ALT-BU-2018-3306-1
Branch sisyphus update bulletin.
Closed bugs
luajit: lld: string table non-null terminated
Closed vulnerabilities
BDU:2019-04237
Уязвимость метода pop3lib apop() интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2019-04238
Уязвимость метода difflib.IS_LINE_JUNK интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2017-18207
The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.
Modified: 2024-11-21
CVE-2018-1060
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
- openSUSE-SU-2020:0086
- openSUSE-SU-2020:0086
- 1042001
- 1042001
- RHBA-2019:0327
- RHBA-2019:0327
- RHSA-2018:3041
- RHSA-2018:3041
- RHSA-2018:3505
- RHSA-2018:3505
- RHSA-2019:1260
- RHSA-2019:1260
- RHSA-2019:3725
- RHSA-2019:3725
- https://bugs.python.org/issue32981
- https://bugs.python.org/issue32981
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1060
- https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1
- https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1
- https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1
- https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1
- [debian-lts-announce] 20180925 [SECURITY] [DLA 1519-1] python2.7 security update
- [debian-lts-announce] 20180925 [SECURITY] [DLA 1519-1] python2.7 security update
- [debian-lts-announce] 20180926 [SECURITY] [DLA 1520-1] python3.4 security update
- [debian-lts-announce] 20180926 [SECURITY] [DLA 1520-1] python3.4 security update
- FEDORA-2019-51f1e08207
- FEDORA-2019-51f1e08207
- FEDORA-2019-cf725dd20b
- FEDORA-2019-cf725dd20b
- FEDORA-2019-6e1938a3c5
- FEDORA-2019-6e1938a3c5
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us
- USN-3817-1
- USN-3817-1
- USN-3817-2
- USN-3817-2
- DSA-4306
- DSA-4306
- DSA-4307
- DSA-4307
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
Modified: 2024-11-21
CVE-2018-1061
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
- openSUSE-SU-2020:0086
- openSUSE-SU-2020:0086
- 1042001
- 1042001
- RHBA-2019:0327
- RHBA-2019:0327
- RHSA-2018:3041
- RHSA-2018:3041
- RHSA-2018:3505
- RHSA-2018:3505
- RHSA-2019:1260
- RHSA-2019:1260
- RHSA-2019:3725
- RHSA-2019:3725
- https://bugs.python.org/issue32981
- https://bugs.python.org/issue32981
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061
- https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1
- https://docs.python.org/3.5/whatsnew/changelog.html#python-3-5-6-release-candidate-1
- https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1
- https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-release-candidate-1
- [debian-lts-announce] 20180925 [SECURITY] [DLA 1519-1] python2.7 security update
- [debian-lts-announce] 20180925 [SECURITY] [DLA 1519-1] python2.7 security update
- [debian-lts-announce] 20180926 [SECURITY] [DLA 1520-1] python3.4 security update
- [debian-lts-announce] 20180926 [SECURITY] [DLA 1520-1] python3.4 security update
- FEDORA-2019-51f1e08207
- FEDORA-2019-51f1e08207
- FEDORA-2019-cf725dd20b
- FEDORA-2019-cf725dd20b
- FEDORA-2019-6e1938a3c5
- FEDORA-2019-6e1938a3c5
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03951en_us
- USN-3817-1
- USN-3817-1
- USN-3817-2
- USN-3817-2
- DSA-4306
- DSA-4306
- DSA-4307
- DSA-4307