PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour python311-core au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 3
This update for python311 fixes the following issues: Update to 3.11.5. - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). - CVE-2023-41105: Fixed input truncation on null bytes in os.path.normpath (bsc#1214693).
This update for python311 fixes the following issues: python was updated to version 3.11.4: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750). - Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. Bugfixes: - trace.__main__ now uses io.open_code() for files to be exec
This update for python311 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.