Red Hat Security Advisory

RHSA-2022:8493

python3.9 security update

Released 2022-11-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) python3-3.9.14-1.el9_1.1, python3-debug-3.9.14-1.el9_1.1, python3-idle-3.9.14-1.el9_1.1 +2
Red Hat CodeReady Linux Builder EUS (v.9.0) python3-3.9.10-4.el9_0, python3-debug-3.9.10-4.el9_0, python3-idle-3.9.10-4.el9_0 +2
Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.14-1.el9_1.1, python3-devel-3.9.14-1.el9_1.1, python3-tkinter-3.9.14-1.el9_1.1
Red Hat Enterprise Linux AppStream EUS (v.9.0) python-unversioned-command-3.9.10-4.el9_0, python3-devel-3.9.10-4.el9_0, python3-tkinter-3.9.10-4.el9_0
Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.14-1.el9_1.1, python3-libs-3.9.14-1.el9_1.1, python3.9-3.9.14-1.el9_1.1
Red Hat Enterprise Linux BaseOS EUS (v.9.0) python3-3.9.10-4.el9_0, python3-libs-3.9.10-4.el9_0, python3.9-3.9.10-4.el9_0

TI-2022-20908 CVE-2022-42919 · GHSA-hrxf-3584-q6p6

LOW 37

Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00802 Published 2022-11-06 Fixed CWE-502