python311 vulnerabilities (openSUSE)
93 vulnerabilities.
python311openSUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython311openSUSEMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython311openSUSEURL parser allowed square brackets in domain names6.3 Mediumpython311openSUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython311openSUSERegular-expression DoS when parsing TarFile headers7.5 Highpython311openSUSEInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython311openSUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython311openSUSEEmail header injection due to unquoted newlines5.5 Mediumpython311openSUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython311openSUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython311openSUSEtempfile.mkdtemp() may be readable and writeable by all users on Windows7.1 Highpython311openSUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython311openSUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython311openSUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython311openSUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython311openSUSEAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython311openSUSEPossible DoS translating ASN.1 object identifiers6.5 Mediumpython311openSUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython311openSUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython311openSUSEX.400 address type confusion in X.509 GeneralName7.4 Highpython311openSUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython311openSUSEPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython311openSUSEA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython311openSUSExmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Criticalpython311openSUSEA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython311openSUSEThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython311openSUSEWeb Cache Poisoning5.9 Mediumpython311openSUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython311openSUSEIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...9.8 Criticalpython311openSUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython311openSUSEIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on...7.8 Highpython311openSUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython311openSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython311openSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython311openSUSEThe CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL...9.8 Criticalpython311openSUSERace condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when...3.3 Lowpython311openSUSEUpdated python & python3 packages fix multiple vulnerabilitiesNo scorepython311openSUSEThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...4.3 Mediumpython311openSUSEPython before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash...5.0 Mediumpython311openSUSESimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...5.0 Mediumpython311openSUSEPython 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...1.9 Lowpython311openSUSEThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 Mediumpython311openSUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium