SUSE SLES12 Security Update : python-py (SUSE-SU-2023:0681-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0681-1 advisory. Bugfixes: - Fixed bugs introduced with the fix for CVE-2022-42969 bsc1204364, bsc1208181. Tenable has extracted the preceding description...

MAL-2023-5030 Malicious code in py-controlguipost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 480e1dc18ed2f651bc3cd4dfddefc30c94cf887485d83b3d88432c7a9384cb42 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-urlhttphttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5722 Malicious code in py-urlhttphttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-paypalinfopip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d00980074e219dc11140953e97dbbf1b8f13c4d6efc450d19cfccfd12c8848b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5395 Malicious code in py-paypalinfopip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d00980074e219dc11140953e97dbbf1b8f13c4d6efc450d19cfccfd12c8848b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

SUSE-SU-2023:0681-1 Security update for python-py

This update for python-py fixes the following issues: Bugfixes: - Fixed bugs introduced with the fix for CVE-2022-42969 bsc1204364, bsc1208181...

SUSE CVE-2023-26303

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

SUSE CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

CVE-2023-26303

A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with null assertations as input resulting in a crash and availability of the component...

CVE-2023-26302

A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with invalid UTF-8 characters as input to cause a crash thereby affecting the availability...

Malicious code in py-intelpingvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 031c07e21b938012af8f66916bab9194cbc2ab63012f704218f48a86ffbeea02 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5238 Malicious code in py-intelpingvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 031c07e21b938012af8f66916bab9194cbc2ab63012f704218f48a86ffbeea02 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-pywvisahydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab59bbf5db4a3372b2a56c8f2d70af10839c3d5e4e7278ead807ed7d07df0e8f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5543 Malicious code in py-pywvisahydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab59bbf5db4a3372b2a56c8f2d70af10839c3d5e4e7278ead807ed7d07df0e8f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-proofnvidiavm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8be234599ad20259cf80d5d77cd1bb089a820494b9715fb15eddf1bf63333154 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5488 Malicious code in py-proofnvidiavm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8be234599ad20259cf80d5d77cd1bb089a820494b9715fb15eddf1bf63333154 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5707 Malicious code in py-ultrageturl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01930305a64fa02060ad5c305f01da7c89a1a0d944c7425354d0dc3a43f8d737 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-ultrageturl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01930305a64fa02060ad5c305f01da7c89a1a0d944c7425354d0dc3a43f8d737 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Denial Of Service (DoS)

markdown-it-py is vulnerable to Denial Of Service DoS. The vulnerability exists in the convertfile function of parse.py, which allows an attacker to cause an application crash by submitting invalid UTF-8 characters when using the CLI version of markdown-it-py...