openSUSE Security Update : python3-rpm / rpm / rpm-python (openSUSE-SU-2014:1716-1)

This rpm update fixes the following security and non security issues : - honor --noglob in install mode bnc892431 - check for bad invalid name sizes bnc908128 CVE-2014-8118 - create files with mode 0 bnc906803 CVE-2013-6435 This update also includes version updates of rpm-python and python3-rpm...

Fedora 20 : python3-3.3.2-19.fc20 (2014-16393)

Fixes CVEs 2013-7338 and 2014-2667. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora Update for python3 FEDORA-2014-16393

Check the version of python3 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868568";...

Fedora 19 : python3-3.3.2-10.fc19 (2014-14257)

Fix for CVE-2014-4650: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs. Fix for CVE-2014-4650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Fedora Update for python3 FEDORA-2014-14257

Check the version of python3 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868482";...

Fedora 21 : python3-3.4.1-16.fc21 (2014-14208)

Fix for CVE-2014-4650: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs. Fix for CVE-2014-4650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

[SECURITY] Fedora 21 Update: python3-3.4.1-16.fc21

Python 3 is a new version of the language that is incompatible with the 2.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been remov...

Fedora Update for python3 FEDORA-2014-14245

Check the version of python3 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868464";...

Fedora 20 : python3-3.3.2-18.fc20 (2014-14245)

Fix for CVE-2014-4650: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs. Fix for CVE-2014-4650 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

openSUSE Security Update : python3 (openSUSE-SU-2014:1070-1)

This python3 update fixes the following security and non security issues : - CGIHTTPServer filedisclosure and directory traversal through URL-encoded characters CVE-2014-4650, bnc885882 - DoS on ssl.matchhostname via a crafted certificate with too many wildcards CVE-2013-2099, bnc886001 - fix...

openSUSE Security Update : python3 (openSUSE-SU-2014:1042-1)

This python3 update fixes the following security and non security issues : - CGIHTTPServer file disclosure and directory traversal through URL-encoded characters CVE-2014-4650, bnc885882 - fix importfailed hook file names %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

Fedora Update for python3 FEDORA-2014-8035

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : python3-3.3.2-9.fc19 (2014-8035)

Fix for CVE-2014-4616 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

[oss-security] LMS-2014-07-07-1: python-lz4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello All, Please find the bug report for python-lz4 attached below. Steeve Morin @steeve, the maintainer of the python-lz4 package, has been great to work with. He worked quickly to get the package up to date by this morning. Thanks, Don A. Bailey...

Updated python & python3 packages fix two vulnerabilities

Updated python and python3 packages fix security vulnerabilities: Python 2 and 3 are susceptible to arbitrary process memory reading by a user or adversary due to a bug in the json module caused by insufficient bounds checking. The bug is caused by allowing the user to supply a negative value tha...

openSUSE Security Update : python3 (openSUSE-SU-2013:1437-1)

This python update includes a SSL certificates fix and other minor changes. - disable testio on ppc as it hangs - handle NULL bytes in certain fields of SSL certificates CVE-2013-4238, bnc834601, CVE-2013-4238-py32.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE Security Update : python3 (openSUSE-SU-2013:1439-1)

This python update includes a SSL certificates fix. - handle NULL bytes in certain fields of SSL certificates CVE-2013-4238, bnc834601, CVE-2013-4238py33.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : python3 (openSUSE-SU-2014:0596-1)

This python update fixes the following security issue : - bnc871152: Fixed race condition with umask when creating directories with os.mkdirs CVE-2014-2667. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : python3 (openSUSE-SU-2014:0597-1)

This python update fixes the following security and non-security issues : - bnc869222: Fixed DoS when opening malicious archives CVE-2013-7338. - bnc863741: Fixed buffer overflow in socket.recvfrominto CVE-2014-1912. - bnc871152: Fixed race condition with umask when creating directories with...

openSUSE Security Update : python-pymongo / python3-pymongo (openSUSE-SU-2013:1064-1)

This update of pymongo fixes a NULL pointer issue. - Add Fix-null-pointer-when-decoding-invalid-DBRef.patch - Fixed user-triggerable NULL pointer dereference due to utter plebbery CVE-2013-2132, bnc822798 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...