CVE-2022-42969
Fixed in a distro release EPSS 2%CVSS 5.3
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.
Products: pytest py
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | python-py | no fix |
| Debian 13 | python-py | no fix |
| SUSE Linux Enterprise Micro 5.1 | python-py | 1.10.0-150100.5.12.1 |
| SUSE Linux Enterprise Micro 5.2 | python-py | 1.10.0-150100.5.12.1 |
| SUSE Linux Enterprise Micro 5.3 | python-py | 1.10.0-150100.5.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | python-py | 1.10.0-150100.5.12.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-py | 1.8.1-11.18.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-py | 1.8.1-11.15.2 |
| SUSE Linux Enterprise Real Time 15 SP3 | python-py | 1.10.0-150100.5.12.1 |
| SUSE Linux Enterprise Server 12 SP5 | python-py | 1.8.1-11.18.1 |
| SUSE Linux Enterprise Server 12 SP5 | python-py | 1.8.1-11.15.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-py | 1.8.1-11.18.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-py | 1.8.1-11.15.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-py | 1.8.1-11.15.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-py | 1.8.1-11.18.1 |
| openSUSE Leap 15.4 | python-py | 1.10.0-150100.5.12.1 |
| openSUSE Leap Micro 5.2 | python-py | 1.10.0-150100.5.12.1 |
| openSUSE Leap Micro 5.3 | python-py | 1.10.0-150100.5.12.1 |
| openSUSE Tumbleweed | python-py | 1.11.0-9.5 |