Security update for python
This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).
- Mettez à jour vers 2.7.18-150000.57.1
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour python-base au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 5
This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).
This update for python fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
This update for python fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). The following non-security bug was fixed: - Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).
This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
This update for python fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.