There is a MEDIUM severity vulnerability affecting CPython. The emai ...

There is a HIGH severity vulnerability affecting the CPython "zipfile" module. When iterating over names of entries in a zip archive (for example, methods of "zipfile.ZipFile" like "namelist()", "iterdir()", "extractall()", etc) the process can be put into an infinite loop with a maliciously crafted zip archive. This defect applies when reading only metadata or extracting the contents of the zip archive. Programs that are not handling user-controlled zip archives are not affected.

ELSA-2024-9371: python3.9 security update (MODERATE)

Уязвимость модуля zipfile интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

Security update for python3

Security update for python311

Security update for python310

Moderate: python3.12 security update

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

ELSA-2024-6179: python3.11 security update (MODERATE)

ELSA-2024-6163: python3.9 security update (MODERATE)

ELSA-2024-6146: python3.12 security update (MODERATE)

Уязвимость модуля email интерпретатора языка программирования Python, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Уязвимость python3

Moderate: python3.11 security update

ELSA-2024-9192: python3.11 security update (MODERATE)

Security update for python3

Security update for python36

Security update for python39

Уязвимость python-relenv