Red Hat Security AdvisoryRHSA-2024:2985
python39:3.9 and python39-devel:3.9 security update
Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) PyYAML-5.4.1-1.module+el8.9.0+19644+d68f775d.src::python39:3.9, mod_wsgi-4.7.1-7.module+el8.9.0+19644+d68f775d.src::python39:3.9, numpy-1.19.4-3.module+el8.9.0+19644+d68f775d.src::python39:3.9 +47
- Red Hat Enterprise Linux CRB (v. 8) Cython-0.29.21-5.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9 +33
Fixes 4 records
Priority MEDIUM 63
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02527 · Published 2023-04-18 · Partial fix CWE-1286
Priority MEDIUM 62
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01301 · Published 2023-02-07 · Partial fix · 39.0.1 CWE-754
Priority LOW 38
urllib3 is a user-friendly HTTP client library for Python.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0136 · Published 2023-10-04 · Partial fix · 2.0.6, 1.26.17 CWE-200
Priority LOW 31
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02632 · Published 2022-12-22 · Partial fix · 65.5.1 CWE-1333
THREATIST.IORead the docs