Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2022:7592

Опубликовано: 08 нояб. 2022
Источник: rocky
Оценка: Moderate

Описание

Moderate: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
python39x86_641.module+el8.7.0+1064+ad564229python39-3.9.13-1.module+el8.7.0+1064+ad564229.x86_64.rpm
python39-cffix86_642.module+el8.4.0+574+843c4898python39-cffi-1.14.3-2.module+el8.4.0+574+843c4898.x86_64.rpm
python39-cryptographyx86_642.module+el8.5.0+673+10283621python39-cryptography-3.3.1-2.module+el8.5.0+673+10283621.x86_64.rpm
python39-develx86_641.module+el8.7.0+1064+ad564229python39-devel-3.9.13-1.module+el8.7.0+1064+ad564229.x86_64.rpm
python39-idlex86_641.module+el8.7.0+1064+ad564229python39-idle-3.9.13-1.module+el8.7.0+1064+ad564229.x86_64.rpm
python39-idnanoarch3.module+el8.4.0+574+843c4898python39-idna-2.10-3.module+el8.4.0+574+843c4898.noarch.rpm
python39-libsx86_641.module+el8.7.0+1064+ad564229python39-libs-3.9.13-1.module+el8.7.0+1064+ad564229.x86_64.rpm
python39-lxmlx86_641.module+el8.6.0+795+de4edbccpython39-lxml-4.6.5-1.module+el8.6.0+795+de4edbcc.x86_64.rpm
python39-mod_wsgix86_645.module+el8.7.0+1064+ad564229python39-mod_wsgi-4.7.1-5.module+el8.7.0+1064+ad564229.x86_64.rpm
python39-numpyx86_643.module+el8.5.0+673+10283621python39-numpy-1.19.4-3.module+el8.5.0+673+10283621.x86_64.rpm

Показывать по

Связанные CVE

CVE-2015-20107

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2015-20107

CVSS3: 7.6
ubuntu
около 3 лет назад

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

redhat логотип

CVE-2015-20107

CVSS3: 7.6
redhat
почти 10 лет назад

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

nvd логотип

CVE-2015-20107

CVSS3: 7.6
nvd
около 3 лет назад

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

msrc логотип

CVE-2015-20107

CVSS3: 7.6
msrc
около 3 лет назад

Описание отсутствует

debian логотип

CVE-2015-20107

CVSS3: 7.6
debian
около 3 лет назад

In Python (aka CPython) up to 3.10.8, the mailcap module does not add ...