CVE:CVE-2018-1061
CNNVD:CNNVD-201806-1025
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python中的difflib.IS_LINE_JUNK方法存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下产品及版本受到影响：Python 2.7.15版本，3.4.9版本，3.5.6rc1版本，3.6.5rc1版本，3.7.0版本。
solution:Upgrade python python to a higher version than 2.7.15,3.4.9,3.5.5,3.6.4,3.7.0:alpha1,3.7.0:alpha2,3.7.0:alpha3,3.7.0:alpha4,3.7.0:beta1,3.7.0:beta2,3.7.0:beta3,3.7.0:beta4,3.7.0:beta5,3.7.0:rc1,and avoid the version (,2.7.15),[3.0,3.4.9),[3.5.0,3.5.5],[3.6,3.6.4],3.7.0:alpha1,3.7.0:alpha2,3.7.0:alpha3,3.7.0:alpha4,3.7.0:beta1,3.7.0:beta2,3.7.0:beta3,3.7.0:beta4,3.7.0:beta5,3.7.0:rc1; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat ansible_tower to a higher version than 3.3,and avoid the version 3.3; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,and avoid the version 12.04,14.04,16.04,18.04; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30