CVE-2020-27619
published 2020-10-22CVE-2020-27619: In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
PriorityP351critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
8.31%
94.3th percentile
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | pypy3 | < pypy3 7.3.5+dfsg-2 (bookworm) | pypy3 7.3.5+dfsg-2 (bookworm) |
| debian | python2.7 | < pypy3 7.3.5+dfsg-2 (bookworm) | pypy3 7.3.5+dfsg-2 (bookworm) |
| debian | python3.9 | < pypy3 7.3.5+dfsg-2 (bookworm) | pypy3 7.3.5+dfsg-2 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cm1_python3_3.7.9-2_on_cbl_mariner_1.0 | — | — |
| oracle | communications_cloud_native_core_network_function_cloud_native_environment | — | — |
| paloalto | cortex_xsoar | — | — |
| paloalto | pan-os | — | — |
| python | python | >= 3.0.0 < 3.6.13 | 3.6.13 |
| python | python | >= 3.7.0 < 3.7.10 | 3.7.10 |
| python | python | >= 3.8.0 < 3.8.7 | 3.8.7 |
| python | python | >= 3.9.0 < 3.9.1 | 3.9.1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_msrc9.8CRITICAL
vendor_redhat9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities
osv·2024-07-11·CVSS 7.6
CVE-2015-20107 [HIGH] python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities
python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12 vulnerabilities
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.
(CVE-2015-20107)
It was discovered that Python incorrectly used regular expressions
vulnerable to catastrophic backtracking. A remote attacker could possibly
use this issue to cause a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)
It was discovered that Python failed to initialize Expat’s hash salt. A
remote attacker could possibly use this issue to cause hash collisions,
leading to a denial of service. This issue only affected Ubuntu 14.04 L
GHSA
GHSA-22cq-cq7f-8jm3: In Python 3 through 3
ghsa_unreviewed·2022-05-24
CVE-2020-27619 [CRITICAL] GHSA-22cq-cq7f-8jm3: In Python 3 through 3
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
OSV
python2.7 vulnerability
osv·2022-02-08·CVSS 9.8
CVE-2021-3177 [CRITICAL] python2.7 vulnerability
python2.7 vulnerability
USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a
subsequent update removed the fix for CVE-2021-3177. This update reinstates
the security fix for CVE-2021-3177 in Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
OSV
python2.7, python3.7, python3.8 vulnerabilities
osv·2021-03-12·CVSS 7.5
CVE-2019-9674 [HIGH] python2.7, python3.7, python3.8 vulnerabilities
python2.7, python3.7, python3.8 vulnerabilities
USN-4754-1 fixed vulnerabilities in Python. This update provides
the corresponding updates for Ubuntu 18.04 and Ubuntu 20.04.
In the case of Python 2.7 for 20.04, these additional fixes are included:
It was dicovered that Python allowed remote attackers to cause a denial of
service (resource consumption) via a ZIP bomb. (CVE-2019-9674)
It was discovered that Python had potentially misleading information about
whether sorting occurs. This fix updates the documentation about it.
(CVE-2019-17514)
It was discovered that Python incorrectly handled certain TAR archives.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-20907)
It was discovered that Python allowed an HTTP server to conduct Regular
Expression Den
OSV
python2.7 vulnerability
osv·2021-03-03·CVSS 9.8
CVE-2021-3177 [CRITICAL] python2.7 vulnerability
python2.7 vulnerability
USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a
subsequent update removed the fix for CVE-2021-3177. This update reinstates
the security fix for CVE-2021-3177.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
OSV
python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities
osv·2021-02-25·CVSS 9.8
CVE-2020-27619 [CRITICAL] python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities
python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
OSV
python2.7 regression
osv·2021-02-25·CVSS 9.8
CVE-2021-3177 [CRITICAL] python2.7 regression
python2.7 regression
USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a
regression in Python 2.7. This update reverts the security fix pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
OSV
CVE-2020-27619: In Python 3 through 3
osv·2020-10-22·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619: In Python 3 through 3
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
Ubuntu
Python vulnerabilities
vendor_ubuntu·2024-07-11·CVSS 7.6
CVE-2021-29921 [HIGH] Python vulnerabilities
Title: Python vulnerabilities
Summary: Several security issues were fixed in Python.
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS.
