TI-2022-24106 CVE-2022-48560 · GHSA-pvw5-cvp6-cv92
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
Priority LOW 37
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
RHSA-2024:0114
python3 security update
Released 2024-01-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-56.el8_9.2, platform-python-debug-3.6.8-56.el8_9.2, platform-python-devel-3.6.8-56.el8_9.2 +3
- Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-56.el8_9.2, python3-3.6.8-56.el8_9.2, python3-libs-3.6.8-56.el8_9.2 +1
Fixes 2 records
TI-2022-24107 CVE-2022-48564 · GHSA-p8vw-m6qq-w42v
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack…
Priority LOW 32
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.