Red Hat Security AdvisoryRHSA-2024:0586
python3 security update
Released 2024-01-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.8) platform-python-3.6.8-51.el8_8.4, platform-python-debug-3.6.8-51.el8_8.4, platform-python-devel-3.6.8-51.el8_8.4 +3
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) platform-python-3.6.8-51.el8_8.4, python3-3.6.8-51.el8_8.4, python3-libs-3.6.8-51.el8_8.4 +1
Fixes 3 records
Priority MEDIUM 63
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02527 · Published 2023-04-18 · Partial fix CWE-1286
Priority LOW 37
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02042 · Published 2023-08-22 · Partial fix CWE-416
Priority LOW 32
read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01651 · Published 2023-08-22 · Partial fix CWE-400
