Unscored DLA-3614-1 5 CVEs

python3.7 - security update

Published Oct 11, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	python3.7	3.7.3-2+deb10u6

Vulnerabilities 5

Unscored —

CVE-2022-48560

A use-after-free exists in Python through 3.9 via heappushpop in heapq.

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-48564

read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion whe…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-48565 Public exploit

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2022-48566

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Aug 22, 2023
Unscored —

CVE-2023-40217

An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Aug 25, 2023