Input validation error in Python - CVE-2024-11168

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU100516

Input validation error in Python - CVE-2024-11168

Published: November 15, 2024


Vulnerability identifier: #VU100516
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-11168
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to insufficient validation of bracketed hosts (e.g. []) within the urllib.parse.urlsplit() and urlparse() functions allowing hosts that weren't IPv6 or IPvFuture. A remote attacker can pass specially crafted IP address to the application to bypass implemented IP-based security checks or perform SSRF attacks.


Affected software

Python
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for IBM z Systems
Ubuntu
Basesystem Module
SUSE Package Hub 15
Legacy Module
Development Tools Module
openSUSE Leap
openEuler
Fedora
Oracle Solaris
Submariner
Service Interconnect
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
APEX Cloud Platform for Red Hat OpenShift
Red Hat Advanced Cluster Security for Kubernetes
OpenShift Logging
App Connect Enterprise Certified Container
SmartFabric Manager
Dell EMC VxRail Appliance
IBM API Connect
python3.6-venv (Ubuntu package)
python3.11 (Ubuntu package)
python3.8 (Ubuntu package)
python3.7-venv (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.7 (Ubuntu package)
python2.7-minimal (Ubuntu package)
python2.7 (Ubuntu package)
python3.9-venv (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.5-venv (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.4-venv (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.8-venv (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.4 (Ubuntu package)
python3.11-venv (Ubuntu package)
python3.4-minimal (Ubuntu package)
python39-wcwidth
python39-PyMySQL
python39-toml
python39-pluggy
python39-Cython
python39-wheel
python39-wheel-wheel
python39-iniconfig
python39-scipy
python39-pysocks
python39-py
python39-cffi
python39-six
python39-numpy
python39-numpy-f2py
python39-numpy-doc
python39-urllib3
python39-pyparsing
python39-pybind11-devel
python39-pybind11
libpython2_7-1_0
python-tk-debuginfo
python-tk
python-base-debuginfo
python-debuginfo-32bit
python-doc
python-doc-pdf
python-devel
python-gdbm
python-base-debuginfo-32bit
python-xml-debuginfo
python-demo
python-curses-debuginfo
python-xml
libpython2_7-1_0-32bit
python-base
libpython2_7-1_0-debuginfo-32bit
python-32bit
python-debugsource
python-curses
libpython2_7-1_0-debuginfo
python-idle
python-base-debugsource
python-base-32bit
python-gdbm-debuginfo
python
python-debuginfo
python-32bit-debuginfo
libpython2_7-1_0-32bit-debuginfo
python-base-32bit-debuginfo
python39-psycopg2-tests
python39-psycopg2-doc
python39-psycopg2
python39-idna
python39-pycparser
python39-requests
python39-chardet
python39-cryptography
python3-curses
libpython3_4m1_0-debuginfo
python3-tk
python3-base
python3-base-debuginfo-32bit
python3-devel
python3-debuginfo
python3-curses-debuginfo
python3-debugsource
