Read the docs
TI-2023-09975 Aliases CVE-2023-24329GHSA-r32r-rqw2-wv5m

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass…

Priority MEDIUM 58CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 38 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.20459 97th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial Red Hat: 26 advisoriesRed Hat: 38 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*before 3.7.17; 3.8.0 to before 3.8.17; 3.9.0 to before 3.9.17; 3.10.0 to before 3.10.12; 3.11.0 to before 3.11.4Vulnerablepython-pillow
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*36VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*37VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:python:python:*:*:*:*:*:*:*:* Versions before 3.7.17; 3.8.0 to before 3.8.17; 3.9.0 to before 3.9.17; 3.10.0 to before 3.10.12; 3.11.0 to before 3.11.4 Vulnerable ·python-pillow
  • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:management_services_for_element_software:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:management_services_for_netapp_hci:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
  • cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

Red Hat 26 advisories

  • RHSA-2023:6793 Released 2023-11-08 · Red Hat rating Important
    rh-python38-python security update
    • Red Hat Software Collections for RHEL Workstation(v. 7) rh-python38-python-3.8.18-2.el7, rh-python38-python-cryptography-2.8-6.el7, rh-python38-python-debug-3.8.18-2.el7 +14
    • Red Hat Software Collections for RHEL(v. 7) rh-python38-python-3.8.18-2.el7, rh-python38-python-cryptography-2.8-6.el7, rh-python38-python-debug-3.8.18-2.el7 +14
  • RHSA-2023:4282 Released 2023-07-26 · Red Hat rating Important
    Red Hat Virtualization Host 4.4.z SP 1 security update
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 redhat-virtualization-host-4.5.3-202307191258_8.6, redhat-virtualization-host-image-update-4.5.3-202307191258_8.6
  • RHSA-2023:4203 Released 2023-07-18 · Red Hat rating Important
    python3.9 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.0) python3-3.9.10-4.el9_0.1, python3-debug-3.9.10-4.el9_0.1, python3-idle-3.9.10-4.el9_0.1 +2
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) python-unversioned-command-3.9.10-4.el9_0.1, python3-devel-3.9.10-4.el9_0.1, python3-tkinter-3.9.10-4.el9_0.1
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) python3-3.9.10-4.el9_0.1, python3-libs-3.9.10-4.el9_0.1, python3.9-3.9.10-4.el9_0.1
Show 23 more Red Hat advisories
  • RHSA-2023:4032 Released 2023-07-12 · Red Hat rating Important
    python38:3.8 and python38-devel:3.8 security update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) pytest-4.6.6-3.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8, python-atomicwrites-1.3.0-8.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8, python-attrs-19.3.0-3.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8 +15
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.4.1-1.module+el8.5.0+10721+14d8e0d5.src::python38:3.8, babel-2.7.0-11.module+el8.5.0+11015+9c1c7c42.src::python38:3.8 +47
  • RHSA-2023:4038 Released 2023-07-12 · Red Hat rating Important
    python38:3.8 and python38-devel:3.8 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) Cython-0.29.14-4.module+el8.2.0+5234+f98739b6.src::python38:3.8, PyYAML-5.1.2-6.module+el8.2.0+5234+f98739b6.src::python38:3.8, babel-2.7.0-10.module+el8.2.0+5234+f98739b6.src::python38:3.8 +47
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) Cython-0.29.14-4.module+el8.2.0+5234+f98739b6.src::python38:3.8, PyYAML-5.1.2-6.module+el8.2.0+5234+f98739b6.src::python38:3.8, babel-2.7.0-10.module+el8.2.0+5234+f98739b6.src::python38:3.8 +47
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) Cython-0.29.14-4.module+el8.2.0+5234+f98739b6.src::python38:3.8, PyYAML-5.1.2-6.module+el8.2.0+5234+f98739b6.src::python38:3.8, babel-2.7.0-10.module+el8.2.0+5234+f98739b6.src::python38:3.8 +47
  • RHSA-2023:4008 Released 2023-07-10 · Red Hat rating Important
    python38:3.8 and python38-devel:3.8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.4.1-1.module+el8.4.0+10706+5c295a3e.src::python38:3.8, babel-2.7.0-10.module+el8.4.0+8888+89bc7e79.src::python38:3.8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.4.1-1.module+el8.4.0+10706+5c295a3e.src::python38:3.8, babel-2.7.0-10.module+el8.4.0+8888+89bc7e79.src::python38:3.8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.4.1-1.module+el8.4.0+10706+5c295a3e.src::python38:3.8, babel-2.7.0-10.module+el8.4.0+8888+89bc7e79.src::python38:3.8 +47
  • RHSA-2023:4004 Released 2023-07-10 · Red Hat rating Important
    python39:3.9 and python39-devel:3.9 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) PyYAML-5.4.1-1.module+el8.4.0+10484+27ce8e03.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-2.module+el8.4.0+15042+dc5a279b.1.src::python39:3.9 +47
  • RHSA-2023:3936 Released 2023-06-29 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) platform-python-3.6.8-15.1.el8_1.1, platform-python-debug-3.6.8-15.1.el8_1.1, platform-python-devel-3.6.8-15.1.el8_1.1 +3
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.1) platform-python-3.6.8-15.1.el8_1.1, python3-3.6.8-15.1.el8_1.1, python3-libs-3.6.8-15.1.el8_1.1 +1
  • RHSA-2023:3935 Released 2023-06-29 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) platform-python-3.6.8-24.el8_2.1, platform-python-debug-3.6.8-24.el8_2.1, platform-python-devel-3.6.8-24.el8_2.1 +3
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) platform-python-3.6.8-24.el8_2.1, platform-python-debug-3.6.8-24.el8_2.1, platform-python-devel-3.6.8-24.el8_2.1 +3
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) platform-python-3.6.8-24.el8_2.1, platform-python-debug-3.6.8-24.el8_2.1, platform-python-devel-3.6.8-24.el8_2.1 +3
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) platform-python-3.6.8-24.el8_2.1, python3-3.6.8-24.el8_2.1, python3-libs-3.6.8-24.el8_2.1 +1
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.2) platform-python-3.6.8-24.el8_2.1, python3-3.6.8-24.el8_2.1, python3-libs-3.6.8-24.el8_2.1 +1
    • Red Hat Enterprise Linux BaseOS TUS (v. 8.2) platform-python-3.6.8-24.el8_2.1, python3-3.6.8-24.el8_2.1, python3-libs-3.6.8-24.el8_2.1 +1
  • RHSA-2023:3934 Released 2023-06-29 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) platform-python-3.6.8-39.el8_4.2, platform-python-debug-3.6.8-39.el8_4.2, platform-python-devel-3.6.8-39.el8_4.2 +3
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) platform-python-3.6.8-39.el8_4.2, platform-python-debug-3.6.8-39.el8_4.2, platform-python-devel-3.6.8-39.el8_4.2 +3
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) platform-python-3.6.8-39.el8_4.2, platform-python-debug-3.6.8-39.el8_4.2, platform-python-devel-3.6.8-39.el8_4.2 +3
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) platform-python-3.6.8-39.el8_4.2, python3-3.6.8-39.el8_4.2, python3-libs-3.6.8-39.el8_4.2 +1
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) platform-python-3.6.8-39.el8_4.2, python3-3.6.8-39.el8_4.2, python3-libs-3.6.8-39.el8_4.2 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) platform-python-3.6.8-39.el8_4.2, python3-3.6.8-39.el8_4.2, python3-libs-3.6.8-39.el8_4.2 +1
  • RHSA-2023:3932 Released 2023-06-29 · Red Hat rating Important
    python27:2.7 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
  • RHSA-2023:3931 Released 2023-06-29 · Red Hat rating Important
    python27:2.7 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
  • RHSA-2023:3811 Released 2023-06-27 · Red Hat rating Important
    python39:3.9 and python39-devel:3.9 security update
    • Red Hat Enterprise Linux AppStream (v. 8) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-5.module+el8.7.0+16654+645aad7f.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
    • Red Hat Enterprise Linux CRB (v. 8) Cython-0.29.21-5.module+el8.4.0+9822+20bf1249.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.6.0+12838+640e6226.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.4.0+9822+20bf1249.src::python39-devel:3.9 +33
  • RHSA-2023:3810 Released 2023-06-27 · Red Hat rating Important
    python27:2.7 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-10.module+el8.5.0+11014+88fc0d0b.noarch::python27:2.7 +47
  • RHSA-2023:3796 Released 2023-06-26 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) platform-python-3.6.8-47.el8_6.1, platform-python-debug-3.6.8-47.el8_6.1, platform-python-devel-3.6.8-47.el8_6.1 +3
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) platform-python-3.6.8-47.el8_6.1, python3-3.6.8-47.el8_6.1, python3-libs-3.6.8-47.el8_6.1 +1
  • RHSA-2023:3781 Released 2023-06-22 · Red Hat rating Important
    python38:3.8 and python38-devel:3.8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.4.1-1.module+el8.5.0+10721+14d8e0d5.src::python38:3.8, babel-2.7.0-11.module+el8.5.0+11015+9c1c7c42.src::python38:3.8 +47
    • Red Hat Enterprise Linux CRB (v. 8) pytest-4.6.6-3.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8, python-atomicwrites-1.3.0-8.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8, python-attrs-19.3.0-3.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8 +15
  • RHSA-2023:3780 Released 2023-06-22 · Red Hat rating Important
    python27:2.7 security update
    • Red Hat Enterprise Linux AppStream (v. 8) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-10.module+el8.5.0+11014+88fc0d0b.noarch::python27:2.7 +47
