Summary
Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.
Security Fix(es):
* python: urllib.parse url blocklisting bypass (CVE-2023-24329)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | python3.11 | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-debug | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-devel | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-idle | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-libs | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-rpm-macros | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-test | 3.11.2-2.el8_8.1 |
| AlmaLinux · 8 | python3.11-tkinter | 3.11.2-2.el8_8.1 |
Vulnerabilities 1
-
High 7.5
An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…