p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости python-nose-docs

За последние 30 дней в python-nose-docs опубликовано уязвимостей: 1; в каталоге KEV: 0.

RSS ↗
Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 12

  1. ALSA-2026:82858

    Без оценкиЕсть исправление

    Important: python36:3.6 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection (CVE-2026-88029) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.9.0+3700+efebe9fd
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. ALSA-2025:8419

    Без оценкиЕсть исправление

    Low: python36:3.6 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-pymongo: Out-of-bounds read in bson module (CVE-2024-5629) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.9.0+3700+efebe9fd
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. ALSA-2024:10953

    Без оценкиЕсть исправление

    Important: python36:3.6 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * virtualenv: potential command injection via virtual environment activation scripts (CVE-2024-53899) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.9.0+3700+efebe9fd
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  4. ALSA-2024:2987

    Без оценкиЕсть исправление

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897) * python: use after free in heappushpop() of heapq module (CVE-2022-48560) * python: XML External Entity in XML processing plistlib module (CVE-2022-48565) * python-urllib3: Cookie request header isn't strippe

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. ALSA-2023:7042

    Без оценкиЕсть исправление

    Moderate: python27:2.7 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed inf

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. ALSA-2023:5994

    Без оценкиЕсть исправление

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. ALSA-2023:3780

    Без оценкиЕсть исправление

    Important: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: urllib.parse url blocklisting bypass (CVE-2023-24329) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. ALSA-2023:2860

    Без оценкиЕсть исправление

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed informa

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  9. ALSA-2022:7593

    Без оценкиЕсть исправление

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. Security Fix(es): * python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107). For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

    python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. ALSA-2022:1821

    Без оценкиЕсть исправление

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. Security Fix(es): * python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733) * python: ftplib should not use the host from the PASV response (CVE-2021-4189) * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) * python: urllib.parse does not sanitize

    python-nose-docs python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.5.0+2569+5c5719bc
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. ALSA-2021:4151

    Без оценкиЕсть исправление

    Moderate: python27:2.7 security update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619) * python-jinja2: ReDoS vulnerability in the urlize filter (CVE-2020-28493) * python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771) * python-pygments: Infinite loo

    python-nose-docs python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.5.0+2569+5c5719bc
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. ALSA-2021:4150

    Без оценкиЕсть исправление

    Moderate: python36:3.6 security and bug fix update

    Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270) * python-pygments: ReDoS in multiple lexers (CVE-2021-27291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Change

    python-nose-docs python-nose-docsОперационные системы
    • Обновитесь до 1.3.7-31.module_el8.5.0+2569+5c5719bc
    • Обновитесь до 1.3.7-31.module_el8.6.0+2781+fed64c13
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →