Advisories ยป MGASA-2018-0256

Updated python packages fix security vulnerabilities

Publication date: 29 May 2018
Modification date: 29 May 2018
Type: security
Affected Mageia releases : 5 , 6
CVE: CVE-2018-1060 , CVE-2018-1061

Description

Updated python packages fix security vulnerabilities:

A flaw was found in the way catastrophic backtracking was implemented
in Python's pop3lib's apop() method. An attacker could use this flaw to
cause denial of service (CVE-2018-1060).

A flaw was found in the way catastrophic backtracking was implemented in
Python's difflib.IS_LINE_JUNK method. An attacker could use this flaw to
cause denial of service (CVE-2018-1061).
                

References

SRPMS

6/core

5/core