Red Hat Security AdvisoryRHSA-2022:8353
python3.9 security, bug fix, and enhancement update
Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3-3.9.14-1.el9, python3-debug-3.9.14-1.el9, python3-idle-3.9.14-1.el9 +2
- Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.14-1.el9, python3-devel-3.9.14-1.el9, python3-tkinter-3.9.14-1.el9
- Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.14-1.el9, python3-libs-3.9.14-1.el9, python3.9-3.9.14-1.el9
Fixes 2 records
Priority MEDIUM 41
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0278 · Published 2022-04-13 · Partial fix CWE-77
Priority LOW 37
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure.
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.02683 · Published 2022-08-23 · Partial fix CWE-601
