Most recent entries from all

ALSA-2023:6712 — Moderate: python-wheel security update

Affected: AlmaLinux:9: python3-wheel, AlmaLinux:9: python3-wheel-wheel

Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-08101

BREW-bzt-CVE-2022-40898 — pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Affected: Homebrew: bzt

Python Packaging Authority (PyPA) Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Wheel file names. This has been patched in version 0.38.1.

certfr-2023-avi-0272 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Elles permettent à u…

certfr-2023-avi-0272

EUVD-2026-230114

fkie_cve-2022-40898

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

GHSA-qwmp-2cf2-g9g6 — pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Affected: PyPI: wheel

gsd-2022-40898

msrc_CVE-2022-40898 — An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a de…

msrc_CVE-2022-40898

OESA-2023-1904 — python-wheel security update

Affected: openEuler:20.03-LTS-SP1: python-wheel, openEuler:20.03-LTS-SP3: python-wheel, openEuler:22.03-LTS: python-wheel, openEuler:22.03-LTS-SP1: python-wheel, openEuler:22.03-LTS-SP2: python-wheel

A built-package format for Python. A wheel is a ZIP-format archive with a specially formatted filename and the .whl extension. It is designed to contain all the files for a PEP 376 compatible install in a way that is very close to the on-disk format. Security Fix(es): An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.(CVE-2022-40898)

openSUSE-SU-2024:12645-1 — python310-ciscoconfparse-1.7.7-1.1 on GA media

python310-ciscoconfparse-1.7.7-1.1 on GA media

PYSEC-2022-43017

Affected: PyPI: wheel

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

RHSA-2023:6793 — Red Hat Security Advisory: rh-python38-python security update

python: tarfile module directory traversal pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli python: CPU denial of service via inefficient IDNA decoder python-cryptography: memory corruption via immutable objects python: urllib.parse url blocklisting bypass python-requests: Unintended leak of Proxy-Authorization header python: TLS handshake bypass

RLSA-2023:6712 — Moderate: python-wheel security update

Affected: Rocky Linux:9: python-wheel

Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

* python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

SUSE-SU-2023:0088-2 — Security update for python-wheel

Security update for python-wheel

UBUNTU-CVE-2022-40898

Affected: Ubuntu:Pro:14.04:LTS: python-pip, Ubuntu:Pro:14.04:LTS: wheel, Ubuntu:Pro:16.04:LTS: python-pip, Ubuntu:Pro:16.04:LTS: wheel, Ubuntu:18.04:LTS: python-pip, Ubuntu:18.04:LTS: wheel, Ubuntu:20.04:LTS: python-pip, Ubuntu:20.04:LTS: wheel, Ubuntu:22.04:LTS: python-pip, Ubuntu:22.04:LTS: wheel

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

WID-SEC-W-2023-1424 — Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.