libpython3_4m1_0-debuginfo-32bit
python3-tk-debuginfo
python3
libpython3_4m1_0-32bit
libpython3_4m1_0
python3-devel-debuginfo
python3-base-debugsource
python3-base-debuginfo
python3 (Red Hat package)
python3-tkinter
python3-test
python3-libs
python3-idle
platform-python-devel
platform-python-debug
platform-python
python3.6
libpython3_6m1_0
libpython3_6m1_0-debuginfo
python36-debuginfo
libpython3_6m1_0-32bit
python36-base
libpython3_6m1_0-debuginfo-32bit
python36-base-debuginfo
python36-debugsource
python36
python36-devel
python3-core-debugsource
python3-testsuite-debuginfo
python3-doc
python3-dbm-debuginfo
python3-tools
libpython3_6m1_0-64bit-debuginfo
libpython3_6m1_0-64bit
libpython3_6m1_0-32bit-debuginfo
python3-testsuite
python3-doc-devhelp
python3-dbm
python3.8
python3-help
python3-unversioned-command
python3-debug
python39-idle
python39
python39-dbm
libpython3_9-1_0-32bit
python39-32bit-debuginfo
python39-base-32bit
libpython3_9-1_0-32bit-debuginfo
python39-base-32bit-debuginfo
python39-32bit
python39-64bit
python39-64bit-debuginfo
libpython3_9-1_0-64bit
libpython3_9-1_0-64bit-debuginfo
python39-base-64bit
python39-base-64bit-debuginfo
python39-doc
python39-core-debugsource
libpython3_9-1_0-debuginfo
python39-debuginfo
python39-tools
python39-tk-debuginfo
python39-dbm-debuginfo
python39-base-debuginfo
python39-tk
python39-testsuite-debuginfo
libpython3_9-1_0
python39-debugsource
python39-curses-debuginfo
python39-testsuite
python39-base
python39-devel
python39-curses
python39-doc-devhelp
python3.9 (Red Hat package)
python39-test
python39-rpm-macros
python39-tkinter
python39-libs
python39-debug
python3.10-minimal (Ubuntu package)
python3.10 (Ubuntu package)
python310-dbm
python310-tk
python310-tools
python310-32bit-debuginfo
python310-doc-devhelp
python310-testsuite-debuginfo
python310-testsuite
python310-base-debuginfo
python310-idle
libpython3_10-1_0
python310-base-32bit
python310-dbm-debuginfo
python310-debuginfo
python310-core-debugsource
python310-tk-debuginfo
python310-doc
python310
python310-base
libpython3_10-1_0-debuginfo
python310-curses
python310-debugsource
python310-devel
python310-curses-debuginfo
python310-base-32bit-debuginfo
python310-32bit
libpython3_10-1_0-32bit-debuginfo
python310-64bit
python310-base-64bit-debuginfo
libpython3_10-1_0-32bit
libpython3_10-1_0-64bit
libpython3_10-1_0-64bit-debuginfo
python310-base-64bit
python310-64bit-debuginfo
python39-ply
python3.13-venv (Ubuntu package)
python3.13-minimal (Ubuntu package)
python3.13 (Ubuntu package)
python39-lxml
python39-mod_wsgi
python39-pyyaml
python39-psutil
python39-pytest
python39-more-itertools
python39-pip-wheel
python39-pip
python39-attrs
python39-packaging
python39-setuptools
python39-setuptools-wheel
OpenShift API for Data Protection (OADP)
APEX Cloud Platform for Microsoft Azure
OpenManage Network Integration (OMNI)
SmartFabric OS10
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Virtualization
Dell Enterprise SONiC Distribution
IBM CICS TX Advanced

