OESA-2024-2118 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

DLA-3870-1 python-oslo.utils - security update

Bulletin has no description...

python3.12-setuptools security update

68.2.2-4 - Security fix for CVE-2024-6345 Resolves: RHEL-50475...

Important: python3.12-setuptools security update

Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software...

Medium: python3.9

Issue Overview: A defect was discovered in the Python "ssl" module where there is a memory race condition with the ssl.SSLContext methods "certstorestats" and "getcacerts". The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContex...

OESA-2024-1940 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

python3.11 security update

3.11.7-1.1 - Security fix for CVE-2023-6597 - Fix tests for XMLPullParser with Expat with fixed CVE Resolves: RHEL-33884...

OPENSUSE-SU-2024:10129-1 python-Jinja2-2.8-1.4 on GA media

These are all security issues fixed in the python-Jinja2-2.8-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11265-1 python36-reportlab-3.5.59-2.6 on GA media

These are all security issues fixed in the python36-reportlab-3.5.59-2.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10346-1 python-pycrypto-2.6.1-4.8 on GA media

These are all security issues fixed in the python-pycrypto-2.6.1-4.8 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11245-1 python36-oletools-0.60-2.2 on GA media

These are all security issues fixed in the python36-oletools-0.60-2.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11244-1 python36-oic-1.2.1-1.2 on GA media

These are all security issues fixed in the python36-oic-1.2.1-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2024:1862-1 Security update for python

This update for python fixes the following issues: - CVE-2023-52425: Fixed using the system libexpat bsc1219559. - CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr bsc1222537. - CVE-2022-48560: Fixed use-after-free in Python via heappushpop in heapq bsc1214675. -...

SUSE-SU-2024:1847-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number bsc1219559. - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb bsc1221854. - CVE-2023-6597: Fixed symlink bug in cleanu...

SUSE-SU-2024:1844-1 Security update for python

This update for python fixes the following issues: - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb bsc1221854...

Python 安全漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in python that stems from Python's lack of support for Unix permissions on Windows...

SUSE-SU-2024:0782-2 Security update for python311

This update for python311 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory bsc1219666. - CVE-2023-27043: Fixed incorrect e-mqil parsing bsc1210638. - CVE-2022-25236: Fixed an expat vulnerability by supporting expat = 2.4.4 bsc1212015...

ape-dasy (=0.1.0), avotes-parser-cli (>=0.5.5.post5 <=0.5.6) +7 more potentially affected by CVE-2024-32481 via vyper (>=0.3.9 <=0.4.0)

vyper PYPI version =0.3.9, =0.5.5.post5, =0.5.5.post4, =0.0.1, =0.3.4, =0.8.31, =0.0.9, =3.4.7, =4.6.1 Source cves: CVE-2024-32481 Source advisory: OSV:PYSEC-2024-246...

MGASA-2024-0084 Updated python python3 packages fix security vulnerabilities

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...

abedy-gitlab-client (>=0.0.2.4 <=0.3.0), abilian-devtools (>=0.5.14 <=0.7.3) +1313 more potentially affected by CVE-2024-21503 via black (>=18.3.0a0 <=24.2.0)

black PYPI version =18.3.0a0, =0.0.2.4, =0.5.14, =0.1.0, =0.0.1, =0.1.5, =0.1.0, =0.4.0, =1.0.0, =0.1.2, =0.1.2, =0.1.0, =0.1.2, =1.0.2 - aibs-informatics-test-resources =0.0.4 and more Source cves: CVE-2024-21503 Source advisory: OSV:PYSEC-2024-48...