Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Количество 879

openSUSE-SU-2019:1918-1
Security update for bzip2

openSUSE-SU-2019:1906-1
Security update for python

SUSE-SU-2019:2114-1
Security update for python

SUSE-SU-2019:2064-1
Security update for python

SUSE-SU-2019:14139-1
Security update for bzip2

SUSE-SU-2019:2013-1
Security update for bzip2

SUSE-SU-2019:2004-1
Security update for bzip2

openSUSE-SU-2019:1781-1
Security update for bzip2

SUSE-SU-2019:1846-1
Security update for bzip2

CVE-2018-20852
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
---|---|---|---|---|
![]() | openSUSE-SU-2019:1918-1 Security update for bzip2 | 1% Низкий | около 6 лет назад | |
![]() | openSUSE-SU-2019:1906-1 Security update for python | 2% Низкий | около 6 лет назад | |
![]() | SUSE-SU-2019:2114-1 Security update for python | 1% Низкий | около 6 лет назад | |
![]() | SUSE-SU-2019:2064-1 Security update for python | 2% Низкий | около 6 лет назад | |
![]() | SUSE-SU-2019:14139-1 Security update for bzip2 | 1% Низкий | около 6 лет назад | |
![]() | SUSE-SU-2019:2013-1 Security update for bzip2 | 1% Низкий | около 6 лет назад | |
![]() | SUSE-SU-2019:2004-1 Security update for bzip2 | 1% Низкий | около 6 лет назад | |
![]() | openSUSE-SU-2019:1781-1 Security update for bzip2 | 1% Низкий | около 6 лет назад | |
![]() | SUSE-SU-2019:1846-1 Security update for bzip2 | 1% Низкий | около 6 лет назад | |
![]() | CVE-2018-20852 http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3. | CVSS3: 5.3 | 1% Низкий | около 6 лет назад |
Уязвимостей на страницу