| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| extra packages for enterprise linux | = 7.0 | |
| python | = 3.10.0≥ 3.7.0, < 3.7.11≥ 3.8.0, < 3.8.10≥ 3.9.0, < 3.9.5< 3.6.14 | 3.7.113.8.103.9.53.6.14 |
| codeready linux builder | = 8.0 | |
| codeready linux builder for ibm z systems | = 8.0 | |
| codeready linux builder for power little endian | = 8.0 |
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン