High ELSA-2023-3585 1 CVE

Important: python3.11 security update (Oracle Linux 9)

Published Jun 17, 2023 · Updated Jun 17, 2023

Ecosystem: Oracle Linux

Summary

[3.11.2-2.1]
- Security fix for CVE-2023-24329
Resolves: rhbz#2173917

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 9	python3.11	0:3.11.2-2.el9_2.1
Oracle Linux · 9	python3.11-debug	0:3.11.2-2.el9_2.1
Oracle Linux · 9	python3.11-devel	0:3.11.2-2.el9_2.1
Oracle Linux · 9	python3.11-idle	0:3.11.2-2.el9_2.1
Oracle Linux · 9	python3.11-libs	0:3.11.2-2.el9_2.1
Oracle Linux · 9	python3.11-test	0:3.11.2-2.el9_2.1
Oracle Linux · 9	python3.11-tkinter	0:3.11.2-2.el9_2.1

Vulnerabilities 1

High 7.5

CVE-2023-24329 Public exploit EPSS 20%

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Feb 17, 2023