Lucene search

DebianDEBIAN:DSA-4307-1:C7B50

HistorySep 28, 2018 - 7:17 p.m.

[SECURITY] [DSA 4307-1] python3.5 security update

2018-09-2819:17:56

lists.debian.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

Low

EPSS

0.014

Percentile

86.7%

JSON

Debian Security Advisory DSA-4307-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
September 28, 2018 https://www.debian.org/security/faq

Package : python3.5
CVE ID : CVE-2017-1000158 CVE-2018-1060 CVE-2018-1061
CVE-2018-14647

Multiple security issues were discovered in Python: ElementTree failed
to initialise Expat's hash salt, two denial of service issues were found
in difflib and poplib and a buffer overflow in PyString_DecodeEscape.

For the stable distribution (stretch), these problems have been fixed in
version 3.5.3-1+deb9u1.

We recommend that you upgrade your python3.5 packages.

For the detailed security status of python3.5 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/python3.5

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian8amd64libpython2.7-minimal< 2.7.9-2+deb8u2libpython2.7-minimal_2.7.9-2+deb8u2_amd64.deb
Debian9amd64libpython2.7-minimal< 2.7.13-2+deb9u3libpython2.7-minimal_2.7.13-2+deb9u3_amd64.deb
Debian9armhflibpython2.7< 2.7.13-2+deb9u3libpython2.7_2.7.13-2+deb9u3_armhf.deb
Debian8armellibpython3.4< 3.4.2-1+deb8u3libpython3.4_3.4.2-1+deb8u3_armel.deb
Debian9ppc64ellibpython3.5-dev< 3.5.3-1+deb9u1libpython3.5-dev_3.5.3-1+deb9u1_ppc64el.deb
Debian9armhfpython3.5-dev< 3.5.3-1+deb9u1python3.5-dev_3.5.3-1+deb9u1_armhf.deb
Debian9s390xlibpython2.7-stdlib< 2.7.13-2+deb9u3libpython2.7-stdlib_2.7.13-2+deb9u3_s390x.deb
Debian9mipspython2.7-dev< 2.7.13-2+deb9u3python2.7-dev_2.7.13-2+deb9u3_mips.deb
Debian8armhflibpython2.7-dev< 2.7.9-2+deb8u3libpython2.7-dev_2.7.9-2+deb8u3_armhf.deb
Debian8i386libpython2.7-stdlib< 2.7.9-2+deb8u3libpython2.7-stdlib_2.7.9-2+deb8u3_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	amd64	libpython2.7-minimal	< 2.7.9-2+deb8u2	libpython2.7-minimal_2.7.9-2+deb8u2_amd64.deb
Debian	9	amd64	libpython2.7-minimal	< 2.7.13-2+deb9u3	libpython2.7-minimal_2.7.13-2+deb9u3_amd64.deb
Debian	9	armhf	libpython2.7	< 2.7.13-2+deb9u3	libpython2.7_2.7.13-2+deb9u3_armhf.deb
Debian	8	armel	libpython3.4	< 3.4.2-1+deb8u3	libpython3.4_3.4.2-1+deb8u3_armel.deb
Debian	9	ppc64el	libpython3.5-dev	< 3.5.3-1+deb9u1	libpython3.5-dev_3.5.3-1+deb9u1_ppc64el.deb
Debian	9	armhf	python3.5-dev	< 3.5.3-1+deb9u1	python3.5-dev_3.5.3-1+deb9u1_armhf.deb
Debian	9	s390x	libpython2.7-stdlib	< 2.7.13-2+deb9u3	libpython2.7-stdlib_2.7.13-2+deb9u3_s390x.deb
Debian	9	mips	python2.7-dev	< 2.7.13-2+deb9u3	python2.7-dev_2.7.13-2+deb9u3_mips.deb
Debian	8	armhf	libpython2.7-dev	< 2.7.9-2+deb8u3	libpython2.7-dev_2.7.9-2+deb8u3_armhf.deb
Debian	8	i386	libpython2.7-stdlib	< 2.7.9-2+deb8u3	libpython2.7-stdlib_2.7.9-2+deb8u3_i386.deb