Red Hat Security AdvisoryRHSA-2023:6659
python3.9 security update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3-3.9.18-1.el9_3, python3-debug-3.9.18-1.el9_3, python3-idle-3.9.18-1.el9_3 +2
- Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.18-1.el9_3, python3-devel-3.9.18-1.el9_3, python3-tkinter-3.9.18-1.el9_3
- Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.18-1.el9_3, python3-libs-3.9.18-1.el9_3, python3.9-3.9.18-1.el9_3
Fixes 1 record
Priority HIGH 82
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a ..
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.27095 · Published 2007-08-28 · Partial fix CWE-22
