Red Hat Security Advisory

RHSA-2024:6961

python3.12 security update

Released 2024-09-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python3.12-3.12.5-2.el8_10, python3.12-devel-3.12.5-2.el8_10, python3.12-libs-3.12.5-2.el8_10 +2
Red Hat Enterprise Linux CRB (v. 8) python3.12-3.12.5-2.el8_10, python3.12-debug-3.12.5-2.el8_10, python3.12-idle-3.12.5-2.el8_10 +2

Fixes 3 records

TI-2024-06422 CVE-2024-6923 · GHSA-87qc-q3w7-7m8w

Email header injection due to unquoted newlines

MEDIUM 60

There is a MEDIUM severity vulnerability affecting CPython.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.011 Published 2024-08-01 Partial fix · 3.8.20, 3.9.20 +4 CWE-94

TI-2024-07500 CVE-2024-8088 · GHSA-q98g-hxg3-268c

Infinite loop when iterating over zip archive entry names from zipfile.Path

MEDIUM 46

There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path".

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01275 Published 2024-08-22 Partial fix · 3.8.20, 3.9.20 +4 CWE-835

TI-2024-03761 CVE-2024-4032 · GHSA-mh6q-v4mp-2cc7

Incorrect IPv4 and IPv6 private ranges

MEDIUM 41

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01079 Published 2024-06-17 Partial fix · 3.8.20, 3.9.20 +4 CWE-697