How to mitigate CVE-2024-11168

Install updates from vendor's website.

Python - update to 3.11.5
Submariner - addressed in versions 0.16.8, 0.18.5
SmartFabric Manager - update to 1.2.0
Dell EMC VxRail Appliance - update to 8.321
IBM API Connect - update to 10.0.8.2 ifix2
python3.6-venv (Ubuntu package) - update to Ubuntu Pro
python3.11 (Ubuntu package) - update to Ubuntu Pro
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.14, 3.8.10-0ubuntu1~20.04.16, 3.8.10-0ubuntu1~20.04.18
python3.7-venv (Ubuntu package) - update to Ubuntu Pro
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.7 (Ubuntu package) - update to Ubuntu Pro
python2.7-minimal (Ubuntu package) - update to Ubuntu Pro
python2.7 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.7.6-8ubuntu0.6+esm28
python3.9-venv (Ubuntu package) - update to Ubuntu Pro
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.14, 3.8.10-0ubuntu1~20.04.16, 3.8.10-0ubuntu1~20.04.18
python3.5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), python3.5-minimal
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5-venv (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6 (Ubuntu package) - update to Ubuntu Pro
python3.4-venv (Ubuntu package) - update to Ubuntu Pro
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.8-venv (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.16, 3.8.10-0ubuntu1~20.04.18
python3.11-minimal (Ubuntu package) - update to Ubuntu Pro
python3.4 (Ubuntu package) - update to Ubuntu Pro
python3.11-venv (Ubuntu package) - update to Ubuntu Pro
python3.4-minimal (Ubuntu package) - update to Ubuntu Pro
python39-wcwidth - update to 0.2.5-3
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python39-Cython - update to 0.29.21-5
python39-wheel - update to 0.35.1-4
python39-wheel-wheel - update to 0.35.1-4
Service Interconnect - update to 1
python39-iniconfig - update to 1.1.1-2
OpenShift API for Data Protection (OADP) - update to 1.4.2
APEX Cloud Platform for Microsoft Azure - update to 01.05.01.00
python39-scipy - update to 1.5.4-5.0.1
python39-pysocks - update to 1.7.1-4
python39-py - update to 1.10.0-1
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python39-numpy - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-numpy-doc - update to 1.19.4-3.0.1
python39-urllib3 - update to 1.25.10-5
Ansible Automation Platform - addressed in versions 2.4, 2.5
Multicluster Engine for Kubernetes - addressed in versions 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.3, 2.7.4
python39-pyparsing - update to 2.4.7-5
OpenShift Service Mesh - addressed in versions 2.4.14, 2.5.8, 2.6.5
python39-pybind11-devel - update to 2.7.1-1
python39-pybind11 - update to 2.7.1-1
libpython2_7-1_0 - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-tk-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-tk - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-base-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-debuginfo-32bit - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1
python-doc - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-doc-pdf - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-devel - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-gdbm - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-base-debuginfo-32bit - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1
python-xml-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-demo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-curses-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-xml - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
libpython2_7-1_0-32bit - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-base - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
libpython2_7-1_0-debuginfo-32bit - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1
python-32bit - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-debugsource - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-curses - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
libpython2_7-1_0-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-idle - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-base-debugsource - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-base-32bit - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-gdbm-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-debuginfo - addressed in versions 2.7.18-33.38.1, 2.7.18-33.47.1, 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-32bit-debuginfo - addressed in versions 2.7.18-150000.68.1, 2.7.18-150000.77.1
libpython2_7-1_0-32bit-debuginfo - addressed in versions 2.7.18-150000.68.1, 2.7.18-150000.77.1
python-base-32bit-debuginfo - addressed in versions 2.7.18-150000.68.1, 2.7.18-150000.77.1
python39-psycopg2-tests - update to 2.8.6-3.0.1
python39-psycopg2-doc - update to 2.8.6-3.0.1
python39-psycopg2 - update to 2.8.6-3.0.1
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.9.6, 2.10.7, 2.10.8, 2.11.4, 2.12.2, 2.12.3
python39-idna - update to 2.10-4
python39-pycparser - update to 2.20-3
python39-requests - update to 2.25.0-3
python39-chardet - update to 3.0.4-19
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
python39-cryptography - update to 3.3.1-3
python3-curses - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_4m1_0-debuginfo - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1
python3-tk - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-base - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-base-debuginfo-32bit - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1
python3-devel - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-debuginfo - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-curses-debuginfo - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-debugsource - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_4m1_0-debuginfo-32bit - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1
python3-tk-debuginfo - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3 - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_4m1_0-32bit - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1
libpython3_4m1_0 - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1
python3-devel-debuginfo - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-base-debugsource - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1
python3-base-debuginfo - addressed in versions 3.4.10-25.145.1, 3.4.10-25.151.1, 3.4.10-25.158.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3 (Red Hat package) - update to 3.6.8-69.el8_10
python3-tkinter - update to 3.6.8-69.0.1
python3-test - update to 3.6.8-69.0.1
python3-libs - update to 3.6.8-69.0.1
python3-idle - update to 3.6.8-69.0.1
python3-devel - update to 3.6.8-69.0.1
platform-python-devel - update to 3.6.8-69.0.1
platform-python-debug - update to 3.6.8-69.0.1
platform-python - update to 3.6.8-69.0.1
python3.6 - addressed in versions 3.6.15-39.fc40, 3.6.15-39.fc41
libpython3_6m1_0 - addressed in versions 3.6.15-73.1, 3.6.15-79.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-73.1, 3.6.15-79.1, 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python36-debuginfo - addressed in versions 3.6.15-73.1, 3.6.15-79.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-73.1, 3.6.15-79.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python36-base - addressed in versions 3.6.15-73.1, 3.6.15-79.1
libpython3_6m1_0-debuginfo-32bit - addressed in versions 3.6.15-73.1, 3.6.15-79.1
python36-base-debuginfo - addressed in versions 3.6.15-73.1, 3.6.15-79.1
python36-debugsource - addressed in versions 3.6.15-73.1, 3.6.15-79.1
