{"id":"CVE-2013-1753","aliases":["DEBIAN-CVE-2013-1753","EUVD-2013-1780","GHSA-rg2r-27jq-959f","MGASA-2014-0139","PSF-2020-1","RHSA-2015:1064","RHSA-2015:2101","SUSE-SU-2015:1344-1","SUSE-SU-2020:0234-1","UBUNTU-CVE-2013-1753","USN-2653-1","openSUSE-SU-2024:10536-1","openSUSE-SU-2024:11202-1"],"status":"published","title":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote...","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03462,"percentile":0.8913,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-03-24T07:37:41Z","modified":"2026-08-05T10:03:23Z","fixes":[{"ecosystem":"Debian:11","package":"python2.7","fixed_in":["2.7.9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","fixed_in":["2.7.6-8ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","fixed_in":["3.4.0-2ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:11","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-1.1.mga3"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-1.1.mga4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-5.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24.0-2.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-17.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.6-5.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.8-5.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-simplejson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-simplejson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-python-wheel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24.0-2.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-runtime","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-scldevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-20.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"python27-tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.8-3.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"tkinter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.5-34.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"python-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.9-14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.2"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.17-7.32.1"}]}],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.2"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python2.7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.6-8ubuntu0.2"}]}],"versions":["2.7.5-8ubuntu3","2.7.5-8ubuntu4","2.7.6-2","2.7.6-2ubuntu1","2.7.6-3","2.7.6-3ubuntu1","2.7.6-4","2.7.6-4ubuntu1","2.7.6-5","2.7.6-7","2.7.6-8"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"python3.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.0-2ubuntu1.1"}]}],"versions":["3.4~b1-0ubuntu3","3.4~b1-4ubuntu4","3.4~b1-4ubuntu6","3.4~b1-5ubuntu2","3.4~b2-1","3.4~b3-1ubuntu1","3.4~rc1-1build1","3.4~rc2-1","3.4~rc3-0ubuntu1","3.4.0-1","3.4.0-2ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.12-1.4"}]}],"bundled":14},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-8.1"}]}],"bundled":40}],"products":[{"vendor":"python","product":"python"}],"references":[{"url":"https://bugs.python.org/issue16043","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1753","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rg2r-27jq-959f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-1753","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0139.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13041","tags":["report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-03/msg00044.html","tags":["web"]},{"url":"https://access.redhat.com/security/cve/cve-2013-1753","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:1064","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=994189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1046174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1062370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1113527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1146026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1167912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1170993","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1064.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1752","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1753","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1753","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1912","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1912","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4616","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-4650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4650","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-7185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-7185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7185","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2101","tags":["advisory"]},{"url":"https://access.redhat.com/articles/2039753","tags":["article"]},{"url":"https://www.python.org/dev/peps/pep-0466/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1058482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1173041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1177613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1181624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1237107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1259421","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2101.