Medium RLSA-2024:3846 1 CVE

Moderate: python-idna security update

Published Jun 14, 2024 · Updated Oct 9, 2025

Ecosystem: Rocky Linux

Summary

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd).

Security Fix(es):

* python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

Fixed packages 1

Release	Package	Fixed in
Rocky Linux · 9	python-idna	0:2.10-7.el9_4.1

Vulnerabilities 1

Medium 6.2

CVE-2024-3651 Public exploit

Denial of Service via Quadratic Complexity in kjd/idna

A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6. The issue arises from the function's handling of crafted input strings, which can lead to quadratic complexity and consequently, a…

kjd kjd/idna katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jul 7, 2024

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2274779