UbuntuUpdates.org

Package "python-configobj-doc"

Name: python-configobj-doc

Description:

simple but powerful config file reader and writer (documentation)
Latest version: 5.0.6-4ubuntu0.1
Release: focal (20.04)
Level: updates
Repository: main
Head package: configobj
Homepage: http://www.voidspace.org.uk/python/configobj.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python-configobj-doc"

All arch deb package
APT INSTALL

Other versions of "python-configobj-doc" in Focal

Repository Area Version
base main 5.0.6-4
security main 5.0.6-4ubuntu0.1

Changelog

Version: 5.0.6-4ubuntu0.1 2024-09-26 19:06:55 UTC

  configobj (5.0.6-4ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: ReDoS
    - debian/patches/CVE-2023-26112.patch: updates regex that can cause
      catastrophic backtracking when a match fails in validate.py and adds a
      test in tests/test_validate_errors.py.
    - CVE-2023-26112

 -- Ian Constantin <email address hidden> Fri, 20 Sep 2024 15:02:40 +0300
CVE-2023-26112 All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\).


About   -   Send Feedback to @ubuntu_updates