Python: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und Umgehung von Sicherheitsmaßnahmen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2024-4032

  Incorrect IPv4 and IPv6 private ranges

  The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Networ…

  Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi
  Jun 17, 2024
• High 7.4
  CVE-2024-0397

  Memory race condition in ssl.SSLContext certificate store methods

  A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates…

  Python Software Foundation CPython python3.4 python2.7 Debian Ubuntu Azure Linux
  Jun 17, 2024

Revision history

1. 2026-07-09 #55

   Neue Updates von IBM aufgenommen

2. 2026-02-15 #54

   Neue Updates von SUSE aufgenommen

3. 2025-11-09 #53

   Neue Updates von openSUSE aufgenommen

4. 2025-10-01 #52

   Neue Updates von IBM aufgenommen

5. 2025-06-24 #51

   Neue Updates von SUSE aufgenommen

6. 2025-06-04 #50

   Neue Updates von SUSE aufgenommen

7. 2025-06-03 #49

   Neue Updates von SUSE aufgenommen

8. 2025-04-13 #48

   Neue Updates von NetApp aufgenommen

9. 2025-04-07 #47

   Neue Updates von F5 aufgenommen

10. 2025-03-30 #46

    Neue Updates von IBM aufgenommen

11. 2025-03-25 #45

    Neue Updates von Amazon aufgenommen

12. 2025-03-24 #44

    Neue Updates von Ubuntu aufgenommen

13. 2025-03-12 #43

    Neue Updates von Ubuntu aufgenommen

14. 2025-02-26 #42

    Neue Updates von IBM aufgenommen

15. 2025-02-25 #41

    Neue Updates von Amazon aufgenommen

16. 2025-01-12 #40

    Neue Updates von XEROX aufgenommen

17. 2024-12-09 #39

    Neue Updates von Red Hat aufgenommen

18. 2024-12-01 #38

    Neue Updates von Debian aufgenommen

19. 2024-11-18 #37

    Neue Updates von SUSE und Oracle Linux aufgenommen

20. 2024-11-13 #36

    Neue Updates von Amazon aufgenommen

21. 2024-11-11 #35

    Neue Updates von Red Hat aufgenommen

22. 2024-10-31 #34

    Neue Updates von IBM aufgenommen

23. 2024-10-23 #33

    Neue Updates von Red Hat aufgenommen

24. 2024-10-09 #32

    Neue Updates von Dell aufgenommen

25. 2024-10-07 #31

    Neue Updates von Red Hat aufgenommen

References

• Python Mailman vom 2024-06-17
  https://mail.python.org/archives/list/security-announce@python.org/thread/NRUHDUS2IV2USIZM2CVMSFL6SCKU3RZA/
• Python Mailman vom 2024-06-17
  https://mail.python.org/archives/list/security-announce@python.org/thread/BMAK5BCGKYWNJOACVUSLUF6SFGBIM4VP/
• Fedora Security Advisory FEDORA-2024-486CB71423 vom 2024-06-20
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-486cb71423
• Fedora Security Advisory FEDORA-2024-B3D904CADE vom 2024-06-20
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-b3d904cade
• SUSE Security Update SUSE-SU-2024:2249-1 vom 2024-07-01
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018832.html
• SUSE Security Update SUSE-SU-2024:2254-1 vom 2024-07-02
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018836.html
• SUSE Security Update SUSE-SU-2024:2274-1 vom 2024-07-02
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018852.html
• SUSE Security Update SUSE-SU-2024:2280-1 vom 2024-07-02
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018854.html
• Fedora Security Advisory FEDORA-2024-1ECAB28E50 vom 2024-07-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1ecab28e50
• Fedora Security Advisory FEDORA-2024-FEFC75BCE4 vom 2024-07-03
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-fefc75bce4
• Fedora Security Advisory FEDORA-2024-8761735EE2 vom 2024-07-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-8761735ee2
• Fedora Security Advisory FEDORA-2024-732AEDEB4D vom 2024-07-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-732aedeb4d
• Fedora Security Advisory FEDORA-2024-7BBA7E65D3 vom 2024-07-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7bba7e65d3
• SUSE Security Update SUSE-SU-2024:2414-1 vom 2024-07-12
