File _patchinfo of Package patchinfo.31215

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.31215

<patchinfo incident="31215">
  <issue tracker="bnc" id="1214691">VUL-0: CVE-2022-48566: python-base,python36,python3,python: Use CRYPTO_memcmp() for compare_digest</issue>
  <issue tracker="bnc" id="1214685">VUL-0: CVE-2022-48565: python3,python,python3: Avoid plistlib XML vulnerabilities by rejecting entity directives</issue>
  <issue tracker="bnc" id="1210638">VUL-0: CVE-2023-27043: python39,python310,python27,python,python36,python3,python311: The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character</issue>
  <issue tracker="cve" id="2023-27043"/>
  <issue tracker="cve" id="2022-48566"/>
  <issue tracker="cve" id="2022-48565"/>
  <packager>mcepl</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for python</summary>
  <description>This update for python fixes the following issues:

- CVE-2022-48566: Fixed a potential timing side channel due to
  inadequate checking during HMAC comparison (bsc#1214691).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.31215

Places