High RHSA-2023:3550 1 CVE

Red Hat Security Advisory: python security update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 7

Release	Package	Fixed in
Red Hat · RHEL 6 ELS rhel_els:6	python	0:2.6.6-69.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	python-debuginfo	0:2.6.6-69.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	python-devel	0:2.6.6-69.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	python-libs	0:2.6.6-69.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	python-test	0:2.6.6-69.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	python-tools	0:2.6.6-69.el6_10
Red Hat · RHEL 6 ELS rhel_els:6	tkinter	0:2.6.6-69.el6_10

Vulnerabilities 1

High 7.5

CVE-2023-24329 Public exploit EPSS 20%

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Feb 17, 2023

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2173917
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3550.json
report
https://access.redhat.com/security/cve/CVE-2023-24329
advisory
https://www.cve.org/CVERecord?id=CVE-2023-24329
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-24329
article
https://pointernull.com/security/python-url-parse-problem.html