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151344-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/898572","tags":["report"]},{"url":"https://bugzilla.suse.com/901715","tags":["report"]},{"url":"https://bugzilla.suse.com/924312","tags":["report"]},{"url":"https://bugzilla.suse.com/935856","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7185","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200234-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027282","tags":["report"]},{"url":"https://bugzilla.suse.com/1041090","tags":["report"]},{"url":"https://bugzilla.suse.com/1042670","tags":["report"]},{"url":"https://bugzilla.suse.com/1068664","tags":["report"]},{"url":"https://bugzilla.suse.com/1073269","tags":["report"]},{"url":"https://bugzilla.suse.com/1073748","tags":["report"]},{"url":"https://bugzilla.suse.com/1078326","tags":["report"]},{"url":"https://bugzilla.suse.com/1078485","tags":["report"]},{"url":"https://bugzilla.suse.com/1079300","tags":["report"]},{"url":"https://bugzilla.suse.com/1081750","tags":["report"]},{"url":"https://bugzilla.suse.com/1083507","tags":["report"]},{"url":"https://bugzilla.suse.com/1084650","tags":["report"]},{"url":"https://bugzilla.suse.com/1086001","tags":["report"]},{"url":"https://bugzilla.suse.com/1088004","tags":["report"]},{"url":"https://bugzilla.suse.com/1088009","tags":["report"]},{"url":"https://bugzilla.suse.com/1109847","tags":["report"]},{"url":"https://bugzilla.suse.com/1111793","tags":["report"]},{"url":"https://bugzilla.suse.com/1113755","tags":["report"]},{"url":"https://bugzilla.suse.com/1122191","tags":["report"]},{"url":"https://bugzilla.suse.com/1129346","tags":["report"]},{"url":"https://bugzilla.suse.com/1130840","tags":["report"]},{"url":"https://bugzilla.suse.com/1130847","tags":["report"]},{"url":"https://bugzilla.suse.com/1138459","tags":["report"]},{"url":"https://bugzilla.suse.com/1141853","tags":["report"]},{"url":"https://bugzilla.suse.com/1149792","tags":["report"]},{"url":"https://bugzilla.suse.com/1149955","tags":["report"]},{"url":"https://bugzilla.suse.com/1153238","tags":["report"]},{"url":"https://bugzilla.suse.com/1153830","tags":["report"]},{"url":"https://bugzilla.suse.com/1159035","tags":["report"]},{"url":"https://bugzilla.suse.com/214983","tags":["report"]},{"url":"https://bugzilla.suse.com/298378","tags":["report"]},{"url":"https://bugzilla.suse.com/346490","tags":["report"]},{"url":"https://bugzilla.suse.com/367853","tags":["report"]},{"url":"https://bugzilla.suse.com/379534","tags":["report"]},{"url":"https://bugzilla.suse.com/380942","tags":["report"]},{"url":"https://bugzilla.suse.com/399190","tags":["report"]},{"url":"https://bugzilla.suse.com/406051","tags":["report"]},{"url":"https://bugzilla.suse.com/425138","tags":["report"]},{"url":"https://bugzilla.suse.com/426563","tags":["report"]},{"url":"https://bugzilla.suse.com/430761","tags":["report"]},{"url":"https://bugzilla.suse.com/432677","tags":["report"]},{"url":"https://bugzilla.suse.com/436966","tags":["report"]},{"url":"https://bugzilla.suse.com/437293","tags":["report"]},{"url":"https://bugzilla.suse.com/441088","tags":["report"]},{"url":"https://bugzilla.suse.com/462375","tags":["report"]},{"url":"https://bugzilla.suse.com/525295","tags":["report"]},{"url":"https://bugzilla.suse.com/534721","tags":["report"]},{"url":"https://bugzilla.suse.com/551715","tags":["report"]},{"url":"https://bugzilla.suse.com/572673","tags":["report"]},{"url":"https://bugzilla.suse.com/577032","tags":["report"]},{"url":"https://bugzilla.suse.com/581765","tags":["report"]},{"url":"https://bugzilla.suse.com/603255","tags":["report"]},{"url":"https://bugzilla.suse.com/617751","tags":["report"]},{"url":"https://bugzilla.suse.com/637176","tags":["report"]},{"url":"https://bugzilla.suse.com/638233","tags":["report"]},{"url":"https://bugzilla.suse.com/658604","tags":["report"]},{"url":"https://bugzilla.suse.com/673071","tags":["report"]},{"url":"https://bugzilla.suse.com/682554","tags":["report"]},{"url":"https://bugzilla.suse.com/697251","tags":["report"]},{"url":"https://bugzilla.suse.com/707667","tags":["report"]},{"url":"https://bugzilla.suse.com/718009","tags":["report"]},{"url":"https://bugzilla.suse.com/747125","tags":["report"]},{"url":"https://bugzilla.suse.com/747794","tags":["report"]},{"url":"https://bugzilla.suse.com/751718","tags":["report"]},{"url":"https://bugzilla.suse.com/754447","tags":["report"]},{"url":"https://bugzilla.suse.com/766778","tags":["report"]},{"url":"https://bugzilla.suse.com/794139","tags":["report"]},{"url":"https://bugzilla.suse.com/804978","tags":["report"]},{"url":"https://bugzilla.suse.com/827982","tags":["report"]},{"url":"https://bugzilla.suse.com/831442","tags":["report"]},{"url":"https://bugzilla.suse.com/834601","tags":["report"]},{"url":"https://bugzilla.suse.com/836739","tags":["report"]},{"url":"https://bugzilla.suse.com/856835","tags":["report"]},{"url":"https://bugzilla.suse.com/856836","tags":["report"]},{"url":"https://bugzilla.suse.com/857470","tags":["report"]},{"url":"https://bugzilla.suse.com/863741","tags":["report"]},{"url":"https://bugzilla.suse.com/885882","tags":["report"]},{"url":"https://bugzilla.suse.com/945401","tags":["report"]},{"url":"https://bugzilla.suse.com/964182","tags":["report"]},{"url":"https://bugzilla.suse.com/984751","tags":["report"]},{"url":"https://bugzilla.suse.com/985177","tags":["report"]},{"url":"https://bugzilla.suse.com/985348","tags":["report"]},{"url":"https://bugzilla.suse.com/989523","tags":["report"]},{"url":"https://bugzilla.suse.com/997436","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5699","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9948","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2013-1753","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2015-1064.