RLSA-2024:5962

Опубликовано: 07 мая 2025

Источник: rocky

Оценка: Moderate

Описание

Moderate: python39:3.9 and python39-devel:3.9 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)
pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools (CVE-2024-6345)
cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
python: cpython: From NVD collector (CVE-2024-8088)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

Rocky Linux 8

Наименование	Архитектура	Релиз	RPM
python39	x86_64	7.module+el8.10.0+1860+afcc1c71	python39-3.9.19-7.module+el8.10.0+1860+afcc1c71.x86_64.rpm
python39-cffi	x86_64	2.module+el8.10.0+1582+bc278001	python39-cffi-1.14.3-2.module+el8.10.0+1582+bc278001.x86_64.rpm
python39-cffi	x86_64	2.module+el8.10.0+1860+afcc1c71	python39-cffi-1.14.3-2.module+el8.10.0+1860+afcc1c71.x86_64.rpm
python39-chardet	noarch	19.module+el8.10.0+1582+bc278001	python39-chardet-3.0.4-19.module+el8.10.0+1582+bc278001.noarch.rpm
python39-chardet	noarch	19.module+el8.10.0+1860+afcc1c71	python39-chardet-3.0.4-19.module+el8.10.0+1860+afcc1c71.noarch.rpm
python39-chardet	noarch	19.module+el8.10.0+1582+bc278001	python39-chardet-3.0.4-19.module+el8.10.0+1582+bc278001.noarch.rpm
python39-chardet	noarch	19.module+el8.10.0+1860+afcc1c71	python39-chardet-3.0.4-19.module+el8.10.0+1860+afcc1c71.noarch.rpm
python39-cryptography	x86_64	3.module+el8.10.0+1697+7e517775	python39-cryptography-3.3.1-3.module+el8.10.0+1697+7e517775.x86_64.rpm
python39-cryptography	x86_64	3.module+el8.10.0+1860+afcc1c71	python39-cryptography-3.3.1-3.module+el8.10.0+1860+afcc1c71.x86_64.rpm
python39-devel	x86_64	7.module+el8.10.0+1860+afcc1c71	python39-devel-3.9.19-7.module+el8.10.0+1860+afcc1c71.x86_64.rpm