138 matches found
[SECURITY] Fedora 28 Update: python3-docs-3.6.8-1.fc28
The python3-docs package contains documentation on the Python 3 programming language and interpreter. Install the python3-docs package if you'd like to use the documentation for the Python 3 language...
[SECURITY] Fedora 28 Update: python3-3.6.8-1.fc28
Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...
Zulip Server Cross-Site Scripting Vulnerability
Zulip Server is a set of open source group chat application written in Python based on the Django framework . A cross-site scripting vulnerability exists in versions of Zulip Server prior to 1.7.2. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...
[SECURITY] Fedora 24 Update: python3-3.5.1-12.fc24
Python 3 is a new version of the language that is incompatible with the 2.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been remov...
The use of the Linux kernel information leak to bypass the kALSR protection mechanisms-vulnerability warning-the black bar safety net
A preliminary description of the Since it has been in the linux kernel fix, so there is nothing concern about this vulnerability. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b2f73922d119686323f14fbbe46587f863852328 According to the researchers know, the mainstream...
Commix - Automated All-in-One OS Command Injection and Exploitation Tool
Commix short for command injection exploiter has a simple environment and it can be used, from web developers, penetration testers or even security researchers to test web applications with the view to find bugs, errors or vulnerabilities related to command injection attacks. By using this tool, ...
[SECURITY] [DSA 3146-1] requests security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3146-1 [email protected] http://www.debian.org/security/ Sebastien Delafond January 30, 2015 http://www.debian.org/security/faq -...
DSA-3146-1 requests - security update
Bulletin has no description...
python: rgbimg: multiple security issues
Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12...
[SECURITY] Fedora 13 Update: python-mako-0.3.4-1.fc13
Mako is a template library written in Python. It provides a familiar, non-X ML syntax which compiles into Python modules for maximum performance. Mako's syntax and API borrows from the best ideas of many others, including Django templates, Cheetah, Myghty, and Genshi. Conceptually, Mako is an...
[SECURITY] Fedora 13 Update: python-2.6.4-27.fc13
Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...
python: integer signedness error in the zlib extension module
Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow...
CVE-2009-0317
CVE-2009-0317 involves the Python bindings for Nautilus (nautilus-python), where an Untrusted search path vulnerability in PySys_SetArgv (CVE-2008-5983) could allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory. The connected documents refer...
[SECURITY] [DSA 1667-1] New python2.4 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1667-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 19, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1619-1 (python-dns)
The remote host is missing an update to python-dns announced via advisory DSA 1619-1. OpenVAS Vulnerability Test $Id: deb16191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1619-1 python-dns Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1619-1 : python-dns - DNS response spoofing
Multiple weaknesses have been identified in PyDNS, a DNS client implementation for the Python language. Dan Kaminsky identified a practical vector of DNS response spoofing and cache poisoning, exploiting the limited entropy in a DNS transaction ID and lack of UDP source port randomization in many...
[SECURITY] [DSA 1620-1] New python2.5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1620-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 27, 2008 http://www.debian.org/security/faq -...