{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for python3.12 is now available for Red Hat Enterprise Linux 10.", "title": "Topic" }, { "category": "general", "text": "For detailed information on changes in this release, see the Red Hat Enterprise Linux 10 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHBA-2025:6294", "url": "https://access.redhat.com/errata/RHBA-2025:6294" }, { "category": "external", "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.0_release_notes/index", "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.0_release_notes/index" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_6294.json" } ], "title": "Red Hat Bug Fix Advisory: python3.12 bug fix and enhancement update", "tracking": { "current_release_date": "2026-08-18T13:42:44+00:00", "generator": { "date": "2026-08-18T13:42:44+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.16" } }, "id": "RHBA-2025:6294", "initial_release_date": "2025-05-13T08:08:03+00:00", "revision_history": [ { "date": "2025-05-13T08:08:03+00:00", "number": "1", "summary": "Initial version" }, { "date": "2025-05-13T08:08:03+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-08-18T13:42:44+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 10)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 10)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product": { "name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10.0" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "python3-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-0:3.12.9-1.el10.aarch64", "product_id": "python3-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3-libs-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-libs-0:3.12.9-1.el10.aarch64", "product_id": "python3-libs-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libs@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3.12-debugsource-0:3.12.9-1.el10.aarch64", "product": { "name": "python3.12-debugsource-0:3.12.9-1.el10.aarch64", "product_id": "python3.12-debugsource-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debugsource@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "product": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "product_id": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debuginfo@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3-debug-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-debug-0:3.12.9-1.el10.aarch64", "product_id": "python3-debug-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-debug@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3-idle-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-idle-0:3.12.9-1.el10.aarch64", "product_id": "python3-idle-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-idle@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3-test-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-test-0:3.12.9-1.el10.aarch64", "product_id": "python3-test-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-test@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3-devel-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-devel-0:3.12.9-1.el10.aarch64", "product_id": "python3-devel-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-devel@3.12.9-1.el10?arch=aarch64" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.12.9-1.el10.aarch64", "product": { "name": "python3-tkinter-0:3.12.9-1.el10.aarch64", "product_id": "python3-tkinter-0:3.12.9-1.el10.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-tkinter@3.12.9-1.el10?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "python3-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-0:3.12.9-1.el10.ppc64le", "product_id": "python3-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-libs-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-libs-0:3.12.9-1.el10.ppc64le", "product_id": "python3-libs-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libs@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "product_id": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debugsource@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "product_id": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debuginfo@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-debug-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-debug-0:3.12.9-1.el10.ppc64le", "product_id": "python3-debug-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-debug@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-idle-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-idle-0:3.12.9-1.el10.ppc64le", "product_id": "python3-idle-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-idle@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-test-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-test-0:3.12.9-1.el10.ppc64le", "product_id": "python3-test-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-test@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-devel-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-devel-0:3.12.9-1.el10.ppc64le", "product_id": "python3-devel-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-devel@3.12.9-1.el10?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.12.9-1.el10.ppc64le", "product": { "name": "python3-tkinter-0:3.12.9-1.el10.ppc64le", "product_id": "python3-tkinter-0:3.12.9-1.el10.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-tkinter@3.12.9-1.el10?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python3-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-0:3.12.9-1.el10.x86_64", "product_id": "python3-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3-libs-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-libs-0:3.12.9-1.el10.x86_64", "product_id": "python3-libs-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libs@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3.12-debugsource-0:3.12.9-1.el10.x86_64", "product": { "name": "python3.12-debugsource-0:3.12.9-1.el10.x86_64", "product_id": "python3.12-debugsource-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debugsource@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "product": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "product_id": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debuginfo@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3-debug-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-debug-0:3.12.9-1.el10.x86_64", "product_id": "python3-debug-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-debug@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3-idle-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-idle-0:3.12.9-1.el10.x86_64", "product_id": "python3-idle-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-idle@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3-test-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-test-0:3.12.9-1.el10.x86_64", "product_id": "python3-test-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-test@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3-devel-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-devel-0:3.12.9-1.el10.x86_64", "product_id": "python3-devel-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-devel@3.12.9-1.el10?arch=x86_64" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.12.9-1.el10.x86_64", "product": { "name": "python3-tkinter-0:3.12.9-1.el10.x86_64", "product_id": "python3-tkinter-0:3.12.9-1.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-tkinter@3.12.9-1.el10?