Lucene search
UbuntuUSN-5199-1HistoryDec 17, 2021 - 12:00 a.m.
Python vulnerabilities
2021-12-1700:00:00
ubuntu.com
52
Releases
- Ubuntu 18.04 ESM
Packages
- python3.6 - An interactive high-level object-oriented language
Details
It was discovered that the urllib.request.AbstractBasicAuthHandler class
in Python contains regex with a quadratic worst-case time complexity.
Specially crafted traffic from a malicious HTTP server could cause a regular
expression denial of service (ReDoS) condition for a client.
(CVE-2021-3733)
It was discovered that the Python urllib http client could enter into an infinite
loop when incorrectly handling certain server responses (100 Continue response).
Specially crafted traffic from a malicious HTTP server could cause a denial of
service (DoS) condition for a client.
(CVE-2021-3737)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | libpython3.6-stdlib | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | idle-python3.6 | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpython3.6 | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpython3.6-dbg | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpython3.6-dev | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpython3.6-minimal | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpython3.6-testsuite | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python3.6 | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python3.6-dbg | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
| Ubuntu | 18.04 | noarch | python3.6-dev | <Â 3.6.9-1~18.04ubuntu1.6 | UNKNOWN |
Related
nessus
nessus
Ubuntu 16.04 ESM : Python vulnerabilities (USN-5083-1)
2021-09-16 00:00:00
EulerOS Virtualization 3.0.6.6 : python (EulerOS-SA-2022-1139)
2022-02-12 00:00:00
Debian DLA-2808-1 : python3.5 - LTS security update
2021-11-05 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3524-1)
2021-10-27 00:00:00
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-1411)
2022-04-13 00:00:00
Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2022-1051)
2022-02-12 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: python2.7-2.7.18-15.fc34
2021-09-29 01:10:03
[SECURITY] Fedora 33 Update: python2.7-2.7.18-15.fc33
2021-09-29 01:10:06
[SECURITY] Fedora 34 Update: mingw-python3-3.9.4-3.fc34
2021-09-30 01:15:07
osv
osv
python3.5 - security update
2021-11-05 00:00:00
python3.4, python3.5 vulnerabilities
2021-09-16 17:27:34
python3.6 vulnerabilities
2021-12-17 14:53:00
suse
suse
Security update for python (moderate)
2021-10-31 00:00:00
Security update for python (moderate)
2021-10-20 00:00:00
Security update for python3 (moderate)
2021-12-16 00:00:00
mageia
mageia
Updated python packages fix security vulnerability
2021-10-02 21:57:04
Updated python3 packages fix security vulnerability
2021-09-23 07:49:29
ubuntu
ubuntu
Python vulnerabilities
2021-09-16 00:00:00
Python vulnerabilities
2021-12-17 00:00:00
Python vulnerabilities
2021-12-17 00:00:00
cloudfoundry
cloudfoundry
USN-5199-1: Python vulnerabilities | Cloud Foundry
2022-03-08 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DLA 2808-1] python3.5 security update
2021-11-05 09:21:55
[SECURITY] [DLA 3477-1] python3.7 security update
2023-06-30 20:52:28
[SECURITY] [DLA 3432-1] python2.7 security update
2023-05-24 17:32:06
rocky
rocky
python38:3.8 and python38-devel:3.8 security update
2022-05-10 06:23:23
python27:2.7 security update
2022-05-10 08:02:50
python39:3.9 and python39-devel:3.9 security update
2021-11-09 08:26:25
redhat
redhat
(RHSA-2022:1663) Moderate: python27-python and python27-python-pip security update
2022-05-02 07:48:36
(RHSA-2021:4057) Moderate: python3 security update
2021-11-02 07:48:14
almalinux
almalinux
Moderate: python38:3.8 and python38-devel:3.8 security update
2022-05-10 06:23:23
Moderate: python3 security update
2021-11-02 07:48:14
Moderate: python27:2.7 security update
2022-05-10 08:02:50
oraclelinux
oraclelinux
python38:3.8 and python38-devel:3.8 security update
2022-05-17 00:00:00
python3 security update
2021-11-02 00:00:00
python27:2.7 security update
2022-05-17 00:00:00
redhatcve
redhatcve
CVE-2021-3733
2021-08-31 15:31:19
CVE-2021-3737
2021-08-26 08:00:05
cvelist
cvelist
CVE-2021-3733
2022-03-07 00:00:00
CVE-2021-3737
2022-03-04 00:00:00
debiancve
debiancve
CVE-2021-3733
2022-03-10 17:42:00
CVE-2021-3737
2022-03-04 19:15:00
ubuntucve
ubuntucve
CVE-2021-3733
2021-09-02 00:00:00
CVE-2021-3737
2021-08-31 00:00:00
veracode
veracode
Denial Of Service
2021-09-03 01:56:52
Denial Of Service (DoS)
2021-09-26 11:39:17
prion
prion
Authentication flaw
2022-03-10 17:42:00
Design/Logic Flaw
2022-03-04 19:15:00
cbl_mariner
cbl_mariner
CVE-2021-3733 affecting package python2 2.7.18-9
2022-08-12 16:45:09
CVE-2021-3737 affecting package python3 3.7.10-7
2022-04-07 06:04:03
cve
cve
CVE-2021-3733
2022-03-10 17:42:00
CVE-2021-3737
2022-03-04 19:15:00
hackerone
hackerone
Internet Bug Bounty: "urllib" will result to deny of service
2021-05-07 17:14:22
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-3737
2022-03-22 14:15:13
amazon
amazon
Medium: python27
2022-05-31 23:47:00
Medium: python
2022-05-31 23:50:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0461
2022-04-06 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0433
2022-08-11 00:00:00