RLSA-2024:5533 Important: python3.12-setuptools security update

Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software...

CVE-2024-7592 vulnerabilities

Vulnerabilities for packages: nodejs, python...

CVE-2024-7592 vulnerabilities

Vulnerabilities for packages: nodejs, python...

[SECURITY] Fedora 39 Update: python-setuptools-67.7.2-8.fc39

Setuptools is a collection of enhancements to the Python distutils that allow you to more easily build and distribute Python packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software that...

Fedora: Security Advisory (FEDORA-2024-247e9ba33a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-6923 vulnerabilities

Vulnerabilities for packages: nodejs, python...

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

In yet another sign that threat actors are always looking out for new ways to trick users into downloading malware, it has come to light that the question-and-answer Q&A platform known as Stack Exchange has been abused to direct unsuspecting developers to bogus Python packages capable of draining...

ai-projects (>=0.0.6, <=0.0.9), autogluon (>=0.3.2b20220222, <=0.4.3) +72 more potentially affected by CVE-2024-6345 via setuptools (59.5.0)

setuptools PYPI version 59.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ai-projects =0.0.6, =0.3.2b20220222, =0.4.3b20220616, =0.3.2b20220222, =1.0.0, =0.1.0, =0.2.1.dev20220303, =0.1.0, =0.1.0, =0.1.0, =22.0.0,...

CVE-2024-39329 vulnerabilities

Vulnerabilities for packages: py3-django...

SUSE SLED15: python-paramiko-doc / python-tqdm-bash-completion / etc (SUSE-SU-2024:1639-2)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1639-2 advisory. Changes in python-argcomplete - Update to 3.3.0 bsc1222880: Preserve compatibility with argparse...

Malicious code in pythn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18aa9075a46b75fee6201936b78d0c748d02750b892815a4d2fa7530a12a2ae2 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

Malicious code in pyhton (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f653c901336089ae7849afebe48ba4f93bc53a4ed9d5b3a63e5d49119fa45df7 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

2keys (0.5.1), 51tracking (>=0.1.0, <=0.1.1) +5623 more potentially affected by CVE-2024-37891 via urllib3 (>=1.7.1, <=1.26.18)

urllib3 PYPI version =1.7.1, =0.1.0, =0.0.2, =0.0.6, =0.1.0, =0.1.0, =0.2.0rc1, =1.0.2rc1, =0.1.1, =1.0.0, =0.1.0, =0.1.0, =1.0.0 and more Source cves: CVE-2024-37891 Source advisory: GHSA-34JH-P97F-MPXF...

python39:3.9 and python39-devel:3.9 security update

modwsgi numpy python39 3.9.19-1 - Update to 3.9.19 - Security fixes for CVE-2023-6597 and CVE-2024-0450 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33676, RHEL-33688 python3x-pip python3x-setuptools python3x-six python-cffi python-chardet python-cryptography python-idna...

[SECURITY] Fedora 40 Update: maturin-1.5.1-2.fc40

Build and publish crates with pyo3, rust-cpython and cffi bindings as well as rust binaries as python packages...

SUSE-SU-2024:1670-1 Security update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typing_extensions

This update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typingextensions fixes the following issues: - CVE-2022-30187: Fixed an information disclosure issue that an attacker could exploit to leak sensitive information on the client side...

SUSE SLED15: python-paramiko-doc / python-tqdm-bash-completion / etc (SUSE-SU-2024:1639-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1639-1 advisory. Changes in python-argcomplete - Update to 3.3.0 bsc1222880: Preserve compatibility with argparse...

Setuptools: Denial of Service

Background Setuptools is a manager for Python packages. Description A vulnerability has been discovered in Setuptools. See the impact field. Impact An inefficiency in a regular expression may end in a denial of service if an user is fetching malicious HTML from a package in PyPI or a custom...

MGASA-2024-0096 Updated python3, python packages fix security vulnerabilities

The tempfile.TemporaryDirectory class would dereference symlinks during cleanup of permissions-related errors. This means users which can run privileged programs are potentially able to modify permissions of files referenced by symlinks in some circumstances. CVE-2023-6597 The zipfile module is...

New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics

Cybersecurity researchers have discovered two malicious packages on the Python Package Index PyPI repository that were found leveraging a technique called DLL side-loading to circumvent detection by security software and run malicious code. The packages, named NP6HelperHttptest and NP6HelperHttpe...