Python Security

Red Hat Security Advisory 2024-1930-03

Python Files ≈ Packet Storm Apr 23, 2024 | 14:57 pm

Red Hat Security Advisory 2024-1930-03 - An update for openstack-tripleo-heat-templates and python-yaql is now available for Red Hat OpenStack Platform 17.1. Issues addressed include an information leakage vulnerability.

pgAdmin 8.3 Remote Code Execution

Python Files ≈ Packet Storm Apr 17, 2024 | 15:50 pm

pgAdmin versions 8.3 and below have a path traversal vulnerability within their session management logic that can allow a pickled file to be loaded from an arbitrary location. This can be used to load a malicious, serialized Python object to[…]

WatchGuard XTM Firebox Unauthenticated Remote Command Execution

Python Files ≈ Packet Storm Mar 29, 2024 | 18:04 pm

This Metasploit module exploits a buffer overflow at the administration interface (8080 or 4117) of WatchGuard Firebox and XTM appliances which is built from a cherrypy python backend sending XML-RPC requests to a C binary called wgagent using pre-authentication endpoint[…]

Red Hat Security Advisory 2024-1518-03

Python Files ≈ Packet Storm Mar 27, 2024 | 14:37 pm

Red Hat Security Advisory 2024-1518-03 - An update for python-twisted is now available for Red Hat OpenStack Platform 16.2.

Red Hat Security Advisory 2024-1516-03

Python Files ≈ Packet Storm Mar 27, 2024 | 14:36 pm

Red Hat Security Advisory 2024-1516-03 - An update for python-twisted is now available for Red Hat OpenStack Platform 16.1.

Ubuntu Security Notice USN-6673-2

Python Files ≈ Packet Storm Mar 14, 2024 | 13:41 pm

Ubuntu Security Notice 6673-2 - USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 16.04 LTS. Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in[…]

Ubuntu Security Notice USN-6673-1

Python Files ≈ Packet Storm Mar 4, 2024 | 16:36 pm

Ubuntu Security Notice 6673-1 - Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in RSA PKCS#1 v1.5. A remote attacker could possibly use this issue to expose confidential or sensitive information.[…]

Red Hat Security Advisory 2024-1058-03

Python Files ≈ Packet Storm Mar 1, 2024 | 16:08 pm

Red Hat Security Advisory 2024-1058-03 - An update for python-pillow is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Issues addressed include a code execution vulnerability.

Ubuntu Security Notice USN-6668-1

Python Files ≈ Packet Storm Feb 28, 2024 | 16:02 pm

Ubuntu Security Notice 6668-1 - It was discovered that when python-openstackclient attempted to delete a non-existing access rule, it would delete another existing access rule instead, contrary to expectations.

Red Hat Security Advisory 2024-0893-03

Python Files ≈ Packet Storm Feb 20, 2024 | 15:24 pm

Red Hat Security Advisory 2024-0893-03 - An update for python-pillow is now available for Red Hat Enterprise Linux 8. Issues addressed include a code execution vulnerability.

Red Hat Security Advisory 2024-0857-03

Python Files ≈ Packet Storm Feb 19, 2024 | 13:55 pm

Red Hat Security Advisory 2024-0857-03 - An update for python-pillow is now available for Red Hat Enterprise Linux 7. Issues addressed include a code execution vulnerability.

Red Hat Security Advisory 2024-0754-03

Python Files ≈ Packet Storm Feb 9, 2024 | 16:36 pm

Red Hat Security Advisory 2024-0754-03 - An update for python-pillow is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Issues addressed include a code execution vulnerability.

Red Hat Security Advisory 2024-0588-03

Python Files ≈ Packet Storm Jan 31, 2024 | 16:01 pm

Red Hat Security Advisory 2024-0588-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.

Red Hat Security Advisory 2024-0587-03

Python Files ≈ Packet Storm Jan 31, 2024 | 16:00 pm

Red Hat Security Advisory 2024-0587-03 - An update for python-pip is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Issues addressed include a traversal vulnerability.

Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read

Python Files ≈ Packet Storm Jan 29, 2024 | 17:03 pm

Jenkins versions 2.441 and below and LTS 2.426.3 and below remote arbitrary file read proof of concept exploit written in Python.

Red Hat Security Advisory 2024-0464-03

Python Files ≈ Packet Storm Jan 26, 2024 | 15:27 pm

Red Hat Security Advisory 2024-0464-03 - An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.

Red Hat Security Advisory 2024-0374-03

Python Files ≈ Packet Storm Jan 24, 2024 | 15:05 pm

Red Hat Security Advisory 2024-0374-03 - An update for python-pip is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Issues addressed include a traversal vulnerability.