Medium ELSA-2024-9423 1 CVE

Moderate: python-dns security update (Oracle Linux 9)

Published Nov 14, 2024 · Updated Nov 14, 2024

Ecosystem: Oracle Linux

Summary

[2.6.1-3]
- Ensure dns.rdtypes subpackages are available
Related: RHEL-32663

[2.6.1-2]
- Add missing files due to build change from hatchling to setuptools
Related: RHEL-32663

[2.6.1-1]
- Rebase to 2.6.1
Resolves: RHEL-32628, RHEL-32663

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	python3-dns	0:2.6.1-3.el9

Vulnerabilities 1

High 7.0

CVE-2023-29483

Potential DoS via the Tudoor mechanism in eventlet and dnspython

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does n…

kubeflow-pipelines-visualization-server dnspython dnspython eventlet Debian Ubuntu Wolfi PyPI

Apr 11, 2024