MGASA-2023-0030 Updated python-future packages fix security vulnerability

🗓️ 07 Feb 2023 00:06:39Reported by GoogleType

osv

osv🔗 osv.dev👁 12 Views

Updated python-future packages fix excessive CPU usage vulnerability via Set-Cookie header.

Reporter	Title	Published	Views	Family All 77
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Python Charmers Future (CVE-2022-40899)	31 Mar 202317:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	20 Jun 202304:41	–	ibm
Tenable Nessus	Amazon Linux 2023 : python3-future (ALAS2023-2023-173)	3 May 202300:00	–	nessus
Tenable Nessus	Dell PowerScale OneFS Multiple Vulnerabilities (DSA-2025-208)	26 Jan 202600:00	–	nessus
Tenable Nessus	RHEL 8 : RHUI 4.4.0 - Security Fixes, Bug Fixes, and Enhancements Update (Moderate) (RHSA-2023:2101)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.13.3 Async Security Update (Important) (RHSA-2023:4466)	28 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 8 : Satellite 6.14 (RHSA-2023:6818)	29 Apr 202400:00	–	nessus
Tenable Nessus	RHEL 7 : future (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Rocky Linux 8 : Satellite 6.14 (RLSA-2023:6818)	11 Nov 202300:00	–	nessus
Tenable Nessus	Splunk Enterprise 8.2.0 < 8.2.12, 9.0.0 < 9.0.6, 9.1.0 < 9.1.1 (SVD-2023-0808)	2 May 202400:00	–	nessus

Source	Link
advisories	www.advisories.mageia.org/MGASA-2023-0030.html
bugs	www.bugs.mageia.org/show_bug.cgi
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/IGHX26DHDGC7IY7BPCKVDKZVN6LM7RCQ/
ubuntu	www.ubuntu.com/security/notices/USN-5833-1

16 Apr 2026 04:41Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.01804

SSVC

python-future packages security vulnerability excessive cpu usage set-cookie header cve-2022-40899.