Medium ELSA-2023-6712 1 CVE

Moderate: python-wheel security update (Oracle Linux 9)

Published Nov 12, 2023 · Updated Nov 12, 2023

Ecosystem: Oracle Linux

Summary

[1:0.36.2-8]
- Security fix for CVE-2022-40898
- Resolves: rhbz#2178881

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	python3-wheel	1:0.36.2-8.el9
Oracle Linux · 9	python3-wheel-wheel	1:0.36.2-8.el9

Vulnerabilities 1

High 7.5

CVE-2022-40898

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

python-pip python-wheel wheel wheel Debian Ubuntu Azure Linux PyPI

Dec 22, 2022