(CVE-2015-20107)
It was discovered that Python incorrectly used regular expressions
vulnerable to catastrophic backtracking. A remote attacker could possibly
use this issue to cause a denial of service. This issue only affected
Ubuntu 14.04 LTS. (CVE-2018-1060, CVE-2018-1061)
It was discovered that Python failed to initialize Expat’s hash salt. A
remote attacker could possibly use this issue to cause hash collisions,
leading to a denial of service. This issue only affected Ubuntu 14.04 LTS.
(CVE-2018-14647)
Palo Alto
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
vendor_paloalto·2024-04-10·CVSS 9.8
CVE-2015-5739 [CRITICAL] PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS. While it was not determined that these CVEs have any significant impact on PAN-OS, they have been fixed out of an abundance of caution. CVE Summary CVE-2015-5739 This CVE is fixed in PAN-OS 11.0.4, and all later PAN-OS versions. CVE-2016-10228 This CVE is fixed in PAN-OS 11.1.3, and all later PAN-OS versions. CVE-2017-8923 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2017-9120 This CVE is fixed in PAN-OS 10.2.8, 11.0.3, and all later PAN-OS versions. CVE-2018-25009 This CVE is fixed in PAN-OS 10.2.8, 11.0.4, 11.1.3, and all later PAN-OS versions. CVE-2
Ubuntu
Python vulnerability
vendor_ubuntu·2022-02-08·CVSS 9.8
CVE-2021-3177 [CRITICAL] Python vulnerability
Title: Python vulnerability
Summary: Python could be made to execute arbitrary code or denial of service if it
received a specially crafted input.
USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a
subsequent update removed the fix for CVE-2021-3177. This update reinstates
the security fix for CVE-2021-3177 in Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
Python vulnerabilities
vendor_ubuntu·2021-03-12·CVSS 7.5
CVE-2020-8492 [HIGH] Python vulnerabilities
Title: Python vulnerabilities
Summary: Several security issues were fixed in Python 2.7 and Python 3.8.
USN-4754-1 fixed vulnerabilities in Python. This update provides
the corresponding updates for Ubuntu 18.04 and Ubuntu 20.04.
In the case of Python 2.7 for 20.04, these additional fixes are included:
It was dicovered that Python allowed remote attackers to cause a denial of
service (resource consumption) via a ZIP bomb. (CVE-2019-9674)
It was discovered that Python had potentially misleading information about
whether sorting occurs. This fix updates the documentation about it.
(CVE-2019-17514)
It was discovered that Python incorrectly handled certain TAR archives.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-20907)
It was discovered that Python
Ubuntu
Python 2.7 vulnerability
vendor_ubuntu·2021-03-03·CVSS 9.8
CVE-2021-3177 [CRITICAL] Python 2.7 vulnerability
Title: Python 2.7 vulnerability
Summary: Python could be made to execute arbitrary code or denial of service if it
received a specially crafted input.
USN-4754-1 fixed vulnerabilities in Python. Because of a regression, a
subsequent update removed the fix for CVE-2021-3177. This update reinstates
the security fix for CVE-2021-3177.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
Python regression
vendor_ubuntu·2021-02-25·CVSS 9.8
CVE-2021-3177 [CRITICAL] Python regression
Title: Python regression
Summary: USN-4754-1 introduced a regression in Python2.7.
USN-4754-1 fixed a vulnerability in Python. The fix for CVE-2021-3177 introduced a
regression in Python 2.7. This update reverts the security fix pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
Instructions: In general, a standard system update will make all the necessary changes.
Ubuntu
Python vulnerabilities
vendor_ubuntu·2021-02-25·CVSS 9.8
CVE-2021-3177 [CRITICAL] Python vulnerabilities
Title: Python vulnerabilities
Summary: Python could be made to execute arbitrary code or denial of service if it
received a specially crafted input.
It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
or cause a denial of service. (CVE-2020-27619, CVE-2021-3177)
Instructions: In general, a standard system update will make all the necessary changes.
Palo Alto
Informational: Impact of Python Test Suite Vulnerability CVE-2020-27619
vendor_paloalto·2021-02-10·CVSS 9.8
CVE-2020-27619 [CRITICAL] Informational: Impact of Python Test Suite Vulnerability CVE-2020-27619
Informational: Impact of Python Test Suite Vulnerability CVE-2020-27619
The Palo Alto Networks Product Security Assurance team evaluated the Python test suite vulnerability CVE-2020-27619.
