p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in python-backports-ssl_match_hostname

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für python-backports-ssl_match_hostname: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 9

  1. RLSA-2023:2860

    Hoch · CVSS 7.5Korrektur verfügbar

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed informa

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.9.0+1531+a18208f5 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. RLSA-2023:7042

    Mittel · CVSS 6.1Korrektur verfügbar

    Moderate: python27:2.7 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed inf

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.9.0+1531+a18208f5 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  3. RLSA-2023:5994

    Hoch · CVSS 8.6Korrektur verfügbar

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.9.0+1531+a18208f5 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  4. RLSA-2024:2987

    Hoch · CVSS 7.8Korrektur verfügbar

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897) * python: use after free in heappushpop() of heapq module (CVE-2022-48560) * python: XML External Entity in XML processing plistlib module (CVE-2022-48565) * python-urllib3: Cookie request header isn't stri

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.9.0+1531+a18208f5 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  5. RLSA-2023:3780

    Nicht bewertetKorrektur verfügbar

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.4.0+403+9ae17a31 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  6. RLSA-2022:7593

    Hoch · CVSS 7.6Korrektur verfügbar

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. Security Fix(es): * python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107). For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.4.0+403+9ae17a31 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  7. RLSA-2022:1821

    Hoch · CVSS 8.8Korrektur verfügbar

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733) * python: ftplib should not use the host from the PASV response (CVE-2021-4189) * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) * python: urllib.parse does not sanitize

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.4.0+403+9ae17a31 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  8. RLSA-2021:4151

    Hoch · CVSS 7.8Korrektur verfügbar

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619) * python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493) * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771) * python-pygments: Infinite loo

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.4.0+403+9ae17a31 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  9. RLSA-2021:1761

    Mittel · CVSS 6.5Korrektur verfügbar

    Moderate: python27:2.7 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: CRLF injection via HTTP request method in httplib/http.client (CVE-2020-26116) * python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137) * python-lxml: mXSS due to the use of improper parser (CVE-2020-27783) * python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.

    python-backports-ssl_match_hostnameBetriebssysteme
    • Auf 0:3.5.0.1-12.module+el8.4.0+403+9ae17a31 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →