PT-2013-6361 · Python · Python-Virtualenv

Published 2013-12-17 · Updated 2013-12-17

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions python-virtualenv (affected versions not specified)

Description The issue concerns a change in behavior of the ssl.match hostname() function to adhere to RFC 6125. Additionally, python-virtualenv has had its inc dir settings altered to prevent a nested include error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2013-0376

Affected Products

Python-Virtualenv

References · 7

• https://advisories.mageia.org/MGASA-2013-0376.html · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0376 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2013-November/122682.html · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=11785 · Note
• http://bugs.python.org/issue17997#msg194950 · Note
• https://bugs.mageia.org/show_bug.cgi?id=11283 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1023742 · Note