RHSA-2024:10983MediumCVSS 6.3
Red Hat Security Advisory: python3.9:3.9.21 security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2024-0397 — cpython: python: Memory race condition in ssl.SSLContext certificate store methods CVE-2024-7592 — cpython: python: Uncontrolled CPU resource consumption when in http.cookies module CVE-2024-9287 — python: Virtual environment (venv) activation scripts don't quote paths CVE-2024-11168 — python: Improper validation of IPv6 and IPvFuture addresses
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2024:10983
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2321440
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2325776
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10983.json