Поиск уязвимостей

ALT-PU-2021-1784: package `python3` update to version 3.9.5-alt1

Moderate: python39:3.9 and python39-devel:3.9 security update

ELSA-2021-4160: python39:3.9 and python39-devel:3.9 security update (MODERATE)

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.

In Python before 3,9,5, the ipaddress library mishandles leading zero ...

Moderate: python38:3.8 and python38-devel:3.8 security update

ELSA-2022-1764: python38:3.8 and python38-devel:3.8 security update (MODERATE)

Moderate: python27:2.7 security update

ELSA-2022-1821: python27:2.7 security update (MODERATE)

Security update for python39

Security update for python39

Improper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. IP address octects are left stripped instead of evaluated as valid IP addresses.

Уязвимость библиотеки ipaddress интерпретатора языка программирования Python, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

ALT-PU-2021-3446: package `ocaml-ipaddr` update to version 5.2.0-alt1

ALT-PU-2021-2560: package `ocaml-ipaddr` update to version 5.1.0-alt1

ALT-PU-2022-3044: package `python` update to version 2.7.18-alt10

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.