There are no scenarios that enable successful exploitation of the vulnerability in Cortex XSOAR or PAN-OS software. No product release contains the Python test suite that is necessary to exploit this vulnerability. As a result, there is no known security impact for this vulnerability in Cortex XSOAR or PAN-OS software.
Affected products: Cortex XSOAR, PAN-OS
Solution: No Palo Alto Networks Cortex XSOAR or PAN-OS product updates are required.
Microsoft
In Python 3 through 3.9.0 the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
vendor_msrc·2020-10-13·CVSS 9.8
CVE-2020-27619 [CRITICAL] In Python 3 through 3.9.0 the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
In Python 3 through 3.9.0 the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
mitre: mitre
Customer Action Requir
Red Hat
python: Unsafe use of eval() on data retrieved via HTTP in the test suite
vendor_redhat·2020-10-05·CVSS 9.8
CVE-2020-27619 [CRITICAL] CWE-95 python: Unsafe use of eval() on data retrieved via HTTP in the test suite
python: Unsafe use of eval() on data retrieved via HTTP in the test suite
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
In Python3's Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
Statement: As of Red Hat Quay 3.4 the python runtime will be consumed from RHEL. Currently releases up to 3.3 won't get fixes for this moderate issue.
Mitigation: In versions of Python shipped with Red Hat Enterprise Linux and Red Hat Software Collections, the flaw can be mitigated by not running the python tests with network resources enabled. By default, the tests are not run with network resources enabled. Ensure that `-u network` or `-uall` are not passed as options to `python -m t
Debian
CVE-2020-27619: pypy3 - In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec test...
vendor_debian·2020·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619: pypy3 - In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec test...
In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
Scope: local
bookworm: resolved (fixed in 7.3.5+dfsg-2)
bullseye: resolved (fixed in 7.3.5+dfsg-2)
forky: resolved (fixed in 7.3.5+dfsg-2)
sid: resolved (fixed in 7.3.5+dfsg-2)
trixie: resolved (fixed in 7.3.5+dfsg-2)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-27619 python36: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python36: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 python36: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mult
Bugzilla
CVE-2020-27619 python39: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python39: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 python39: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mult
Bugzilla
CVE-2020-27619 python35: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python35: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 python35: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mult
Bugzilla
CVE-2020-27619 python37: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python37: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 python37: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mult
Bugzilla
CVE-2020-27619 python38: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python38: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 python38: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects mult
Bugzilla
CVE-2020-27619 mingw-python3: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 mingw-python3: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 mingw-python3: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects
Bugzilla
CVE-2020-27619 python3: python: Python 3 eval of http resources during test suite runs [fedora-all]
bugzilla·2020-10-21·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python3: python: Python 3 eval of http resources during test suite runs [fedora-all]
CVE-2020-27619 python3: python: Python 3 eval of http resources during test suite runs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multi
Bugzilla
CVE-2020-27619 python: Unsafe use of eval() on data retrieved via HTTP in the test suite
bugzilla·2020-10-20·CVSS 9.8
CVE-2020-27619 [CRITICAL] CVE-2020-27619 python: Unsafe use of eval() on data retrieved via HTTP in the test suite
CVE-2020-27619 python: Unsafe use of eval() on data retrieved via HTTP in the test suite
In Python3's Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP. Affected versions include Python 3.10, Python 3.9, Python 3.8, Python 3.7, Python 3.6.
Discussion:
References:
Upstream bug: https://bugs.python.org/issue41944
Patches:
https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8 (master)
https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794 (3.9)
https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33 (3.8)
https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9 (3.7)
https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad
https://bugs.python.org/issue41944https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad39374bhttps://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3Ehttps://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3Ehttps://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3Ehttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/https://security.gentoo.org/glsa/202402-04https://security.netapp.com/advisory/ntap-20201123-0004/https://www.oracle.com/security-alerts/cpujul2022.htmlhttps://bugs.python.org/issue41944https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad39374bhttps://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3Ehttps://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3Ehttps://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3Ehttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/https://security.gentoo.org/glsa/202402-04https://security.netapp.com/advisory/ntap-20201123-0004/https://www.oracle.com/security-alerts/cpujul2022.html
2020-10-22
Published