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2653-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-1752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4616","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-7185","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3737","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-1753","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2020-03-11T16:46:35Z","modified":"2024-08-06T15:13:32.356Z","updated_at":"2026-11-02T14:34:58.193873Z"}],"euvd":[{"id":"EUVD-2013-1780","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2020-03-11T16:46:35Z","modified":"2024-08-06T15:13:32Z","updated_at":"2026-11-03T01:56:41.063727Z"}],"ghsa":[{"id":"GHSA-rg2r-27jq-959f","title":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote...","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2022-05-05T00:29:41Z","modified":"2023-02-01T05:01:54Z","updated_at":"2026-11-02T14:49:48.641892Z"}],"nvd":[{"id":"CVE-2013-1753","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2020-03-11T17:15:12.5Z","modified":"2026-06-16T23:52:03.67Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:52.934105Z"}],"osv":[{"id":"CVE-2013-1753","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2020-03-11T17:15:12Z","modified":"2026-04-16T06:16:30.45665952Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-1753","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2020-03-11T17:15:12.5Z","modified":"2026-08-04T06:03:35.661293525Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"UBUNTU-CVE-2013-1753","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2015-06-04T00:00:00Z","modified":"2026-04-22T09:21:27.335323Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:06.854805Z"},{"id":"MGASA-2014-0139","title":"Updated python package fixes security vulnerabilities","description":"Denial of service flaws due to unbound readline() calls in the imaplib,\npoplib, and smtplib modules (CVE-2013-1752).\n\nA gzip bomb and unbound read denial of service flaw in python XMLRPC library\n(CVE-2013-1753).\n","status":"published","published":"2014-03-24T07:37:41Z","modified":"2026-04-16T06:24:55.92500961Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10536-1","title":"libpython2_7-1_0-2.7.12-1.4 on GA media","description":"These are all security issues fixed in the libpython2_7-1_0-2.7.12-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:14.818245Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11202-1","title":"python-2.7.18-8.1 on GA media","description":"These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:22.875083Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"PSF-2020-1","title":"xmlrpc gzip unlimited read","description":"The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.","status":"published","published":"2020-03-11T16:46:35Z","modified":"2025-10-09T01:02:45.350587Z","updated_at":"2026-11-02T15:52:50.263679Z"},{"id":"RHSA-2015:1064","title":"Red Hat Security Advisory: python27 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:22:24Z","modified":"2026-08-05T10:03:16Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2101","title":"Red Hat Security Advisory: python security, bug fix, and enhancement update","status":"published","published":"2024-09-13T09:23:55Z","modified":"2026-08-05T10:03:23Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:1344-1","title":"Security update for python","description":"This update to python 2.7.9 fixes the following issues:\n* python-2.7-libffi-aarch64.patch: Fix argument passing in libffi for aarch64\n\nFrom the version update to 2.7.9:\n  * contains full backport of ssl module from Python 3.4 (PEP466)\n  * HTTPS certificate validation enabled by default (PEP476)\n  * SSLv3 disabled by default (bnc#901715)\n  * backported ensurepip module (PEP477)\n  * fixes several missing CVEs from last release: CVE-2013-1752, CVE-2013-1753\n  * dropped upstreamed patches: python-2.7.6-poplib.patch,\n    smtplib_maxline-2.7.patch, xmlrpc_gzip_27.patch\n  * dropped patch python-2.7.3-ssl_ca_path.patch because we don't need it\n    with ssl module from Python 3\n  * libffi was upgraded upstream, seems to contain our changes,\n    so dropping libffi-ppc64le.diff as well\n  * python-2.7-urllib2-localnet-ssl.patch - properly remove unconditional\n    'import ssl' from test_urllib2_localnet that caused it to fail without ssl\n\n  * skip test_thread in qemu_linux_user mode \n\nFrom the version update to 2.7.8:\n  * fixes CVE-2014-4650 directory traversal in CGIHTTPServer\n  * fixes CVE-2014-7185 (bnc#898572) potential buffer overflow in buffer()\n\nAlso the DH parameters were increased to 2048 bit to fix logjam security issue (bsc#935856)\n","status":"published","published":"2015-06-30T13:56:32Z","modified":"2026-02-04T03:45:47.827952Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2020:0234-1","title":"Security update for python","description":"This update for python fixes the following issues:\n\nUpdated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).\n","status":"published","published":"2020-01-24T15:34:18Z","modified":"2025-05-02T04:03:47.841058Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-2653-1","title":"python2.7, python3.2, python3.4 vulnerabilities","description":"It was discovered that multiple Python protocol libraries incorrectly\nlimited certain data when connecting to servers. A malicious ftp, http,\nimap, nntp, pop or smtp server could use this issue to cause a denial of\nservice. (CVE-2013-1752)\n\nIt was discovered that the Python xmlrpc library did not limit unpacking\ngzip-compressed HTTP bodies. A malicious server could use this issue to\ncause a denial of service. (CVE-2013-1753)\n\nIt was discovered that the Python json module incorrectly handled a certain\nargument. An attacker could possibly use this issue to read arbitrary\nmemory and expose sensitive information. This issue only affected Ubuntu\n12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4616)\n\nIt was discovered that the Python CGIHTTPServer incorrectly handled\nURL-encoded path separators in URLs. A remote attacker could use this issue\nto expose sensitive information, or possibly execute arbitrary code. This\nissue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-4650)\n\nIt was discovered that Python incorrectly handled sizes and offsets in\nbuffer functions. An attacker could possibly use this issue to read\narbitrary memory and obtain sensitive information. This issue only affected\nUbuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2014-7185)\n","status":"published","published":"2015-06-25T11:58:16Z","modified":"2026-04-22T09:13:28.041902Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}