Security update for python
This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
- Update to 2.7.17-7.47.1
Published Updated
PatchFirst · Latest vulnerabilities
python vulnerabilities
Vulnerabilities published for python in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 9
Security update for python
This update for python fixes the following issues: - bsc#1177211 (CVE-2020-26116) no longer allowing special characters in the method parameter of HTTPConnection.putrequest in httplib, stopping injection of headers.
- Update to 2.7.17-7.44.4
Published UpdatedSecurity update for python
This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).
- Update to 2.7.17-7.41.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825).
- Update to 2.7.17-7.38.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service via HTTP (bsc#1162367).
- Update to 2.7.17-7.35.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Update to 2.7.17-7.32.2
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
- Update to 2.7.14-7.24.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
- Update to 2.7.14-7.17.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
- Update to 2.7.14-7.14.2
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.