.7.13-28.16.1
python-xml-debuginfo - 2.7.13-28.16.1
python-base - 2.7.13-28.16.1
python-debuginfo - 2.7.13-28.16.1
python-base-debuginfo - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python - 2.7.13-28.16.1
libpython2_7-1_0 - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo - 2.7.13-28.16.1
SUSE CaaS Platform 3.0:
x86_64:
python-debugsource - 2.7.13-28.16.1
python-xml - 2.7.13-28.16.1
python-xml-debuginfo - 2.7.13-28.16.1
python-base - 2.7.13-28.16.1
python-debuginfo - 2.7.13-28.16.1
python-base-debuginfo - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python - 2.7.13-28.16.1
libpython2_7-1_0 - 2.7.13-28.16.1
libpython2_7-1_0-debuginfo - 2.7.13-28.16.1
SUSE Linux Enterprise Workstation Extension 12-SP3:
x86_64:
python-base-debuginfo - 2.7.13-28.16.1
python-base-debugsource - 2.7.13-28.16.1
python-devel - 2.7.13-28.16.1

http://lists.suse.com/pipermail/sle-security-updates/2018-October/004809.html
https://bugzilla.suse.com/1086001
https://bugzilla.suse.com/1088004
https://bugzilla.suse.com/1088009
https://bugzilla.suse.com/1109663

Источник: CVE
Наименование: CVE-2018-1000802
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000802

Источник: CVE
Наименование: CVE-2018-1061
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1061

Источник: CVE
Наименование: CVE-2018-1060
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1060