p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de python2-idna

Vulnérabilités publiées pour python2-idna au cours des 30 derniers jours : 0. Présentes dans le catalogue KEV : 0.

RSS ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 15

  1. ALSA-2024:2987

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897) * python: use after free in heappushpop() of heapq module (CVE-2022-48560) * python: XML External Entity in XML processing plistlib module (CVE-2022-48565) * python-urllib3: Cookie request header isn't strippe

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  2. ALSA-2023:7042

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed inf

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  3. ALSA-2023:5994

    Non évaluéeCorrectif disponible

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  4. ALSA-2023:3780

    Non évaluéeCorrectif disponible

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  5. ALSA-2023:2860

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed informa

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  6. ALSA-2022:7593

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. Security Fix(es): * python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107). For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  7. ALSA-2022:1821

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733) * python: ftplib should not use the host from the PASV response (CVE-2021-4189) * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) * python: urllib.parse does not sanitize

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  8. ALSA-2021:4151

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619) * python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493) * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771) * python-pygments: Infinite loo

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  9. ALSA-2021:1761

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: CRLF injection via HTTP request method in httplib/http.client (CVE-2020-26116) * python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137) * python-lxml: mXSS due to the use of improper parser (CVE-2020-27783) * python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  10. ALSA-2020:4654

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907) * python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py (CVE-2019-20916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and o

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  11. ALSA-2020:1605

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security, bug fix, and enhancement update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. The following packages have been upgraded to a later upstream version: python2 (2.7.17). (BZ#1759944) Security Fix(es): * python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python: Cookie domain check returns incorrect results (CVE-2018-20852) * python-u

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  12. ALSA-2019:3335

    Non évaluéeCorrectif disponible

    Moderate: python27:2.7 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. Security Fix(es): * numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446) * python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740) * python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947) * python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948) * python-urllib3: CRLF inject

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

  13. ALBA-2019:2717

    Non évaluéeCorrectif disponible

    python27:2.7 bug fix update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Bux Fix(es): * python-wheel needs to remove or disable their crypto implementation (BZ#1732326)

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  14. ALBA-2019:1954

    Non évaluéeCorrectif disponible

    python27:2.7 bug fix update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Bug Fix(es): * urlsplit doesn't accept a NFKD hostname with a port number (BZ#1714757)

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  15. ALSA-2019:0981

    Non évaluéeCorrectif disponible

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. SQLAlchemy is an Object Relational Mapper (ORM) that provides a flexible, high-level interface to SQL databases. Security Fix(es): * python: Information Disclosure due to urlsplit improper NFKC normalization (CVE-2019-9636) * python-sqlalchemy: SQL Injection when the order_by parameter can be controlled (CVE-2019-7164) * python-sqlalchemy: SQL Injection when the group_by parameter can be controlled (CVE-2019-7548) For more details about the security issue(s), including

    python2-idnaSystèmes d’exploitation
    • Mettez à jour vers 2.5-7.module_el8.6.0+2781+fed64c13
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →