SUSE-SU-2023:4009-1 Security update for python-gevent

This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling bsc1215469...

SUSE-SU-2023:3975-1 Security update for python-gevent

This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling bsc1215469...

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

...

OESA-2023-1698 python-gevent security update

gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop. Security Fixes: An issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the...

OESA-2023-1699 python-gevent security update

gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop. Security Fixes: An issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the...

OESA-2023-1697 python-gevent security update

gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop. Security Fixes: An issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the...

HTTP Request/Response Smuggling

gevent is vulnerable to HTTP Request/Response Smuggling. The vulnerability is caused by a missing validation check on trailers in processing of chunked requests in the WSGI application on keep-alive connections. This can lead to an attacker carefully crafting invalid trailers in chunked requests...

GHSA-X7M3-JPRG-WC5G Gevent allows remote attacker to escalate privileges

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

Gevent allows remote attacker to escalate privileges

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

DEBIAN-CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

AZL-30058 CVE-2023-41419 affecting package python-gevent for versions less than 1.3.6-9

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

Design/Logic Flaw

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

PYSEC-2023-177

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

PYSEC-2023-177

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

UBUNTU-CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

CVE-2023-41419

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component...

CVE-2023-41419

CVE-2023-41419 affects the Gevent Python networking library, with vulnerable component WSGIServer. The Debian LTS advisory (DLA-4377-1) confirms the fix for Debian 11 in python-gevent package version 20.9.0-2+deb11u1; prior releases are vulnerable to privilege escalation via a crafted script. The...