CVE-2019-9674

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-03/msg00003.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html · Broken Link
• bugs.python.org/issue36260 · Issue Tracking
• bugs.python.org/issue36462 · Issue Tracking
• python/cpython · Third Party Advisory
• python-security.readthedocs.io/security.html · Vendor Advisory
• security.netapp.com/advisory/ntap-20200221-0003 · Third Party Advisory
• usn.ubuntu.com/4428-1 · Third Party Advisory
• python.org/news/security · Vendor Advisory
• cert-portal.siemens.com/productcert/html/ssa-398330.html

python のその他の脆弱性

• CVE-2026-15308高 7.5The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when…
• CVE-2026-4360中 5.3In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts c…
• CVE-2026-0864中 5.5When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters (\r) the…
• CVE-2026-7210高 7.5`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML docu…
• CVE-2026-3087高 7.5If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be ex…