File _patchinfo of Package patchinfo.8162
<patchinfo incident="8162"> <issue id="1068664" tracker="bnc">VUL-0: CVE-2017-1000158: python,python27: CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (and possible arbitrary code e</issue> <issue id="1079300" tracker="bnc">VUL-0: CVE-2018-1000030: python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c</issue> <issue id="2017-1000158" tracker="cve" /> <issue id="2018-1000030" tracker="cve" /> <category>security</category> <rating>moderate</rating> <packager>psimons</packager> <description>This update for python fixes the following issues: Security issues fixed: - CVE-2017-1000158: Fixed integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution (bsc#1068664). - CVE-2018-1000030: Fixed crash inside the Python interpreter when multiple threads used the same I/O stream concurrently (bsc#1079300). This update was imported from the SUSE:SLE-12-SP1:Update update project.</description> <summary>Security update for python</summary> </patchinfo>