Skip to content
OpenAdvisories
High RLSA-2024:3466 0 CVEs

Important: python39:3.9 and python39-devel:3.9 security update

Published Jun 14, 2024 · Updated Feb 4, 2026

Summary

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

* python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)

* python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 34

ReleasePackageFixed in
Rocky Linux · 8 Cython 0:0.29.21-5.module+el8.10.0+1582+bc278001
Rocky Linux · 8 mod_wsgi 0:4.7.1-7.module+el8.10.0+1582+bc278001
Rocky Linux · 8 numpy 0:1.19.4-3.module+el8.10.0+1582+bc278001
Rocky Linux · 8 pybind11 0:2.7.1-1.module+el8.9.0+1357+a3b80af7
Rocky Linux · 8 pytest 0:6.0.2-2.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-attrs 0:20.3.0-2.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-cffi 0:1.14.3-2.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-chardet 0:3.0.4-19.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-cryptography 0:3.3.1-3.module+el8.10.0+1697+7e517775
Rocky Linux · 8 python-idna 0:2.10-4.module+el8.10.0+1809+41195054
Rocky Linux · 8 python-iniconfig 0:1.1.1-2.module+el8.9.0+1332+dd574197
Rocky Linux · 8 python-lxml 0:4.6.5-1.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-more-itertools 0:8.5.0-2.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-packaging 0:20.4-4.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-pluggy 0:0.13.1-3.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-ply 0:3.11-10.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-psutil 0:5.8.0-4.module+el8.9.0+1357+a3b80af7
Rocky Linux · 8 python-psycopg2 0:2.8.6-3.module+el8.10.0+1660+b5b6f004
Rocky Linux · 8 python-py 0:1.10.0-1.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-pycparser 0:2.20-3.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-PyMySQL 0:0.10.1-2.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-pysocks 0:1.7.1-4.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-requests 0:2.25.0-3.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-toml 0:0.10.1-5.module+el8.9.0+1332+dd574197
Rocky Linux · 8 python-urllib3 0:1.25.10-5.module+el8.10.0+1545+03246da9
Rocky Linux · 8 python-wcwidth 0:0.2.5-3.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python-wheel 1:0.35.1-4.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python39 0:3.9.19-1.module+el8.10.0+1809+41195054
Rocky Linux · 8 python3x-pip 0:20.2.4-9.module+el8.10.0+1721+e52d6351
Rocky Linux · 8 python3x-pyparsing 0:2.4.7-5.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python3x-setuptools 0:50.3.2-5.module+el8.10.0+1582+bc278001
Rocky Linux · 8 python3x-six 0:1.15.0-3.module+el8.10.0+1582+bc278001
Rocky Linux · 8 PyYAML 0:5.4.1-1.module+el8.10.0+1582+bc278001
Rocky Linux · 8 scipy 0:1.5.4-5.module+el8.10.0+1582+bc278001

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2274779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276518
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2276525