Red Hat Security AdvisoryRHSA-2024:0430
python3 security update
Released 2024-01-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) platform-python-3.6.8-47.el8_6.4, platform-python-debug-3.6.8-47.el8_6.4, platform-python-devel-3.6.8-47.el8_6.4 +3
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) platform-python-3.6.8-47.el8_6.4, python3-3.6.8-47.el8_6.4, python3-libs-3.6.8-47.el8_6.4 +1
Fixes 6 records
Priority HIGH 82
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a ..
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.27095 · Published 2007-08-28 · Partial fix CWE-22
Priority HIGH 72
An issue was discovered in Python before 3.11.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03327 · Published 2022-11-09 · Partial fix CWE-407
Priority MEDIUM 63
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02527 · Published 2023-04-18 · Partial fix CWE-1286
Priority MEDIUM 40
A flaw was found in python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04538 · Published 2022-09-09 · Partial fix CWE-704
Priority LOW 37
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02042 · Published 2023-08-22 · Partial fix CWE-416
Priority LOW 32
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01651 · Published 2023-08-22 · Partial fix CWE-400
THREATIST.IORead the docs