Summary
[3.11.7-1.3]
- Security fix for CVE-2024-4032
Resolves: RHEL-44097
[3.11.7-1.2]
- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40785
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.11 | 0:3.11.7-1.el9_4.3 |
| Oracle Linux · 9 | python3.11-debug | 0:3.11.7-1.el9_4.3 |
| Oracle Linux · 9 | python3.11-devel | 0:3.11.7-1.el9_4.3 |
| Oracle Linux · 9 | python3.11-idle | 0:3.11.7-1.el9_4.3 |
| Oracle Linux · 9 | python3.11-libs | 0:3.11.7-1.el9_4.3 |
| Oracle Linux · 9 | python3.11-test | 0:3.11.7-1.el9_4.3 |
| Oracle Linux · 9 | python3.11-tkinter | 0:3.11.7-1.el9_4.3 |
Vulnerabilities 1
-
High 7.5
Incorrect IPv4 and IPv6 private ranges
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Networ…