Summary
mod_wsgi
numpy
python39
[3.9.19-1]
- Update to 3.9.19
- Security fixes for CVE-2023-6597 and CVE-2024-0450
- Fix tests for XMLPullParser with Expat with fixed CVE
Resolves: RHEL-33676, RHEL-33688
python3x-pip
python3x-setuptools
python3x-six
python-cffi
python-chardet
python-cryptography
python-idna
[2.10-4]
- Security fix for CVE-2024-3651
Resolves: RHEL-32705
python-lxml
python-ply
python-psutil
python-psycopg2
python-pycparser
python-PyMySQL
python-pysocks
python-requests
python-toml
python-urllib3
python-wheel
PyYAML
scipy
Fixed packages 37
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python39 | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-cffi | 0:1.14.3-2.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-chardet | 0:3.0.4-19.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-cryptography | 0:3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-debug | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-devel | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-idle | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-idna | 0:2.10-4.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-libs | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-lxml | 0:4.6.5-1.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-mod_wsgi | 0:4.7.1-7.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-numpy | 0:1.19.4-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-numpy-doc | 0:1.19.4-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-numpy-f2py | 0:1.19.4-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-pip | 0:20.2.4-9.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-pip-wheel | 0:20.2.4-9.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-ply | 0:3.11-10.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-psutil | 0:5.8.0-4.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-psycopg2 | 0:2.8.6-3.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-psycopg2-doc | 0:2.8.6-3.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-psycopg2-tests | 0:2.8.6-3.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-pycparser | 0:2.20-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-PyMySQL | 0:0.10.1-2.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-pysocks | 0:1.7.1-4.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-pyyaml | 0:5.4.1-1.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-requests | 0:2.25.0-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-rpm-macros | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-scipy | 0:1.5.4-5.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-setuptools | 0:50.3.2-5.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-setuptools-wheel | 0:50.3.2-5.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-six | 0:1.15.0-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-test | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-tkinter | 0:3.9.19-1.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-toml | 0:0.10.1-5.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-urllib3 | 0:1.25.10-5.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-wheel | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-wheel-wheel | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 |
Vulnerabilities 3
-
High 7.8
An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.1…
-
Medium 6.2
Quoted zip-bomb protection for zipfile
An issue was found in the CPython `zipfile` module affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. The zipfile module is vulnerable to “quoted-overlap” zip-bombs which exploit the zip format to create a zip-bomb with a high compressi…
-
Medium 6.2CVE-2024-3651 Public exploit
Denial of Service via Quadratic Complexity in kjd/idna
A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a…