  • RHSA-2023:3777 Released 2023-06-22 · Red Hat rating Important
    python27:2.7 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch::python27:2.7 +47
  • RHSA-2023:3776 Released 2023-06-22 · Red Hat rating Important
    python39:3.9 and python39-devel:3.9 security update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) Cython-0.29.21-5.module+el8.4.0+9822+20bf1249.src::python39-devel:3.9, pybind11-2.7.1-1.module+el8.6.0+12838+640e6226.src::python39-devel:3.9, pytest-6.0.2-2.module+el8.4.0+9822+20bf1249.src::python39-devel:3.9 +33
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) PyYAML-5.4.1-1.module+el8.5.0+10613+59a13ec4.src::python39:3.9, mod_wsgi-4.7.1-4.module+el8.4.0+9822+20bf1249.src::python39:3.9, numpy-1.19.4-3.module+el8.5.0+12204+54860423.src::python39:3.9 +47
  • RHSA-2023:3594 Released 2023-06-14 · Red Hat rating Important
    python3.11 security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3.11-3.11.2-2.el8_8.1, python3.11-devel-3.11.2-2.el8_8.1, python3.11-libs-3.11.2-2.el8_8.1 +2
    • Red Hat Enterprise Linux CRB (v. 8) python3.11-3.11.2-2.el8_8.1, python3.11-debug-3.11.2-2.el8_8.1, python3.11-idle-3.11.2-2.el8_8.1 +2
  • RHSA-2023:3595 Released 2023-06-14 · Red Hat rating Important
    python3.9 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.16-1.el9_2.1, python3-devel-3.9.16-1.el9_2.1, python3-tkinter-3.9.16-1.el9_2.1
    • Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.16-1.el9_2.1, python3-libs-3.9.16-1.el9_2.1, python3.9-3.9.16-1.el9_2.1
    • Red Hat Enterprise Linux CRB (v. 9) python3-3.9.16-1.el9_2.1, python3-debug-3.9.16-1.el9_2.1, python3-idle-3.9.16-1.el9_2.1 +2
  • RHSA-2023:3591 Released 2023-06-14 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-51.el8_8.1, platform-python-debug-3.6.8-51.el8_8.1, platform-python-devel-3.6.8-51.el8_8.1 +3
    • Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-51.el8_8.1, python3-3.6.8-51.el8_8.1, python3-libs-3.6.8-51.el8_8.1 +1
  • RHSA-2023:3585 Released 2023-06-14 · Red Hat rating Important
    python3.11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3.11-3.11.2-2.el9_2.1, python3.11-devel-3.11.2-2.el9_2.1, python3.11-libs-3.11.2-2.el9_2.1 +1
    • Red Hat Enterprise Linux CRB (v. 9) python3.11-3.11.2-2.el9_2.1, python3.11-debug-3.11.2-2.el9_2.1, python3.11-idle-3.11.2-2.el9_2.1 +2
  • RHSA-2023:3555 Released 2023-06-09 · Red Hat rating Important
    python security update
    • Red Hat Enterprise Linux Client (v. 7) python-2.7.5-93.el7_9, python-libs-2.7.5-93.el7_9
    • Red Hat Enterprise Linux Client Optional (v. 7) python-debug-2.7.5-93.el7_9, python-devel-2.7.5-93.el7_9, python-test-2.7.5-93.el7_9 +2
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-debug-2.7.5-93.el7_9, python-test-2.7.5-93.el7_9, python-tools-2.7.5-93.el7_9 +1
    • Red Hat Enterprise Linux Server (v. 7) python-2.7.5-93.el7_9, python-devel-2.7.5-93.el7_9, python-libs-2.7.5-93.el7_9 +1
    • Red Hat Enterprise Linux Server Optional (v. 7) python-debug-2.7.5-93.el7_9, python-test-2.7.5-93.el7_9, python-tools-2.7.5-93.el7_9 +1
    • Red Hat Enterprise Linux Workstation (v. 7) python-2.7.5-93.el7_9, python-devel-2.7.5-93.el7_9, python-libs-2.7.5-93.el7_9
    • Red Hat Enterprise Linux Workstation Optional (v. 7) python-debug-2.7.5-93.el7_9, python-test-2.7.5-93.el7_9, python-tools-2.7.5-93.el7_9 +1
  • RHSA-2023:3556 Released 2023-06-09 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux Client (v. 7) python3-3.6.8-19.el7_9, python3-libs-3.6.8-19.el7_9
    • Red Hat Enterprise Linux Client Optional (v. 7) python3-3.6.8-19.el7_9, python3-debug-3.6.8-19.el7_9, python3-devel-3.6.8-19.el7_9 +3
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) python3-3.6.8-19.el7_9, python3-debug-3.6.8-19.el7_9, python3-devel-3.6.8-19.el7_9 +3
    • Red Hat Enterprise Linux Server (v. 7) python3-3.6.8-19.el7_9, python3-libs-3.6.8-19.el7_9, python3-libs-3.6.8-19.el7_9.ppc
    • Red Hat Enterprise Linux Server Optional (v. 7) python3-3.6.8-19.el7_9, python3-3.6.8-19.el7_9.ppc, python3-debug-3.6.8-19.el7_9 +9
    • Red Hat Enterprise Linux Workstation (v. 7) python3-3.6.8-19.el7_9, python3-libs-3.6.8-19.el7_9
    • Red Hat Enterprise Linux Workstation Optional (v. 7) python3-3.6.8-19.el7_9, python3-debug-3.6.8-19.el7_9, python3-devel-3.6.8-19.el7_9 +3
  • RHSA-2023:3550 Released 2023-06-08 · Red Hat rating Important
    python security update
    • Red Hat Enterprise Linux Server (v. 6 ELS) python-2.6.6-69.el6_10, python-devel-2.6.6-69.el6_10, python-libs-2.6.6-69.el6_10 +1
    • Red Hat Enterprise Linux Server Optional (v. 6 ELS) python-test-2.6.6-69.el6_10, python-tools-2.6.6-69.el6_10, tkinter-2.6.6-69.el6_10

