Updated python-py packages fix security vulnerability
Publication date: 13 Nov 2025Modification date: 13 Nov 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2022-42969
Description
The py library through 1.11.0 for Python allows remote attackers to
conduct a ReDoS (Regular expression Denial of Service) attack via a
Subversion repository with crafted info data, because the InfoSvnCommand
argument is mishandled. (CVE-2022-42969)
References
- https://bugs.mageia.org/show_bug.cgi?id=31458
- https://lists.suse.com/pipermail/sle-security-updates/2023-January/013536.html
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ELXQR2N4BOTGP4YQAZGZJDQMETKR6DWY/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42969
SRPMS
9/core
- python-py-1.11.0-2.1.mga9