Summary
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* python-pymongo: Out-of-bounds read in bson module (CVE-2024-5629)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 28
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | python-distro | 0:1.4.0-2.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-distro | 0:1.4.0-2.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-docs | 0:3.6.7-2.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-docs | 0:3.6.7-2.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-docutils | 0:0.14-12.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-docutils | 0:0.14-12.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-docutils | 0:0.14-12.module+el8.9.0+1531+a18208f5 |
| Rocky Linux · 8 | python-nose | 0:1.3.7-31.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-nose | 0:1.3.7-31.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-nose | 0:1.3.7-31.module+el8.9.0+1531+a18208f5 |
| Rocky Linux · 8 | python-pygments | 0:2.2.0-22.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-pygments | 0:2.2.0-22.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-pygments | 0:2.2.0-22.module+el8.9.0+1531+a18208f5 |
| Rocky Linux · 8 | python-pymongo | 0:3.7.0-2.module+el8.10.0+1986+6cb2ea52 |
| Rocky Linux · 8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1860+afcc1c71 |
| Rocky Linux · 8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-PyMySQL | 0:0.10.1-2.module+el8.10.0+1582+bc278001 |
| Rocky Linux · 8 | python-sqlalchemy | 0:1.3.2-3.module+el8.10.0+1602+b47e27fa |
| Rocky Linux · 8 | python-sqlalchemy | 0:1.3.2-3.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-virtualenv | 0:15.1.0-23.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-wheel | 1:0.31.1-3.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | python-wheel | 1:0.31.1-3.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python-wheel | 1:0.31.1-3.module+el8.9.0+1531+a18208f5 |
| Rocky Linux · 8 | python36 | 0:3.6.8-39.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | python36 | 0:3.6.8-39.module+el8.10.0+1592+61442852 |
| Rocky Linux · 8 | scipy | 0:1.0.0-21.module+el8.10.0+1910+234ad790 |
| Rocky Linux · 8 | scipy | 0:1.0.0-21.module+el8.10.0+1592+61442852 |
Vulnerabilities 1
-
Medium 4.7
Out-of-bounds read in bson module of PyMongo
An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory.
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2290585