TI-2024-00411 CVE-2024-0450 · GHSA-jm46-725r-hh9v
Quoted zip-bomb protection for zipfile
Priority MEDIUM 61
An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.
RHSA-2024:9190
python3.12 security update
Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3.12-3.12.5-2.el9, python3.12-debug-3.12.5-2.el9, python3.12-idle-3.12.5-2.el9 +2
- Red Hat Enterprise Linux AppStream (v. 9) python3.12-3.12.5-2.el9, python3.12-devel-3.12.5-2.el9, python3.12-libs-3.12.5-2.el9 +1
Fixes 4 records
TI-2024-07500 CVE-2024-8088 · GHSA-q98g-hxg3-268c
Infinite loop when iterating over zip archive entry names from zipfile.Path
Priority MEDIUM 46
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path".
TI-2024-03761 CVE-2024-4032 · GHSA-mh6q-v4mp-2cc7
Incorrect IPv4 and IPv6 private ranges
Priority MEDIUM 41
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”.
TI-2024-00360 CVE-2024-0397 · GHSA-xhf3-pp4q-gxh5
Memory race condition in ssl.SSLContext certificate store methods
Priority LOW 36
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”.