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018940.html
• SUSE Security Update SUSE-SU-2024:2479-1 vom 2024-07-15
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018974.html
• SUSE Security Update SUSE-SU-2024:2479-1 vom 2024-07-15
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/018975.html
• SUSE Security Update SUSE-SU-2024:2572-1 vom 2024-07-22
  https://lists.suse.com/pipermail/sle-security-updates/2024-July/019018.html
• Red Hat Security Advisory RHSA-2024:4766 vom 2024-07-24
  https://access.redhat.com/errata/RHSA-2024:4766
• Oracle Linux Security Advisory ELSA-2024-4779 vom 2024-07-24
  https://linux.oracle.com/errata/ELSA-2024-4779.html
• Red Hat Security Advisory RHSA-2024:4779 vom 2024-07-24
  https://access.redhat.com/errata/RHSA-2024:4779
• Oracle Linux Security Advisory ELSA-2024-4766 vom 2024-07-24
  https://linux.oracle.com/errata/ELSA-2024-4766.html
• Ubuntu Security Notice USN-6928-1 vom 2024-07-30
  https://ubuntu.com/security/notices/USN-6928-1
• Ubuntu Security Notice USN-6941-1 vom 2024-08-01
  https://ubuntu.com/security/notices/USN-6941-1
• Dell Security Advisory DSA-2024-348 vom 2024-08-06
  https://www.dell.com/support/kbdoc/de-de/000227573/dsa-2024-348-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities
• Fedora Security Advisory FEDORA-2024-D434721EF8 vom 2024-08-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d434721ef8
• Fedora Security Advisory FEDORA-2024-D1D07E01E8 vom 2024-08-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d1d07e01e8
• Fedora Security Advisory FEDORA-2024-26FF70F1EC vom 2024-08-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-26ff70f1ec
• Fedora Security Advisory FEDORA-2024-B7DE0FAA8B vom 2024-08-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-b7de0faa8b
• Fedora Security Advisory FEDORA-2024-A4C978FA1C vom 2024-08-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-a4c978fa1c
• Fedora Security Advisory FEDORA-2024-F247F05E2E vom 2024-08-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f247f05e2e
• Fedora Security Advisory FEDORA-2024-D3D904CB56 vom 2024-08-16
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-d3d904cb56
• SUSE Security Update SUSE-SU-2024:2959-1 vom 2024-08-19
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019223.html
• SUSE Security Update SUSE-SU-2024:2982-1 vom 2024-08-20
  https://lists.suse.com/pipermail/sle-security-updates/2024-August/019287.html
• Fedora Security Advisory FEDORA-2024-926631FE97 vom 2024-08-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-926631fe97
• Fedora Security Advisory FEDORA-2024-F3851065C0 vom 2024-08-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f3851065c0
• Debian Security Advisory DSA-5759 vom 2024-08-27
  https://lists.debian.org/debian-security-announce/2024/msg00172.html
• Fedora Security Advisory FEDORA-2024-3D656DAFE1 vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-3d656dafe1
• Fedora Security Advisory FEDORA-2024-7008B2FEDF vom 2024-08-28
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7008b2fedf
• Red Hat Security Advisory RHSA-2024:5962 vom 2024-08-29
  https://access.redhat.com/errata/RHSA-2024:5962
• Red Hat Security Advisory RHSA-2024:6030 vom 2024-08-29
  https://access.redhat.com/errata/RHSA-2024:6030
• Oracle Linux Security Advisory ELSA-2024-5962 vom 2024-08-30
  https://linux.oracle.com/errata/ELSA-2024-5962.html
• Fedora Security Advisory FEDORA-2024-2B163F9201 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-2b163f9201
• Fedora Security Advisory FEDORA-2024-39D459DD00 vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-39d459dd00
• Fedora Security Advisory FEDORA-2024-F750328C3B vom 2024-09-10
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f750328c3b
• Fedora Security Advisory FEDORA-2024-308628EBB8 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-308628ebb8
