{"id":"MGASA-2013-0376","aliases":[],"status":"published","title":"Updated python3 and related packages fix security vulnerabilities and prevent an error","description":"Changed behavior of ssl.match_hostname() to follow RFC 6125\n\nAlso python-virtualenv has had inc_dir settings altered to avoid\n\"#include nested too deeply\" error (mga#11283)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2013-12-17T23:36:57Z","modified":"2026-04-16T04:29:19Z","fixes":[{"ecosystem":"Mageia:3","package":"python3","fixed_in":["3.3.0-4.5.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-virtualenv","fixed_in":["1.10.1-1.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-requests","fixed_in":["0.13.5-2.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"bzr","fixed_in":["2.5.1-3.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-pip","fixed_in":["1.3.1-2.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-tornado","fixed_in":["2.3-2.2.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-urllib3","fixed_in":["1.7.1-1.1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"python-setuptools","fixed_in":["0.9.8-2.2.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:3","package":"python3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-4.5.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python-virtualenv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-1.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13.5-2.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-3.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python-pip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-2.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python-tornado","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3-2.2.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-1.1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"python-setuptools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-2.2.mga3"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2013-0376.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11283","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11785","tags":["report"]},{"url":"http://bugs.python.org/issue17997#msg194950","tags":["report"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2013-November/122682.html","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1023742","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2013-0376","title":"Updated python3 and related packages fix security vulnerabilities and prevent an error","description":"Changed behavior of ssl.match_hostname() to follow RFC 6125\n\nAlso python-virtualenv has had inc_dir settings altered to avoid\n\"#include nested too deeply\" error (mga#11283)\n","status":"published","published":"2013-12-17T23:36:57Z","modified":"2026-04-16T04:29:19.013955Z","updated_at":"2026-11-02T15:49:39.121227Z"}]}}