UbuntuUpdates.org

Package "python-future"

Name: python-future

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Clean single-source support for Python 3 and 2 - doc
  • Clean single-source support for Python 3 and 2 - Python 3.x
Latest version: 0.18.2-2ubuntu0.1
Release: focal (20.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "python-future" in Focal

Repository Area Version
base main 0.18.2-2
updates main 0.18.2-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.18.2-2ubuntu0.1 2023-01-31 12:07:22 UTC

  python-future (0.18.2-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: ReDOS through Set-Cookie header
    - debian/patches/CVE-2022-40899.patch: Fix overlapping \s*
      regex groups in src/future/backports/http/cookiejar.py.
    - CVE-2022-40899

 -- David Fernandez Gonzalez <email address hidden> Wed, 25 Jan 2023 09:33:14 +0100
CVE-2022-40899 An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header f


About   -   Send Feedback to @ubuntu_updates