High ELSA-2024-4077 1 CVE

Important: python3.11 security update (Oracle Linux 9)

Published Jun 25, 2024 · Updated Jun 25, 2024

Ecosystem: Oracle Linux

Summary

[3.11.7-1.1]
- Security fix for CVE-2023-6597
- Fix tests for XMLPullParser with Expat with fixed CVE
Resolves: RHEL-33884

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 9	python3.11	0:3.11.7-1.el9_4.1
Oracle Linux · 9	python3.11-debug	0:3.11.7-1.el9_4.1
Oracle Linux · 9	python3.11-devel	0:3.11.7-1.el9_4.1
Oracle Linux · 9	python3.11-idle	0:3.11.7-1.el9_4.1
Oracle Linux · 9	python3.11-libs	0:3.11.7-1.el9_4.1
Oracle Linux · 9	python3.11-test	0:3.11.7-1.el9_4.1
Oracle Linux · 9	python3.11-tkinter	0:3.11.7-1.el9_4.1

Vulnerabilities 1

High 7.8

CVE-2023-6597

An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7, 3.10.13, 3.9.1…

Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi

Mar 19, 2024