Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 37 python-asgiref 2023-9d36d373f1 Moderate: DoS Threat

fedora
Calendar Grey October 23, 2023
Dist Fedora Esm H88
The recent update for python-asgiref in Fedora resolves various security vulnerabilities that affect the package.
Security fix for CVE-2023-43665, CVE-2023-41164, and CVE-2023-36053

Summary

ASGI is a standard for Python asynchronous web apps and servers to communicate

with each other, and positioned as an asynchronous successor to WSGI. This

package includes ASGI base libraries, such as:

* Sync-to-async and async-to-sync function wrappers, asgiref.sync

* Server base classes, asgiref.server

* A WSGI-to-ASGI adapter, in asgiref.wsgi

Update Information:

Security fix for CVE-2023-43665, CVE-2023-41164, and CVE-2023-36053

Topics%20covered

Topics Covered

security advisory update Fedora DoS security fix CVE python-asgiref

Change Log

* Mon Feb 13 2023 Joel Capitao - 3.5.2-1 - Update to 3.5.2 * Fri Jan 20 2023 Fedora Release Engineering - 3.4.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

References


[ 1 ] Bug #2219383 - CVE-2023-36053 python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2219383 [ 2 ] Bug #2237870 - CVE-2023-41164 python-django: Potential denial of service vulnerability in ``django.utils.encoding.uri_to_iri()`` [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2237870 [ 3 ] Bug #2242182 - CVE-2023-43665 python-django: Denial-of-service possibility in django.utils.text.Truncator [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2242182

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-9d36d373f1' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: python-asgiref
Product: Fedora 37
Version: 3.5.2
Release: 1.fc37
URL: https://github.com/django/asgiref
Summary: ASGI specs, helper code, and adapters

Topics%20covered

Topics Covered

security advisory update Fedora DoS security fix CVE python-asgiref

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here