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-0:3.12.9-1.el10.s390x", "product": { "name": "python3-0:3.12.9-1.el10.s390x", "product_id": "python3-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3-libs-0:3.12.9-1.el10.s390x", "product": { "name": "python3-libs-0:3.12.9-1.el10.s390x", "product_id": "python3-libs-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-libs@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3.12-debugsource-0:3.12.9-1.el10.s390x", "product": { "name": "python3.12-debugsource-0:3.12.9-1.el10.s390x", "product_id": "python3.12-debugsource-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debugsource@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3.12-debuginfo-0:3.12.9-1.el10.s390x", "product": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.s390x", "product_id": "python3.12-debuginfo-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-debuginfo@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3-debug-0:3.12.9-1.el10.s390x", "product": { "name": "python3-debug-0:3.12.9-1.el10.s390x", "product_id": "python3-debug-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-debug@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3-idle-0:3.12.9-1.el10.s390x", "product": { "name": "python3-idle-0:3.12.9-1.el10.s390x", "product_id": "python3-idle-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-idle@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3-test-0:3.12.9-1.el10.s390x", "product": { "name": "python3-test-0:3.12.9-1.el10.s390x", "product_id": "python3-test-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-test@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3-devel-0:3.12.9-1.el10.s390x", "product": { "name": "python3-devel-0:3.12.9-1.el10.s390x", "product_id": "python3-devel-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-devel@3.12.9-1.el10?arch=s390x" } } }, { "category": "product_version", "name": "python3-tkinter-0:3.12.9-1.el10.s390x", "product": { "name": "python3-tkinter-0:3.12.9-1.el10.s390x", "product_id": "python3-tkinter-0:3.12.9-1.el10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-tkinter@3.12.9-1.el10?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "python3.12-0:3.12.9-1.el10.src", "product": { "name": "python3.12-0:3.12.9-1.el10.src", "product_id": "python3.12-0:3.12.9-1.el10.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12@3.12.9-1.el10?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python-unversioned-command-0:3.12.9-1.el10.noarch", "product": { "name": "python-unversioned-command-0:3.12.9-1.el10.noarch", "product_id": "python-unversioned-command-0:3.12.9-1.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-unversioned-command@3.12.9-1.el10?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python-unversioned-command-0:3.12.9-1.el10.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch" }, "product_reference": "python-unversioned-command-0:3.12.9-1.el10.noarch", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-devel-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-devel-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-devel-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-devel-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-devel-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-tkinter-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-tkinter-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-tkinter-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-tkinter-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-tkinter-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)", "product_id": "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "AppStream-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-libs-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-libs-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-libs-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-libs-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-libs-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-0:3.12.9-1.el10.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src" }, "product_reference": "python3.12-0:3.12.9-1.el10.src", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)", "product_id": "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "BaseOS-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-debug-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-debug-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-debug-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-debug-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-debug-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-idle-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-idle-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-idle-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-idle-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-idle-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3-test-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3-test-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x" }, "product_reference": "python3-test-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-test-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3-test-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.aarch64", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.s390x", "relates_to_product_reference": "CRB-10.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-debugsource-0:3.12.9-1.el10.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)", "product_id": "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" }, "product_reference": "python3.12-debugsource-0:3.12.9-1.el10.x86_64", "relates_to_product_reference": "CRB-10.0.GA" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-6232", "cwe": { "id": "CWE-1333", "name": "Inefficient Regular Expression Complexity" }, "discovery_date": "2024-09-03T13:20:06.850070+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2309426" } ], "notes": [ { "category": "description", "text": "A regular expression denial of service (ReDos) vulnerability was found in Python's tarfile module. Due to excessive backtracking while tarfile parses headers, an attacker may be able to trigger a denial of service via a specially crafted tar archive.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: cpython: tarfile: ReDos via excessive backtracking while parsing header values", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability is classified as moderate severity rather than important because while it does allow for a denial of service (DoS) attack via excessive backtracking in the tarfile module, it does not enable remote code execution or compromise the integrity or confidentiality of data. Exploitation requires an attacker to provide a specially crafted tar archive and relies on the victim's system processing that file, which limits the attack vector.\n\nVersions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 are marked as 'Not affected' as they just provide \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-6232" }, { "category": "external", "summary": "RHBZ#2309426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2309426" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-6232", "url": "https://www.cve.org/CVERecord?id=CVE-2024-6232" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-6232", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6232" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/121285", "url": "https://github.com/python/cpython/issues/121285" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/121286", "url": "https://github.com/python/cpython/pull/121286" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/JRYFTPRHZRTLMZLWQEUHZSJXNHM4ACTY/" } ], "release_date": "2024-09-03T13:15:05.363000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-05-13T08:08:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:6294" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: cpython: tarfile: ReDos via excessive backtracking while parsing header values" }, { "cve": "CVE-2024-9287", "cwe": { "id": "CWE-428", "name": "Unquoted Search Path or Element" }, "discovery_date": "2024-10-24T10:14:11.787329+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2321440" } ], "notes": [ { "category": "description", "text": "A vulnerability has been found in the Python `venv` module and CLI. Path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment \"activation\" scripts, for example, \"source venv/bin/activate\". This flaw allows attacker-controlled virtual environments to run commands when the virtual environment is activated.