Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:1786-1

Опубликовано: 22 июн. 2018
Источник: suse-cvrf

Описание

Security update for python

This update for python fixes the following issues:

The following security vulnerabilities were addressed:

  • Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. [bsc#1083507, CVE-2017-18207]

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libpython2_6-1_0-2.6.9-40.6.2
libpython2_6-1_0-32bit-2.6.9-40.6.2
libpython2_6-1_0-x86-2.6.9-40.6.2
python-2.6.9-40.6.2
python-32bit-2.6.9-40.6.2
python-base-2.6.9-40.6.2
python-base-32bit-2.6.9-40.6.2
python-base-x86-2.6.9-40.6.2
python-curses-2.6.9-40.6.2
python-demo-2.6.9-40.6.2
python-doc-2.6-8.40.6.2
python-doc-pdf-2.6-8.40.6.2
python-gdbm-2.6.9-40.6.2
python-idle-2.6.9-40.6.2
python-tk-2.6.9-40.6.2
python-x86-2.6.9-40.6.2
python-xml-2.6.9-40.6.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libpython2_6-1_0-2.6.9-40.6.2
libpython2_6-1_0-32bit-2.6.9-40.6.2
libpython2_6-1_0-x86-2.6.9-40.6.2
python-2.6.9-40.6.2
python-32bit-2.6.9-40.6.2
python-base-2.6.9-40.6.2
python-base-32bit-2.6.9-40.6.2
python-base-x86-2.6.9-40.6.2
python-curses-2.6.9-40.6.2
python-demo-2.6.9-40.6.2
python-doc-2.6-8.40.6.2
python-doc-pdf-2.6-8.40.6.2
python-gdbm-2.6.9-40.6.2
python-idle-2.6.9-40.6.2
python-tk-2.6.9-40.6.2
python-x86-2.6.9-40.6.2
python-xml-2.6.9-40.6.2
SUSE Linux Enterprise Software Development Kit 11 SP4
python-32bit-2.6.9-40.6.2
python-demo-2.6.9-40.6.2
python-devel-2.6.9-40.6.2
python-doc-2.6-8.40.6.2
python-doc-pdf-2.6-8.40.6.2
python-gdbm-2.6.9-40.6.2
python-idle-2.6.9-40.6.2
python-tk-2.6.9-40.6.2

Ссылки

Описание

** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions."

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-2.6.9-40.6.2
SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-32bit-2.6.9-40.6.2
SUSE Linux Enterprise Server 11 SP4:libpython2_6-1_0-x86-2.6.9-40.6.2
SUSE Linux Enterprise Server 11 SP4:python-2.6.9-40.6.2
Ссылки