Most recent entries from all

ALSA-2023:6324 — Moderate: python3.11-pip security update

Affected: AlmaLinux:9: python3.11-pip, AlmaLinux:9: python3.11-pip-wheel

pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package Index (PyPI). pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python".

Security Fix(es):

* python: tarfile module directory traversal (CVE-2007-4559)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-05975

Withdrawn: BELL-CVE-2007-4559 — CVE-2007-4559 does not affect BellSoft software

Withdrawn by the publisher.

BIT-python-2007-4559

Affected: Bitnami: python

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

certfr-2024-avi-0385 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre el…

certfr-2024-avi-0385

ESSA-2023:0425 — Product split of RHSA-2023:7034 python39:3.9 module

Product split of RHSA-2023:7034 python39:3.9 module

EUVD-2026-211040

fkie_cve-2007-4559

GHSA-gw9q-c7gh-j9vm

gsd-2007-4559

msrc_CVE-2007-4559 — Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…

msrc_CVE-2007-4559

OESA-2023-1518 — python3 security update

Affected: openEuler:22.03-LTS: python3

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. This package Provides python version 3.

Security Fix(es):

RHSA-2023:6793 — Red Hat Security Advisory: rh-python38-python security update

python: tarfile module directory traversal pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli python: CPU denial of service via inefficient IDNA decoder python-cryptography: memory corruption via immutable objects python: urllib.parse url blocklisting bypass python-requests: Unintended leak of Proxy-Authorization header python: TLS handshake bypass

SUSE-SU-2023:2473-1 — Security update for python36

Security update for python36

UBUNTU-CVE-2007-4559

Affected: Ubuntu:Pro:14.04:LTS: python2.7, Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python2.7, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python2.7, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python2.7, Ubuntu:22.04:LTS: python3.10 and 1 more

WID-SEC-W-2022-1501 — Python: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um beliebigen Programmcode auszuführen.