Debian/pypy3: critical 9.8
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
Action: Upgrade pypy3 to 7.3.5+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.3.5+dfsg-2 | - |
Fixed versions
| 7.3.5+dfsg-2 |
Sources
published · modified · JSON