python2.7 - security update

Fixed packages 1

Vulnerabilities 7

• High 7.5
  CVE-2022-0391

  A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Feb 9, 2022
• High 7.5
  CVE-2023-24329 Public exploit EPSS 20%

  An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Feb 17, 2023
• Medium 5.9
  CVE-2021-23336 EPSS 41%

  Web Cache Poisoning

  The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…

  python-django python-django python3.4 python3.5 Debian Ubuntu Azure Linux Alpine
  Feb 15, 2021
• Unscored —
  CVE-2022-48560

  A use-after-free exists in Python through 3.9 via heappushpop in heapq.

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Aug 22, 2023
• Unscored —
  CVE-2022-48565 Public exploit

  An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Aug 22, 2023
• Unscored —
  CVE-2022-48566

  An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Aug 22, 2023
• Unscored —
  CVE-2023-40217

  An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  Aug 25, 2023