Security update for python
This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).
- Update to 2.7.18-150000.57.1
PatchFirst · Latest vulnerabilities
Vulnerabilities published for python in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 3
This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).
This update for python fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).
This update for python fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). The following non-security bug was fixed: - Making compileall.py compliant with year 2038 (bsc#1202666, gh#python/cpython#79171).
Check your installed stack and versions against the current vulnerability feeds.