UbuntuUpdates.org

Package "python-configobj-doc"

Name: python-configobj-doc

Description:

simple but powerful config file reader and writer (documentation)

Latest version: 5.0.6-4ubuntu0.1
Release: focal (20.04)
Level: security
Repository: main
Head package: configobj
Homepage: http://www.voidspace.org.uk/python/configobj.html

Links


Download "python-configobj-doc"


Other versions of "python-configobj-doc" in Focal

Repository Area Version
base main 5.0.6-4
updates main 5.0.6-4ubuntu0.1

Changelog

Version: 5.0.6-4ubuntu0.1 2024-09-26 18:06:55 UTC

  configobj (5.0.6-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: ReDoS
    - debian/patches/CVE-2023-26112.patch: updates regex that can cause
      catastrophic backtracking when a match fails in validate.py and adds a
      test in tests/test_validate_errors.py.
    - CVE-2023-26112

 -- Ian Constantin <email address hidden> Fri, 20 Sep 2024 15:02:40 +0300

CVE-2023-26112 All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\).



About   -   Send Feedback to @ubuntu_updates