Python — высокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.
Релизный цикл, информация об уязвимостях
График релизов
Количество 915
SUSE-SU-2024:0595-1
Security update for python310
SUSE-SU-2024:0581-1
Security update for python3
SUSE-SU-2024:0438-1
Security update for python3
SUSE-SU-2024:0437-1
Security update for python
SUSE-SU-2024:0436-1
Security update for python36
SUSE-SU-2024:0329-1
Security update for python
RLSA-2024:0256
Moderate: python3 security update
GHSA-vrgr-679p-vf6w
Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2020-17163
Visual Studio Code Python Extension Remote Code Execution Vulnerability
GHSA-4wxh-fpjf-c8wf
An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
SUSE-SU-2024:0595-1 Security update for python310 | 0% Низкий | почти 2 года назад | ||
SUSE-SU-2024:0581-1 Security update for python3 | 0% Низкий | почти 2 года назад | ||
SUSE-SU-2024:0438-1 Security update for python3 | 0% Низкий | почти 2 года назад | ||
SUSE-SU-2024:0437-1 Security update for python | 0% Низкий | почти 2 года назад | ||
SUSE-SU-2024:0436-1 Security update for python36 | 0% Низкий | почти 2 года назад | ||
SUSE-SU-2024:0329-1 Security update for python | 0% Низкий | около 2 лет назад | ||
RLSA-2024:0256 Moderate: python3 security update | 0% Низкий | около 2 лет назад | ||
GHSA-vrgr-679p-vf6w Visual Studio Code Python Extension Remote Code Execution Vulnerability | CVSS3: 7.8 | 1% Низкий | около 2 лет назад | |
CVE-2020-17163 Visual Studio Code Python Extension Remote Code Execution Vulnerability | CVSS3: 7.8 | 1% Низкий | около 2 лет назад | |
GHSA-4wxh-fpjf-c8wf An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`). | CVSS3: 6.1 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу