TI-2024-00411 CVE-2024-0450 · GHSA-jm46-725r-hh9v
Quoted zip-bomb protection for zipfile
Priority MEDIUM 61
An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior.
RHSA-2024:9192
python3.11 security update
Released 2024-11-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) python3.11-3.11.9-7.el9, python3.11-debug-3.11.9-7.el9, python3.11-idle-3.11.9-7.el9 +2
- Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.9-7.el9, python3.11-devel-3.11.9-7.el9, python3.11-libs-3.11.9-7.el9 +1
Fixes 3 records
TI-2024-07500 CVE-2024-8088 · GHSA-q98g-hxg3-268c
Infinite loop when iterating over zip archive entry names from zipfile.Path
Priority MEDIUM 46
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path".
TI-2024-00360 CVE-2024-0397 · GHSA-xhf3-pp4q-gxh5
Memory race condition in ssl.SSLContext certificate store methods
Priority LOW 36
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”.