Security update for python
This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
- Actualiza a 2.7.17-7.47.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de python-base
Vulnerabilidades publicadas para python-base en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 9
Security update for python
This update for python fixes the following issues: - bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers.
- Actualiza a 2.7.17-7.44.2
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).
- Actualiza a 2.7.17-7.41.1
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- Actualiza a 2.7.17-7.38.1
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).
- Actualiza a 2.7.17-7.35.1
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Actualiza a 2.7.17-7.32.1
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
- Actualiza a 2.7.14-7.24.1
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
- Actualiza a 2.7.14-7.17.1
Publicación ActualizaciónSecurity update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
- Actualiza a 2.7.14-7.14.2
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.