idna: Denial of Service — GLSA 202412-17

A vulnerability has been discovered in idna, which can lead to a denial of service.

Package	dev-python/idna on all architectures
Affected versions	< 3.7
Unaffected versions	>= 3.7

Internationalized Domain Names for Python (IDNA 2008 and UTS #46)

A vulnerability has been discovered in idna. Please review the CVE identifier referenced below for details.

Please review the referenced CVE identifier for details.

There is no known workaround at this time.

All idna users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-python/idna-3.7"

Release date
December 11, 2024

Latest revision
December 11, 2024: 1

Severity
normal

Exploitable
local

Bugzilla entries