Red Hat Security AdvisoryRHSA-2024:5962
python39:3.9 and python39-devel:3.9 security update
Released 2024-08-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) PyYAML-5.4.1-1.module+el8.9.0+19644+d68f775d.src::python39:3.9, mod_wsgi-4.7.1-7.module+el8.9.0+19644+d68f775d.src::python39:3.9, numpy-1.19.4-3.module+el8.9.0+19644+d68f775d.src::python39:3.9 +47
- Red Hat Enterprise Linux CRB (v. 8) Cython-0.29.21-5.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.9.0+19644+d68f775d.src::python39-devel:3.9 +33
Fixes 4 records
Priority HIGH 73
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01939 · Published 2024-07-15 · Partial fix · 70.0, 70.0.0 CWE-94
Priority MEDIUM 60
There is a MEDIUM severity vulnerability affecting CPython.
CVSS 3.1MEDIUM 5.5· Network · Low privileges · User interaction · EPSS 0.011 · Published 2024-08-01 · Partial fix · 3.8.20, 3.9.20 +4 CWE-94
Priority MEDIUM 46
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path".
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01275 · Published 2024-08-22 · Partial fix · 3.8.20, 3.9.20 +4 CWE-835
Priority MEDIUM 41
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01079 · Published 2024-06-17 · Partial fix · 3.8.20, 3.9.20 +4 CWE-697
THREATIST.IORead the docs