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Virtual environment (venv) activation scripts don't quote paths", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability in the Python `venv` module is rated as moderate rather than important because it relies on a specific set of conditions to be exploitable, limiting its impact. An attacker would need to have control over the virtual environment creation process and access to the environment setup, which is less common in typical usage scenarios. Furthermore, the vulnerability only poses a risk if users activate the malicious virtual environment through `source venv/bin/activate` or similar scripts, as direct invocation of the virtual environment without activation (`./venv/bin/python`) is not affected.\n\nVersions of python36:3.6/python36 and python39:3.9/python39 as shipped with Red Hat Enterprise Linux 8 are marked as 'Not affected' as they just provide \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-9287" }, { "category": "external", "summary": "RHBZ#2321440", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2321440" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-9287", "url": "https://www.cve.org/CVERecord?id=CVE-2024-9287" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-9287", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9287" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/124651", "url": "https://github.com/python/cpython/issues/124651" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/124712", "url": "https://github.com/python/cpython/pull/124712" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/RSPJ2B5JL22FG3TKUJ7D7DQ4N5JRRBZL/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/RSPJ2B5JL22FG3TKUJ7D7DQ4N5JRRBZL/" } ], "release_date": "2024-10-22T16:34:39.210000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-05-13T08:08:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:6294" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Virtual environment (venv) activation scripts don't quote paths" }, { "cve": "CVE-2024-12254", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2024-12-06T16:00:53.728823+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2330804" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python. In certain configurations, the `asyncio._SelectorSocketTransport.writelines()` method fails to signal the protocol to clear the write buffer when it approaches capacity. Because of this, protocols would not periodically drain the write buffer, potentially leading to a denial of service via memory exhaustion.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Unbounded memory buffering in SelectorSocketTransport.writelines()", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability likely impacts a small number of users. You must be using Python 3.12.0 or later, on Linux, using the asyncio module with protocols, and using .writelines() method which had new zero-copy-on-write behavior in Python 3.12.0 and later. If not all of these factors are true, then your usage of Python is unaffected.\n\n\nThis vulnerability is rated with an Important severity due to its potential for denial of service (DoS) attacks through memory exhaustion. By failing to signal the protocol to drain the write buffer when approaching the high-water mark, the affected `asyncio._SelectorSocketTransport.writelines()` method introduces a important flaw in flow control. This flaw can lead to uncontrolled growth of the buffer in long-running or high-throughput applications, which are typical in networked systems or event-driven architectures. Given that `asyncio` is widely used in performance-critical Python applications for handling asynchronous I/O, the impact of memory exhaustion could destabilize services, compromise system availability, and increase the risk of cascading failures, especially in production environments handling large-scale or untrusted inputs.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2024-12254" }, { "category": "external", "summary": "RHBZ#2330804", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330804" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2024-12254", "url": "https://www.cve.org/CVERecord?id=CVE-2024-12254" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-12254", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12254" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/127655", "url": "https://github.com/python/cpython/issues/127655" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/127656", "url": "https://github.com/python/cpython/pull/127656" }, { "category": "external", "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/H4O3UBAOAQQXGT4RE3E4XQYR5XLROORB/", "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/H4O3UBAOAQQXGT4RE3E4XQYR5XLROORB/" } ], "release_date": "2024-12-06T15:19:41.576000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-05-13T08:08:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:6294" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "python: Unbounded memory buffering in SelectorSocketTransport.writelines()" }, { "cve": "CVE-2025-0938", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2025-01-31T18:00:46.128427+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2343237" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python. The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accept domain names that included square brackets, which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: cpython: URL parser allowed square brackets in domain names", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2025-0938" }, { "category": "external", "summary": "RHBZ#2343237", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2343237" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2025-0938", "url": "https://www.cve.org/CVERecord?id=CVE-2025-0938" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-0938", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0938" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/105704", "url": "https://github.com/python/cpython/issues/105704" }, { "category": "external", "summary": "https://github.com/python/cpython/pull/129418", "url": "https://github.com/python/cpython/pull/129418" } ], "release_date": "2025-01-31T17:51:35.898000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2025-05-13T08:08:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHBA-2025:6294" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-10.0.GA:python-unversioned-command-0:3.12.9-1.el10.noarch", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-devel-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3-tkinter-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "AppStream-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3-libs-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-0:3.12.9-1.el10.src", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "BaseOS-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-debug-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-idle-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3-test-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debuginfo-0:3.12.9-1.el10.x86_64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.aarch64", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.ppc64le", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.s390x", "CRB-10.0.GA:python3.12-debugsource-0:3.12.9-1.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: cpython: URL parser allowed square brackets in domain names" } ] }