Debian 10163 Published by

Updated python-idna packages are available for Debian GNU/Linux 9 (Stretch) Extended LTS:

ELA-1121-1 python-idna security update




ELA-1121-1 python-idna security update

Package : python-idna
Version : 2.2-1+deb9u1 (stretch)

Related CVEs :
CVE-2024-3651

Guido Vranken discovered an issue in python3-idna, a library to support
the Internationalized Domain Names in Applications (IDNA) protocol. A
specially crafted argument to the idna.encode() function could consume
significant resources, which may lead to Denial of Service.

ELA-1121-1 python-idna security update