71 matches found
SUSE-SU-2019:2391-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue bsc1129071. - CVE-2019-11324: Fixed invalid CA certificat verification bsc1132900. - CVE-2019-11236: Fixed CRLF injection via request parameter bsc1132663...
SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2019:2066-1)
This update for python-Twisted fixes the following issue : Security issue fixed : CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks bsc1137825. Note that Tenable Network Security has extracted the preceding description block...
SUSE-SU-2019:1352-2 Security update for python3
This update for python3 to version 3.6.8 fixes the following issues: Security issue fixed: - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter bsc1130840. Non-security issue fixed: - Fixed broken debuginfo packages by switching off LTO...
SUSE-SU-2019:1554-1 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: Security issues fixed: - CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format bsc1132174. - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format bsc1132323. - CVE-2019-834...
SUSE-SU-2018:1786-1 Security update for python
This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...
BLACKBOx - A Penetration Testing Framework
Password Attacks: MD5 CRACKER SHA1 CRACKER SHA224 CRACKER SHA256 CRACKER SHA384 CRACKER SHA512 CRACKER MSSQL2000 CRACKER MSSQL2005 CRACKER MYSQL323 CRACKER MYSQL41 CRACKER ORACLE11 CRACKER Web Hacking : Wordpress Bruteforce – Bruteforce wordpress panel FTP Bruteforce – Bruteforcing FTP LOGIN SSH...
SUSE-SU-2016:0935-1 Security update for python-Pillow
This update for python-Pillow fixes the following security issues: CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. bsc965582 CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary amount of memory to be overwritten when opening...
SUSE-SU-2015:1810-1 Security update for python-Django
This update for python-Django fixes the following security issues: - Prevent Denial-of-service possibility by filling session store. bsc937522, CVE-2015-5143 - Prevent Header injection possibility. bsc937523, CVE-2015-5144 - A remote denial of service resource exhaustion attack against the django...
SUSE-SU-2015:0777-1 Security update for python-Pillow
python-pillow has been updated to 2.7.0 to fix three security issues. The following vulnerabilities have been fixed: CVE-2014-9601: Remote attackers could have caused a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed. CVE-2014-3598: Remot...
SUSE-SU-2015:0925-1 Security update for python-PyYAML
python-PyYAML was updated to fix one security issue which could have allowed an attacker to cause a denial of service by supplying specially crafted strings The following issue was fixed: - 921588: python-PyYAML: assert failure when processing wrapped strings equivalent to CVE-2014-9130 in LibYAM...
PT-2013-3377
Name of the Vulnerable Software and Affected Versions Python versions prior to 2.6.9 Python versions prior to 2.7.4 Python versions prior to 2.7.6 Python versions prior to 3.3.3 Description The issue is related to various Python modules, including httplib, ftplib, imaplib, nntplib, poplib, and...