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2023:3776, RHSA-2023:4032
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2023:4203
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:3591, RHSA-2023:3594, RHSA-2023:3780, RHSA-2023:3781, RHSA-2023:3811
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:3585, RHSA-2023:3595
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2023:3777, RHSA-2023:3935, RHSA-2023:4038
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:3931, RHSA-2023:3934, RHSA-2023:4004, RHSA-2023:4008
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2023:3932, RHSA-2023:3936
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2023:3777, RHSA-2023:3935, RHSA-2023:4038
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:3931, RHSA-2023:3934, RHSA-2023:4004, RHSA-2023:4008
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:3776, RHSA-2023:3796, RHSA-2023:3810, RHSA-2023:4032
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:4203
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2023:3777, RHSA-2023:3935, RHSA-2023:4038
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:3931, RHSA-2023:3934, RHSA-2023:4004, RHSA-2023:4008
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:3591
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:3595
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2023:3935
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2023:3934
Red Hat Enterprise Linux BaseOS E4S (v. 8.1)Fixed RHSA-2023:3936
Red Hat Enterprise Linux BaseOS E4S (v. 8.2)Fixed RHSA-2023:3935
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2023:3934
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2023:3796
Red Hat Enterprise Linux BaseOS EUS (v.9.0)Fixed RHSA-2023:4203
Red Hat Enterprise Linux BaseOS TUS (v. 8.2)Fixed RHSA-2023:3935
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2023:3934
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2023:3594, RHSA-2023:3781, RHSA-2023:3811
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2023:3585, RHSA-2023:3595
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Enterprise Linux Server (v. 6 ELS)Fixed RHSA-2023:3550
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Enterprise Linux Server Optional (v. 6 ELS)Fixed RHSA-2023:3550
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2023:3555, RHSA-2023:3556
Red Hat Software Collections for RHEL Workstation(v. 7)Fixed RHSA-2023:6793
Red Hat Software Collections for RHEL(v. 7)Fixed RHSA-2023:6793
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2023:4282
Not affected: 4 products
  • RHEL 8-based RHEV-H for RHEV 4 (build requirements)
  • Red Hat Enterprise Linux 8
  • Red Hat Software Collections for RHEL Workstation(v. 7)
  • Red Hat Software Collections for RHEL(v. 7)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-24329
  2. 2026-10-03 Alias added: GHSA-r32r-rqw2-wv5m

References

Exploit 1

Patch 1

Advisory 23

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences