Most recent entries from all

ALSA-2021:4162 — Moderate: python38:3.8 and python38-devel:3.8 security update

Affected: AlmaLinux:8: python38-Cython, AlmaLinux:8: python38-PyMySQL, AlmaLinux:8: python38-asn1crypto, AlmaLinux:8: python38-atomicwrites, AlmaLinux:8: python38-attrs, AlmaLinux:8: python38-babel, AlmaLinux:8: python38-cffi, AlmaLinux:8: python38-chardet, AlmaLinux:8: python38-cryptography, AlmaLinux:8: python38-idna and 30 more

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python-psutil: Double free because of refcount mishandling (CVE-2019-18874)

* python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493)

* python: Information disclosure via pydoc (CVE-2021-3426)

* python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771)

* python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)

* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)

* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)

* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)

* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03812

Withdrawn: BELL-CVE-2019-18874 — CVE-2019-18874 does not affect BellSoft software

Withdrawn by the publisher.

BREW-ansible-CVE-2019-18874 — Double Free in psutil

Affected: Homebrew: ansible

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

certfr-2022-avi-767 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2022-avi-767

EUVD-2026-58977

fkie_cve-2019-18874

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

GHSA-qfc5-mcwq-26q8 — Double Free in psutil

Affected: PyPI: psutil

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

gsd-2019-18874

msrc_CVE-2019-18874 — psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a w…

msrc_CVE-2019-18874

OESA-2021-1412 — python-psutil security update

Affected: openEuler:20.03-LTS-SP1: python-psutil, openEuler:20.03-LTS-SP2: python-psutil

psutil (process and system utilities) is a cross-platform library for retrieving information on running processes and system utilization (CPU, memory, disks, network, sensors) in Python. It is useful mainly for system monitoring, profiling and limiting process resources and management of running processes.It implements many functionalities offered by classic UNIX command line tools such as ps, top, iotop, lsof, netstat, ifconfig, free and others. Security Fix(es): psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.(CVE-2019-18874)

PYSEC-2019-41

Affected: PyPI: psutil

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.

RHSA-2020:2583 — Red Hat Security Advisory: OpenShift Container Platform 4.4.9 python-psutil security update

python-psutil: Double free because of refcount mishandling

RHSA-2021:4324 — Red Hat Security Advisory: python-psutil security update

python-psutil: Double free because of refcount mishandling

UBUNTU-CVE-2019-18874

Affected: Ubuntu:16.04:LTS: python-psutil, Ubuntu:18.04:LTS: python-psutil

psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object.