Red Hat Security AdvisoryRHSA-2024:4421
python39:3.9 and python39-devel:3.9 security update
Released 2024-07-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.8.8) Cython-0.29.21-5.module+el8.4.0+9822+20bf1249.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.6.0+12838+640e6226.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.4.0+9822+20bf1249.src::python39-devel:3.9 +33
- Red Hat Enterprise Linux AppStream EUS (v.8.8) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-5.module+el8.7.0+16654+645aad7f.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
Fixes 1 record
Priority LOW 31
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02632 · Published 2022-12-22 · Partial fix · 65.5.1 CWE-1333