High ELSA-2023-3595 1 CVE

Important: python3.9 security update (Oracle Linux 9)

Published Jun 15, 2023 · Updated Jun 15, 2023

Ecosystem: Oracle Linux

Summary

[3.9.16-1.1]
- Security fix for CVE-2023-24329
Resolves: rhbz#2173917

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 9	python-unversioned-command	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3-debug	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3-devel	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3-idle	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3-libs	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3-test	0:3.9.16-1.el9_2.1
Oracle Linux · 9	python3-tkinter	0:3.9.16-1.el9_2.1

Vulnerabilities 1

High 7.5

CVE-2023-24329 Public exploit EPSS 20%

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Feb 17, 2023