Red Hat Security Advisory

RHSA-2025:7109

python3.11 security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.11-2.el9, python3.11-devel-3.11.11-2.el9, python3.11-libs-3.11.11-2.el9 +1
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3.11-3.11.11-2.el9, python3.11-debug-3.11.11-2.el9, python3.11-idle-3.11.11-2.el9 +2

Fixes 1 record

TI-2025-00794 CVE-2025-0938 · GHSA-5qjr-cj9f-phrx

URL parser allowed square brackets in domain names

LOW 31

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01545 Published 2025-01-31 Partial fix · 3.9.22, 3.10.17 +4 CWE-20