Medium ELSA-2024-4260 1 CVE

Moderate: python-idna security update (Oracle Linux 8)

Published Jul 3, 2024 · Updated Jul 3, 2024

Ecosystem: Oracle Linux

Summary

[2.5-7]
- Fix patch application for security fix for CVE-2024-3651
Resolves: RHEL-32703

[2.5-6]
- Security fix for CVE-2024-3651
Resolves: RHEL-32703

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	python3-idna	0:2.5-7.el8_10

Vulnerabilities 1

Medium 6.2

CVE-2024-3651 Public exploit

Denial of Service via Quadratic Complexity in kjd/idna

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a…

kjd kjd/idna katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jul 7, 2024