UbuntuUpdates.org

Package "python3-configobj"

Name: python3-configobj

Description:

simple but powerful config file reader and writer for Python 3
Latest version: 5.0.6-5ubuntu0.1
Release: jammy (22.04)
Level: updates
Repository: main
Head package: configobj
Homepage: http://www.voidspace.org.uk/python/configobj.html

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "python3-configobj"

All arch deb package
APT INSTALL

Other versions of "python3-configobj" in Jammy

Repository Area Version
base main 5.0.6-5
security main 5.0.6-5ubuntu0.1

Changelog

Version: 5.0.6-5ubuntu0.1 2024-09-26 19:06:56 UTC

  configobj (5.0.6-5ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: ReDoS
    - debian/patches/CVE-2023-26112.patch: updates regex that can cause
      catastrophic backtracking when a match fails in validate.py and adds a
      test in tests/test_validate_errors.py.
    - CVE-2023-26112

 -- Ian Constantin <email address hidden> Fri, 20 Sep 2024 14:44:09 +0300
CVE-2023-26112 All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\).


About   -   Send Feedback to @ubuntu_updates