Ubuntu: Security Advisory (USN-6553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for python-pydantic (FEDORA-2021-f8bb3ba3ec)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for python-pydantic (FEDORA-2021-4d3de3183f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

abstractioutils (>=1.0.0 <=1.0.6), alignn (>=2023.4.27 <=2024.2.4) +59 more potentially affected by CVE-2021-29510 via pydantic (>=1.8.0 <=1.8.1)

pydantic PYPI version =1.8.0, =1.0.0, =2023.4.27, =0.0.1, =0.0.1, =2.2.0, =0.1.1, =3.30.0, =1.28.19, =1.12.24, =1.6.33, =0.5.18, =0.1.0a1, =0.1.0a2 and more Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...

altest (=0.1.0), apigentools (>=1.4.0 <=1.6.1) +114 more potentially affected by CVE-2021-29510 via pydantic (>=1.7.0 <=1.7.3)

pydantic PYPI version =1.7.0, =1.4.0, =0.4.2, =0.0.2, =0.0.5, =0.2.0, =0.1.0, =3.22.0, =0.0.4, =0.0.1, =0.6.22, =0.8.0, =0.9.0 and more Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...

3dfin (>=0.2.0rc0 <=0.6.0a4), 42videobricks-python-client (=1.1.2) +7690 more potentially affected by CVE-2021-29510 via pydantic (>=0.12.1 <=1.6.1)

pydantic PYPI version =0.12.1, =0.2.0rc0, =0.1.0, =0.1.0, =0.1.10, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.2.5 and more Source cves: CVE-2021-29510 Source advisory: OSV:GHSA-5JQP-QGF6-3PVH...

CVE-2021-29510

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

abstractioutils (>=1.0.0 <=1.0.6), alignn (>=2023.4.27 <=2024.2.4) +59 more potentially affected by CVE-2021-29510 via pydantic (>=1.8.0 <=1.8.1)

pydantic PYPI version =1.8.0, =1.0.0, =2023.4.27, =0.0.1, =0.0.1, =2.2.0, =0.1.1, =3.30.0, =1.28.19, =1.12.24, =1.6.33, =0.5.18, =0.1.0a1, =0.1.0a2 and more Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...

3dfin (>=0.2.0rc0 <=0.6.0a4), 42videobricks-python-client (=1.1.2) +7690 more potentially affected by CVE-2021-29510 via pydantic (>=0.12.1 <=1.6.1)

pydantic PYPI version =0.12.1, =0.2.0rc0, =0.1.0, =0.1.0, =0.1.10, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =1.0.2, =0.2.1, =0.2.5 and more Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...

altest (=0.1.0), apigentools (>=1.4.0 <=1.6.1) +114 more potentially affected by CVE-2021-29510 via pydantic (>=1.7.0 <=1.7.3)

pydantic PYPI version =1.7.0, =1.4.0, =0.4.2, =0.0.2, =0.0.5, =0.2.0, =0.1.0, =3.22.0, =0.0.4, =0.0.1, =0.6.22, =0.8.0, =0.9.0 and more Source cves: CVE-2021-29510 Source advisory: OSV:PYSEC-2021-47...

CVE-2021-29510 Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

CVE-2021-29510

CVE-2021-29510 affects the Python package pydantic prior to version 1.8.2 (also listed as affected in 1.7.x and 1.6.x). The issue occurs when passing invalid date/datetime values such as 'infinity', 'inf', or float('inf') (and their negatives) to date or datetime fields, causing validation to run...