• Fedora Security Advisory FEDORA-2024-1E6D6F8452 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-1e6d6f8452
• Fedora Security Advisory FEDORA-2024-7A069F48E4 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7a069f48e4
• Fedora Security Advisory FEDORA-2024-6DEDBC5CF9 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6dedbc5cf9
• Fedora Security Advisory FEDORA-2024-F652468298 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f652468298
• Fedora Security Advisory FEDORA-2024-AE2925C3AE vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-ae2925c3ae
• Fedora Security Advisory FEDORA-2024-7DB9258D37 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-7db9258d37
• Fedora Security Advisory FEDORA-2024-F7F36C20A2 vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f7f36c20a2
• Fedora Security Advisory FEDORA-2024-37D9C902DD vom 2024-09-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-37d9c902dd
• IBM Security Bulletin 7168787 vom 2024-09-18
  https://www.ibm.com/support/pages/node/7168787
• Red Hat Security Advisory RHSA-2024:6975 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6975
• Red Hat Security Advisory RHSA-2024:6961 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6961
• Red Hat Security Advisory RHSA-2024:6962 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:6962
• Oracle Linux Security Advisory ELSA-2024-6975 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6975.html
• Oracle Linux Security Advisory ELSA-2024-6961 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6961.html
• Oracle Linux Security Advisory ELSA-2024-6962 vom 2024-09-25
  https://linux.oracle.com/errata/ELSA-2024-6962.html
• Rocky Linux Security Advisory RLSA-2024:6962 vom 2024-09-30
  https://errata.build.resf.org/RLSA-2024:6962
• Red Hat Security Advisory RHSA-2024:7417 vom 2024-10-01
  https://access.redhat.com/errata/RHSA-2024:7417
• Red Hat Security Advisory RHSA-2024:7443 vom 2024-10-01
  https://access.redhat.com/errata/RHSA-2024:7443
• Red Hat Security Advisory RHSA-2024:7726 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7726
• Red Hat Security Advisory RHSA-2024:7724 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7724
• Red Hat Security Advisory RHSA-2024:7323 vom 2024-10-07
  https://access.redhat.com/errata/RHSA-2024:7323
• Dell Security Advisory DSA-2024-422 vom 2024-10-10
  https://www.dell.com/support/kbdoc/de-de/000234730/dsa-2024-422-security-update-for-dell-networker-vproxy-multiple-component-vulnerabilities
• Red Hat Security Advisory RHSA-2024:8318 vom 2024-10-23
  https://access.redhat.com/errata/RHSA-2024:8318
• IBM Security Bulletin
  https://www.ibm.com/support/pages/node/7174634
• Red Hat Security Advisory RHSA-2024:9190 vom 2024-11-12
  https://access.redhat.com/errata/RHSA-2024:9190
• Amazon Linux Security Advisory ALASPYTHON3.8-2024-016 vom 2024-11-13
  https://alas.aws.amazon.com/AL2/ALASPYTHON3.8-2024-016.html
• SUSE Security Update SUSE-SU-2024:4021-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019830.html
• SUSE Security Update SUSE-SU-2024:4020-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019831.html
• SUSE Security Update SUSE-SU-202410:15282-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019829.html
• SUSE Security Update SUSE-SU-202410:15283-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019828.html
• Oracle Linux Security Advisory ELSA-2024-9190 vom 2024-11-19
  https://linux.oracle.com/errata/ELSA-2024-9190.html
• SUSE Security Update SUSE-SU-2024:4025-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019827.html
• SUSE Security Update SUSE-SU-2024:4026-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019826.html
• SUSE Security Update SUSE-SU-2024:4029-1 vom 2024-11-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019825.html
• Debian Security Advisory DLA-3980 vom 2024-12-02
  https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html