Security update for python
This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
- Mettez à jour vers 2.7.17-7.47.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de python
Vulnérabilité publiée pour python au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 9
Security update for python
This update for python fixes the following issues: - bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers.
- Mettez à jour vers 2.7.17-7.44.4
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).
- Mettez à jour vers 2.7.17-7.41.1
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- Mettez à jour vers 2.7.17-7.38.1
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).
- Mettez à jour vers 2.7.17-7.35.1
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Mettez à jour vers 2.7.17-7.32.2
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
- Mettez à jour vers 2.7.14-7.24.1
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
- Mettez à jour vers 2.7.14-7.17.1
Publication Mise à jourSecurity update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
- Mettez à jour vers 2.7.14-7.14.2
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.