python310 vulnerabilities (openSUSE)
97 vulnerabilities.
python310openSUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython310openSUSEURL parser allowed square brackets in domain names6.3 Mediumpython310openSUSEImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython310openSUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython310openSUSERegular-expression DoS when parsing TarFile headers7.5 Highpython310openSUSEInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython310openSUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython310openSUSEEmail header injection due to unquoted newlines5.5 Mediumpython310openSUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython310openSUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython310openSUSEtempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 Highpython310openSUSERejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was...No scorepython310openSUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython310openSUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython310openSUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython310openSUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython310openSUSEPossible DoS translating ASN.1 object identifiers6.5 Mediumpython310openSUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython310openSUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython310openSUSEX.400 address type confusion in X.509 GeneralName7.4 Highpython310openSUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython310openSUSEPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython310openSUSEBuffer overflow in sponge queue functions9.8 Criticalpython310openSUSEA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython310openSUSEPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython310openSUSEIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython310openSUSExmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Criticalpython310openSUSEA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython310openSUSEThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython310openSUSEWeb Cache Poisoning5.9 Mediumpython310openSUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython310openSUSEIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 Criticalpython310openSUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython310openSUSEIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 Highpython310openSUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython310openSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython310openSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython310openSUSEThe CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL...9.8 Criticalpython310openSUSERace condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when...3.3 Lowpython310openSUSEUpdated python & python3 packages fix multiple vulnerabilitiesNo scorepython310openSUSEThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...4.3 Mediumpython310openSUSEPython before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash...5.0 Mediumpython310openSUSESimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...5.0 Mediumpython310openSUSEPython 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...1.9 Lowpython310openSUSEThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 Mediumpython310openSUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium