Security update for python
This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).
- Actualiza a 2.7.18-150000.57.1
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para python-doc en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 5
This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).
This update for python fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
This update for python fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). The following non-security bug was fixed: - Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).
This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
This update for python fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.