CVE-2022-40897

Advisory

Khoros 5.2.0 updates its dependency 'setuptools' to v65.5.1 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

******
**Release Date: 2022-12-05**

Added
=====

Core Object
-----------
Additions to the :doc:`core-object-methods`.

* Added the :py:meth:`khoros.core.Khoros.User.get_all_users_count` method.
* Added the :py:meth:`khoros.core.Khoros.Archives.is_archived` method.
* Added the following methods to the :py:class:`khoros.core.Khoros.BulkData` inner class:
* :py:meth:`khoros.core.Khoros.BulkData.filter_by_action`
* :py:meth:`khoros.core.Khoros.BulkData.filter_anonymous`
* :py:meth:`khoros.core.Khoros.BulkData.count_actions`
* :py:meth:`khoros.core.Khoros.BulkData.count_logins`
* :py:meth:`khoros.core.Khoros.BulkData.count_views`

Primary Modules
---------------
Additions to the :doc:`primary modules <primary-modules>`.

* Added the :py:func:`khoros.objects.users.get_all_users_count` function.
* Added the :py:func:`khoros.objects.archives.is_archived` function.
* Added the following functions in the :py:mod:`khoros.bulk_data` module:
* :py:func:`khoros.bulk_data.filter_by_action`
* :py:func:`khoros.bulk_data.filter_anonymous`
* :py:func:`khoros.bulk_data.count_actions`
* :py:func:`khoros.bulk_data.count_logins`
* :py:func:`khoros.bulk_data.count_views`
* :py:func:`khoros.bulk_data._validate_bulk_data_export`

Supporting Modules
------------------
Additions to the :doc:`supporting modules <supporting-modules>`.

* Added the :py:exc:`khoros.errors.exceptions.InvalidParameterError` exception class.
* Added the :py:func:`khoros.utils.tests.resources.mock_bulk_data_json` function.
* Added the :py:func:`khoros.utils.tests.test_archives.test_archive_check` test function.
* Added the :py:func:`khoros.utils.tests.test_bulk_data.test_bulk_data_query` test function.

Changed
=======

Primary Modules
---------------
Changes to the :doc:`primary modules <primary-modules>`.

* Improved the error handling in the :py:func:`khoros.bulk_data.query` function to display
the response text in the raised exception when available.

Supporting Modules
------------------
Changes to the :doc:`supporting modules <supporting-modules>`.

* Updated the :py:func:`khoros.utils.tests.test_exceptions.test_raising_exceptions` function
to test raising the :py:exc:`khoros.errors.exceptions.InvalidParameterError` exception class.
* Updated the :py:class:`khoros.utils.tests.resources.MockResponse` class to introduce the
``status_code`` attribute to the object.

General
-------
* Changed the ``setuptools`` version in ``requirements.txt`` to be 65.5.1 in order to mitigate
the `Regular Expression Denial of Service <https://security.snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3113904>`_
vulnerability identified by *Snyk* in `Pull Request 62 <https://github.com/jeffshurtliff/khoros/pull/62>`_.
* Changed the versions for the Sphinx-related packages in ``requirements.txt`` to be more current.

|

-----

******

Resources

• https://pypi.org/project/khoros
• https://pyup.io/changelogs/khoros/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40897