Debian/pypy3: medium 6.5
CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-rea
Action: Upgrade pypy3 to 7.3.10+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.3.10+dfsg-1 | - |
Fixed versions
| 7.3.10+dfsg-1 |
Sources
published · modified · JSON