python36 - addressed in versions 3.6.15-73.1, 3.6.15-79.1
python36-devel - update to 3.6.15-79.1
python3-core-debugsource - addressed in versions 3.6.15-150000.3.167.1, 3.6.15-150000.3.173.1, 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-testsuite-debuginfo - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-doc - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-dbm-debuginfo - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-tools - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_6m1_0-64bit-debuginfo - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_6m1_0-64bit - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
libpython3_6m1_0-32bit-debuginfo - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-testsuite - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-doc-devhelp - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-dbm - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
python3-idle - addressed in versions 3.6.15-150300.10.78.1, 3.6.15-150300.10.84.1
OpenManage Network Integration (OMNI) - update to 3.7
python3.8 - addressed in versions 3.8.20-2.fc40, 3.8.20-2.fc41
python3 - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python3-help - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python3-unversioned-command - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python3-devel - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python3-debugsource - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python3-debuginfo - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python3-debug - addressed in versions 3.9.9-36, 3.9.9-37, 3.9.9-40
python39-idle - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39 - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-dbm - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
libpython3_9-1_0-32bit - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-32bit-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-base-32bit - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
libpython3_9-1_0-32bit-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-base-32bit-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-32bit - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-64bit - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-64bit-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
libpython3_9-1_0-64bit - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
libpython3_9-1_0-64bit-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-base-64bit - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-base-64bit-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-doc - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-core-debugsource - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
libpython3_9-1_0-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-tools - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-tk-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-dbm-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-base-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-tk - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-testsuite-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
libpython3_9-1_0 - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-debugsource - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-curses-debuginfo - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-testsuite - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-base - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-devel - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-curses - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python39-doc-devhelp - addressed in versions 3.9.20-150300.4.58.1, 3.9.21-150300.4.61.1
python3.9 (Red Hat package) - update to 3.9.21-1.el9_5
python39-test - update to 3.9.25-2.0.1
python39-rpm-macros - update to 3.9.25-2.0.1
python39-tkinter - update to 3.9.25-2.0.1
python39-libs - update to 3.9.25-2.0.1
python39-idle - update to 3.9.25-2.0.1
python39-devel - update to 3.9.25-2.0.1
python39 - update to 3.9.25-2.0.1
python39-debug - update to 3.9.25-2.0.1
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.8
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.8
python310-dbm - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-tk - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-tools - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-32bit-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-doc-devhelp - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-testsuite-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-testsuite - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-base-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-idle - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
libpython3_10-1_0 - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-base-32bit - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-dbm-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-core-debugsource - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-tk-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-doc - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310 - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-base - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
libpython3_10-1_0-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-curses - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-debugsource - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-devel - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-curses-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-base-32bit-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-32bit - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
libpython3_10-1_0-32bit-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-64bit - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-base-64bit-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
libpython3_10-1_0-32bit - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
libpython3_10-1_0-64bit - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
libpython3_10-1_0-64bit-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-base-64bit - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python310-64bit-debuginfo - addressed in versions 3.10.15-150400.4.63.1, 3.10.16-150400.4.66.1
python39-ply - update to 3.11-10
python3.13-venv (Ubuntu package) - update to 3.13.0-1ubuntu0.1
python3.13-minimal (Ubuntu package) - update to 3.13.0-1ubuntu0.1
python3.13 (Ubuntu package) - update to 3.13.0-1ubuntu0.1
Dell Enterprise SONiC Distribution - update to 4.4.2
Red Hat Advanced Cluster Security for Kubernetes - update to 4.4.8
python39-lxml - update to 4.6.5-1
python39-mod_wsgi - update to 4.7.1-7
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.14.13, 4.15.9, 4.16.5, 4.17.2
OpenShift Virtualization - addressed in versions 4.15.9, 4.17.3
python39-pyyaml - update to 5.4.1-1
OpenShift Logging - addressed in versions 5.6.27, 5.8.17
python39-psutil - update to 5.8.0-4.0.1
python39-pytest - update to 6.0.2-2.0.1
python39-more-itertools - update to 8.5.0-2
IBM CICS TX Advanced - addressed in versions 10.1.0.0 ifix37, 11.1.0.0 ifix29
SmartFabric OS10 - addressed in versions 10.5.4.15, 10.5.5.14, 10.5.6.9
Oracle Solaris - update to 11.4 SRU 77
App Connect Enterprise Certified Container - update to 12.8.0
python39-pip-wheel - update to 20.2.4-9
python39-pip - update to 20.2.4-9
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
python39-setuptools - update to 50.3.2-7
python39-setuptools-wheel - update to 50.3.2-7

External References

Related Security Bulletins