OPENSUSE-SU-2024:11264-1 python36-pyzmq-22.2.1-1.4 on GA media

These are all security issues fixed in the python36-pyzmq-22.2.1-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12318-1 python310-pydantic-1.10.2-1.1 on GA media

These are all security issues fixed in the python310-pydantic-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11256-1 python36-pymongo-3.11.4-1.2 on GA media

These are all security issues fixed in the python36-pymongo-3.11.4-1.2 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11248-1 python36-openpyxl-3.0.7-1.2 on GA media

These are all security issues fixed in the python36-openpyxl-3.0.7-1.2 package on the GA media of openSUSE Tumbleweed...

PYSEC-2022-43077

The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

PYSEC-2022-43074

The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

PYSEC-2022-43119

The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...

PYSEC-2022-43101

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

PYSEC-2022-43111

The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

PT-2022-25373 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-urls package for Python, distributed on PyPI. The democritus-networking package is also identified as a potential code executio...

MGASA-2017-0032 Updated python-pycrypto packages fix security vulnerabilities

This is a security fix for a possible Buffer overflow. AES.new with invalid parameter crashes python. The IV parameter is currently ignored when initializing a cipher in ECB or CTR mode. There was a bug in pycrypto which could be exploited to get a shell...