ELSA-2023-3594

Опубликовано: 15 июн. 2023

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2023-3594: python3.11 security update (IMPORTANT)

[3.11.2-2.1]

Security fix for CVE-2023-24329 Resolves: rhbz#2173917

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

python3.11

3.11.2-2.el8_8.1

python3.11-debug

3.11.2-2.el8_8.1

python3.11-devel

3.11.2-2.el8_8.1

python3.11-idle

3.11.2-2.el8_8.1

python3.11-libs

3.11.2-2.el8_8.1

python3.11-rpm-macros

3.11.2-2.el8_8.1

python3.11-test

3.11.2-2.el8_8.1

python3.11-tkinter

3.11.2-2.el8_8.1

Oracle Linux x86_64

python3.11

3.11.2-2.el8_8.1

python3.11-debug

3.11.2-2.el8_8.1

python3.11-devel

3.11.2-2.el8_8.1

python3.11-idle

3.11.2-2.el8_8.1

python3.11-libs

3.11.2-2.el8_8.1

python3.11-rpm-macros

3.11.2-2.el8_8.1

python3.11-test

3.11.2-2.el8_8.1

python3.11-tkinter

3.11.2-2.el8_8.1

Связанные CVE

CVE-2023-24329

Ссылки на источники

Связанные уязвимости

CVE-2023-24329

CVSS3: 7.5

ubuntu

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

CVE-2023-24329

CVSS3: 7.5

redhat

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

CVE-2023-24329

CVSS3: 7.5

nvd

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

CVE-2023-24329

CVSS3: 7.5

msrc

больше 2 лет назад

Описание отсутствует

CVE-2023-24329

CVSS3: 7.5

debian

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows ...