Resource exhaustion in Python - CVE-2022-45061

Vulnerability identifier: #VU69392

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-45061

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to usage of an unnecessary quadratic algorithm in one path when processing some inputs to the IDNA (RFC 3490) decoder. A remote attacker can pass a specially crafted name to he decoder, trigger resource excessive CPU consumption and perform a denial of service (DoS) attack.

Python
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
cflinuxfs3
Data Privacy on Cloud Pak for Data
Oracle Communications Operations Monitor
ObjectScale
Tanzu Greenplum for Kubernetes
PowerStore T
OpenManage Network Integration (OMNI)
EMC ECS
Enterprise SONiC
Platform Automation Toolkit
Storage Protect Plus Container Agent
EMC Cloud Tiering Appliance
IBM AIX
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
BIG-IP Next CNF
F5OS
BIG-IP Next SPK
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
Oracle Solaris
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Desktop
Ubuntu
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Package Hub 15
SUSE Linux Enterprise Module for Python3
Python 3 Module
Development Tools Module
Basesystem Module
openSUSE Leap
openEuler
Fedora
Self Node Remediation Operator
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
VMware Tanzu Operations Manager
Service Telemetry Framework
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Oracle Communications Cloud Native Core Binding Support Function
Spectrum Discover
IBM Spectrum Copy Data Management
Isolation Segment
VMware Tanzu Application Service for VMs
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
Dell Secure Connect Gateway
IBM Spectrum Protect Plus
IBM Robotic Process Automation
Red Hat OpenShift GitOps
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
Dell EMC Container Storage Modules
HPE Moonshot 1500 Chassis Manager
QRadar Suite
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python2.7-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.7 (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python2.7 (Ubuntu package)
python3.8 (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.11 (Ubuntu package)
libpython3.5 (Ubuntu package)
libpython2.7 (Ubuntu package)
python39-wcwidth
python2-pluggy
python2-PyMySQL
python39-PyMySQL
python39-toml
python39-pluggy
python2-docutils
python2-markupsafe
python2-Cython
python39-Cython
python2-wheel-wheel
python2-wheel
rh-python38-python-wheel (Red Hat package)
python39-wheel-wheel
python39-wheel
python2-scipy
python2-funcsigs
python2-backports
python2-ipaddress
python39-iniconfig
python2-sqlalchemy
python-sqlalchemy-doc
python2-nose
python-nose-docs
python2-py
python39-scipy
python2-pysocks
python39-pysocks
python2-pytest-mock
python39-py
python2-six
python2-numpy-doc
python2-numpy
python2-numpy-f2py
python39-cffi
python39-six
python2-dns
python2-setuptools_scm
python39-numpy
python39-numpy-f2py
python39-numpy-doc
python2-urllib3
python39-urllib3
python2-mock
python2-pygments
python39-pyparsing
python2-babel
babel
python2-idna
python39-pybind11
python39-pybind11-devel
python-psycopg2-doc
python2-psycopg2-tests
python2-psycopg2-debug
python2-psycopg2
python2-docs-info
python2-docs
python27
python2-tools
python2-libs
python2-devel
python2-tkinter
python2-test
python2-debug
python2
python2.7
python-xml-debuginfo
python-tk-debuginfo
python-doc
python-doc-pdf
libpython2_7-1_0
libpython2_7-1_0-32bit
libpython2_7-1_0-debuginfo
libpython2_7-1_0-debuginfo-32bit
python
python-32bit
python-base
python-base-32bit
python-base-debuginfo
python-base-debuginfo-32bit
python-base-debugsource
python-curses
python-curses-debuginfo
python-debuginfo
python-debuginfo-32bit
python-debugsource
python-demo
python-gdbm
python-gdbm-debuginfo
python-idle
python-tk
python-xml
python-devel
libpython2_7-1_0-32bit-debuginfo
python-32bit-debuginfo
python-base-32bit-debuginfo
rh-python38-python-cryptography (Red Hat package)
python39-psycopg2
python39-psycopg2-tests
python39-psycopg2-doc
python39-idna
python2-jinja2
python2-requests
python39-pycparser
rh-python38-python-requests (Red Hat package)
python39-requests
python2-chardet
python39-chardet
python39-cryptography
python2-pytest
libpython3_4m1_0-debuginfo
python3-debugsource
python3-base-debuginfo-32bit
libpython3_4m1_0-debuginfo-32bit
libpython3_4m1_0-32bit
python3-tk-debuginfo
python3-tk
python3-dbm-debuginfo
python3-dbm
python3-devel-debuginfo
python3-devel
python3-debuginfo
python3-curses-debuginfo
python3-curses
python3-base-debugsource
python3-base-debuginfo
python3-base
python3
libpython3_4m1_0
python2-backports-ssl_match_hostname
python3 (Red Hat package)
python3-idle
python3-libs
python3-test
platform-python-devel
python3-tkinter
platform-python-debug
platform-python
libpython3.6 (Ubuntu package)
python3.6
python36-base-debuginfo
python36-base
python36-devel
python36-debuginfo
libpython3_6m1_0-debuginfo
libpython3_6m1_0-32bit
libpython3_6m1_0
libpython3_6m1_0-debuginfo-32bit
python36-debugsource
python36
python3-testsuite
python3-tools
python3-core-debugsource
python3-doc
python3-testsuite-debuginfo
libpython3_6m1_0-32bit-debuginfo
python3-doc-devhelp
python2-pymongo-gridfs
python2-pymongo
python2-bson
python3-debug
python3-help
python3.7
python38
libpython3.8 (Ubuntu package)
python3.8
rh-python38-python (Red Hat package)
python3.9 (Red Hat package)
python39-testsuite
python39-32bit-debuginfo
python39-base-32bit-debuginfo
python39-base-32bit
python39-debugsource
python39-32bit
libpython3_9-1_0-32bit-debuginfo
libpython3_9-1_0-32bit
python39-tools
python39-tk-debuginfo
python39-tk
python39-testsuite-debuginfo
libpython3_9-1_0
python39-debuginfo
python39-dbm-debuginfo
python39-dbm
python39-curses-debuginfo
python39-curses
python39-core-debugsource
python39-base-debuginfo
python39-base
python39
libpython3_9-1_0-debuginfo
python39-idle
python39-devel
python39-doc
python39-doc-devhelp
python3.9
python39-rpm-macros
python39-tkinter
python39-test
python39-debug
python39-libs
libpython3.10 (Ubuntu package)
python3.10 (Ubuntu package)
mingw-python3
python310
libpython3_10-1_0
libpython3_10-1_0-debuginfo
python310-base-32bit-debuginfo
python310-doc
python310-base-32bit
python310-32bit-debuginfo
python310-32bit
libpython3_10-1_0-32bit-debuginfo
libpython3_10-1_0-32bit
python310-tools
python310-tk-debuginfo
python310-tk
python310-testsuite-debuginfo
python310-testsuite
python310-idle
python310-doc-devhelp
python310-devel
python310-debugsource
python310-debuginfo
python310-dbm-debuginfo
python310-dbm
python310-curses-debuginfo
python310-curses
python310-core-debugsource
python310-base-debuginfo
python310-base
python3.10
python3-docs
python3.10-minimal (Ubuntu package)
python3.11
python39-ply
python3.12
python3.12 (Ubuntu package)
python3.12-minimal (Ubuntu package)
python2-pyyaml
python2-rpm-macros
python2-lxml
python2-coverage
python39-lxml
python39-mod_wsgi
python39-pyyaml
python39-psutil
python39-pytest
pypy3.8
pypy3.9
pypy
python39-more-itertools
python2-pip-wheel
python2-pip
python2-virtualenv
python2-attrs
rh-python38-python-pip (Red Hat package)
python39-pip-wheel
python39-pip
python39-attrs
python39-packaging
python2-setuptools
python2-setuptools-wheel
rh-python38-python-setuptools (Red Hat package)
python39-setuptools
python39-setuptools-wheel
python2-pytz
PeopleSoft Enterprise PeopleTools
IBM Cognos Analytics
Oracle Database Server
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
Dell Enterprise SONiC Distribution
Cloud Pak for Data
IBM Qradar SIEM
EMC ViPR SRM
Dell EMC Storage Monitoring and Reporting (SMR)
IBM Storage Scale System
Dell EMC VxRail Appliance
PowerScale OneFS
IBM Security Verify Access
Junos Space Security Director

Install update from vendor's website.

cflinuxfs3 - update to 0.346.0
Self Node Remediation Operator - update to 0.5.1
Service Telemetry Framework - update to 1.5.4
Red Hat OpenShift GitOps - addressed in versions 1.10.0, 1.11
Migration Toolkit for Containers - update to 1.7.8
QRadar Suite - update to 1.10.17.0
Multicluster Engine for Kubernetes - update to 2.1.6
IBM Cloud Pak for Multicloud Management - update to 2.3.8
OpenShift Service Mesh - update to 2.3.2
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.5.8, 2.6.5
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Data Privacy on Cloud Pak for Data - update to 4.7.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.11.7, 4.12.1, 4.12.2, 4.13.0
OpenShift Logging - addressed in versions 5.4.12, 5.5.8, 5.6.3
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
python2.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.7 (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.6.9-1~18.04ubuntu1.9
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python2.7 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.7.17-1~18.04ubuntu1.10
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.6, 3.8.10-0ubuntu1~20.04.10
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
libpython3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
libpython2.7 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.7.17-1~18.04ubuntu1.10
python39-wcwidth - update to 0.2.5-3
python2-pluggy - update to 0.6.0-8
python2-PyMySQL - update to 0.8.0-10
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python2-docutils - update to 0.14-12
python2-markupsafe - update to 0.23-19
python2-Cython - update to 0.28.1-7
python39-Cython - update to 0.29.21-5
python2-wheel-wheel - update to 0.31.1-3
python2-wheel - update to 0.31.1-3
rh-python38-python-wheel (Red Hat package) - update to 0.33.6-9.el7
python39-wheel-wheel - update to 0.35.1-4
python39-wheel - update to 0.35.1-4
python2-scipy - update to 1.0.0-21
python2-funcsigs - update to 1.0.2-13
python2-backports - update to 1.0-16
python2-ipaddress - update to 1.0.18-6
python39-iniconfig - update to 1.1.1-2
python2-sqlalchemy - update to 1.3.2-2
python-sqlalchemy-doc - update to 1.3.2-2
python2-nose - update to 1.3.7-31
python-nose-docs - update to 1.3.7-31
ObjectScale - update to 1.4.0
python2-py - update to 1.5.3-6
python39-scipy - update to 1.5.4-3
Dell EMC Container Storage Modules - update to 1.6.0
python2-pysocks - update to 1.6.8-6
python39-pysocks - update to 1.7.1-4
python2-pytest-mock - update to 1.9.0-4
python39-py - update to 1.10.0-1
python2-six - update to 1.11.0-6
python2-numpy-doc - update to 1.14.2-16.0.1
python2-numpy - update to 1.14.2-16.0.1
python2-numpy-f2py - update to 1.14.2-16.0.1
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python2-dns - update to 1.15.0-10
python2-setuptools_scm - update to 1.15.7-6
python39-numpy - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-numpy-doc - update to 1.19.4-3.0.1
python2-urllib3 - update to 1.24.2-3
python39-urllib3 - update to 1.25.10-4
Tanzu Greenplum for Kubernetes - update to 2.0.0
python2-mock - update to 2.0.0-13
Spectrum Discover - addressed in versions 2.0.4.8, 2.1.1
python2-pygments - update to 2.2.0-22
IBM Spectrum Copy Data Management - update to 2.2.22
python39-pyparsing - update to 2.4.7-5
python2-babel - update to 2.5.1-10
babel - update to 2.5.1-10
python2-idna - update to 2.5-7
python39-pybind11 - update to 2.7.1-1
python39-pybind11-devel - update to 2.7.1-1
python-psycopg2-doc - update to 2.7.5-7.0.1
python2-psycopg2-tests - update to 2.7.5-7.0.1
python2-psycopg2-debug - update to 2.7.5-7.0.1
python2-psycopg2 - update to 2.7.5-7.0.1
python2-docs-info - update to 2.7.16-2
python2-docs - update to 2.7.16-2
python27 - update to 2.7.18-2.145
python2-tools - update to 2.7.18-12.0.1
python2-libs - update to 2.7.18-12.0.1
python2-devel - update to 2.7.18-12.0.1
python2-tkinter - update to 2.7.18-12.0.1
python2-test - update to 2.7.18-12.0.1
python2-debug - update to 2.7.18-12.0.1
python2 - update to 2.7.18-12.0.1
python2.7 - addressed in versions 2.7.18-23.fc36, 2.7.18-26.fc37, 2.7.18-28.fc38
python-xml-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-tk-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-doc - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-doc-pdf - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
libpython2_7-1_0 - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
libpython2_7-1_0-32bit - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
libpython2_7-1_0-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
libpython2_7-1_0-debuginfo-32bit - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1
python - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-32bit - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-base - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-base-32bit - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-base-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-base-debuginfo-32bit - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1
python-base-debugsource - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-curses - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-curses-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-debuginfo-32bit - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1
python-debugsource - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-demo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-gdbm - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-gdbm-debuginfo - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-idle - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-tk - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-xml - addressed in versions 2.7.18-28.93.1, 2.7.18-33.17.1, 2.7.18-150000.48.1
python-devel - addressed in versions 2.7.18-33.17.1, 2.7.18-150000.48.1
libpython2_7-1_0-32bit-debuginfo - update to 2.7.18-150000.48.1
python-32bit-debuginfo - update to 2.7.18-150000.48.1
python-base-32bit-debuginfo - update to 2.7.18-150000.48.1
rh-python38-python-cryptography (Red Hat package) - update to 2.8-6.el7
python39-psycopg2 - update to 2.8.6-2.0.1
python39-psycopg2-tests - update to 2.8.6-2.0.1
python39-psycopg2-doc - update to 2.8.6-2.0.1
python39-idna - update to 2.10-3
python2-jinja2 - update to 2.10-9
Isolation Segment - addressed in versions 2.11.26, 2.12.16, 2.13.11, 3.0.7
VMware Tanzu Application Service for VMs - addressed in versions 2.11.32, 2.12.21, 2.13.14, 3.0.7
python2-requests - update to 2.20.0-3
python39-pycparser - update to 2.20-3
rh-python38-python-requests (Red Hat package) - update to 2.22.0-11.el7
python39-requests - update to 2.25.0-2
VMware Tanzu Operations Manager - update to 3.0.2
python2-chardet - update to 3.0.4-10
python39-chardet - update to 3.0.4-19
python39-cryptography - update to 3.3.1-2
python2-pytest - update to 3.4.2-13
libpython3_4m1_0-debuginfo - update to 3.4.10-25.102.2
python3-debugsource - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-base-debuginfo-32bit - update to 3.4.10-25.102.2
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.102.2
libpython3_4m1_0-32bit - update to 3.4.10-25.102.2
python3-tk-debuginfo - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-tk - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-dbm-debuginfo - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-dbm - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-devel-debuginfo - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-devel - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-debuginfo - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-curses-debuginfo - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-curses - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-base-debugsource - update to 3.4.10-25.102.2
python3-base-debuginfo - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-base - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3 - addressed in versions 3.4.10-25.102.2, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
libpython3_4m1_0 - update to 3.4.10-25.102.2
python2-backports-ssl_match_hostname - update to 3.5.0.1-12
PowerStore T - update to 3.5.0.1-2083289
python3 (Red Hat package) - addressed in versions 3.6.8-47.el8_6.4, 3.6.8-48.el8_7.1
python3-idle - update to 3.6.8-48.0.2
python3-libs - update to 3.6.8-48.0.2
python3-test - update to 3.6.8-48.0.2
platform-python-devel - update to 3.6.8-48.0.2
python3-tkinter - update to 3.6.8-48.0.2
platform-python-debug - update to 3.6.8-48.0.2
platform-python - update to 3.6.8-48.0.2
libpython3.6 (Ubuntu package) - update to 3.6.9-1~18.04ubuntu1.9
python3.6 - addressed in versions 3.6.15-15.fc36, 3.6.15-15.fc37, 3.6.15-15.fc38
python36-base-debuginfo - update to 3.6.15-37.1
python36-base - update to 3.6.15-37.1
python36-devel - update to 3.6.15-37.1
python36-debuginfo - update to 3.6.15-37.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-37.1, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-37.1, 3.6.15-150300.10.40.1
libpython3_6m1_0 - addressed in versions 3.6.15-37.1, 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
libpython3_6m1_0-debuginfo-32bit - update to 3.6.15-37.1
python36-debugsource - update to 3.6.15-37.1
python36 - update to 3.6.15-37.1
python3-testsuite - addressed in versions 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-tools - addressed in versions 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-idle - addressed in versions 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-core-debugsource - addressed in versions 3.6.15-150000.3.119.1, 3.6.15-150300.10.40.1
python3-doc - update to 3.6.15-150300.10.40.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.40.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.40.1
python3-doc-devhelp - update to 3.6.15-150300.10.40.1
OpenManage Network Integration (OMNI) - update to 3.7
python2-pymongo-gridfs - update to 3.7.0-1.0.1
python2-pymongo - update to 3.7.0-1.0.1
python2-bson - update to 3.7.0-1.0.1
python3 - update to 3.7.9-30
python3-debugsource - update to 3.7.9-30
python3-devel - update to 3.7.9-30
python3-debug - update to 3.7.9-30
python3-debuginfo - update to 3.7.9-30
python3-help - update to 3.7.9-30
python3.7 - addressed in versions 3.7.16-1.fc35, 3.7.16-1.fc36, 3.7.16-1.fc37
EMC ECS - update to 3.8.0.2
python38 - update to 3.8.5-1.9
libpython3.8 (Ubuntu package) - update to 3.8.10-0ubuntu1~20.04.6
python3.8 - addressed in versions 3.8.16-1.fc35, 3.8.16-1.fc36, 3.8.16-1.fc37
rh-python38-python (Red Hat package) - update to 3.8.18-2.el7
python3.9 (Red Hat package) - update to 3.9.14-1.el9_1.2
python39-testsuite - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-32bit-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-base-32bit-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-base-32bit - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-debugsource - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-32bit - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
libpython3_9-1_0-32bit-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
libpython3_9-1_0-32bit - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-tools - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-tk-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-tk - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-testsuite-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
libpython3_9-1_0 - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-dbm-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-dbm - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-curses-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-curses - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-core-debugsource - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-base-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-base - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39 - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
libpython3_9-1_0-debuginfo - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-idle - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-devel - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-doc - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python39-doc-devhelp - addressed in versions 3.9.15-150300.4.21.1, 3.9.16-150300.4.24.1
python3 - update to 3.9.16
python3.9 - update to 3.9.16-1
python3.9 - addressed in versions 3.9.16-1.fc35, 3.9.16-1.fc36, 3.9.16-1.fc37
python39-rpm-macros - update to 3.9.16-2.0.1
python39 - update to 3.9.16-2.0.1
python39-tkinter - update to 3.9.16-2.0.1
python39-test - update to 3.9.16-2.0.1
python39-debug - update to 3.9.16-2.0.1
python39-devel - update to 3.9.16-2.0.1
python39-libs - update to 3.9.16-2.0.1
python39-idle - update to 3.9.16-2.0.1
libpython3.10 (Ubuntu package) - addressed in versions 3.10.6-1~22.04.2, 3.10.7-1ubuntu0.2
python3.10 (Ubuntu package) - addressed in versions 3.10.6-1~22.04.2, 3.10.7-1ubuntu0.2, 3.10.12-1~22.04.4
mingw-python3 - addressed in versions 3.10.8-2.fc36, 3.10.8-2.fc37
python310 - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
libpython3_10-1_0 - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
libpython3_10-1_0-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-base-32bit-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-doc - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-base-32bit - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-32bit-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-32bit - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
libpython3_10-1_0-32bit-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
libpython3_10-1_0-32bit - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-tools - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-tk-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-tk - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-testsuite-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-testsuite - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-idle - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-doc-devhelp - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-devel - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-debugsource - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-dbm-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-dbm - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-curses-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-curses - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-core-debugsource - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-base-debuginfo - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python310-base - addressed in versions 3.10.8-150400.4.15.1, 3.10.10-150400.4.22.1
python3.10 - addressed in versions 3.10.9-1.fc36, 3.10.9-1.fc37
python3-docs - addressed in versions 3.10.9-1.fc36, 3.11.1-1.fc37
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.11 - addressed in versions 3.11.1-1.fc35, 3.11.1-1.fc36, 3.11.1-1.fc37
python39-ply - update to 3.11-10
python3.12 - addressed in versions 3.12.0~a3-1.fc36, 3.12.0~a3-1.fc37
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python2-pyyaml - update to 3.12-16
python2-rpm-macros - update to 3-38
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
Enterprise SONiC - update to 4.1.2
python2-lxml - update to 4.2.3-6
Dell Enterprise SONiC Distribution - update to 4.4.2
Platform Automation Toolkit - addressed in versions 4.4.30, 5.0.23, 5.1.0
python2-coverage - update to 4.5.1-4
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.5
python39-lxml - update to 4.6.5-1
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.7.0
python39-mod_wsgi - update to 4.7.1-5
Cloud Pak for Data - update to 4.8.5
EMC ViPR SRM - update to 4.9.0.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
python39-pyyaml - update to 5.4.1-1
python39-psutil - update to 5.8.0-4.0.1
Dell Secure Connect Gateway - update to 5.14.00.16
python39-pytest - update to 6.0.2-2
IBM Storage Scale System - addressed in versions 6.1.2.8, 6.1.9.0
Dell EMC VxRail Appliance - update to 7.0.411
pypy3.8 - addressed in versions 7.3.11-1.3.8.fc36, 7.3.11-1.3.8.fc37
pypy3.9 - addressed in versions 7.3.11-1.3.9.fc36, 7.3.11-1.3.9.fc37
pypy - addressed in versions 7.3.12-3.fc37, 7.3.12-3.fc38, 7.3.12-3.fc39, 7.3.12-3.fc40
IBM Qradar SIEM - update to 7.5.0 Update Pack 6
python39-more-itertools - update to 8.5.0-2
python2-pip-wheel - update to 9.0.3-19.0.1
python2-pip - update to 9.0.3-19.0.1
PowerScale OneFS - update to 9.5.0.6
IBM Security Verify Access - update to 10.0.5.0 FP001
Storage Protect Plus Container Agent - update to 10.1.12.6
IBM Spectrum Protect Plus - update to 10.1.13.1
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 7, 11.2.4.1 IF1
EMC Cloud Tiering Appliance - update to 13.1.0.2.29
python2-virtualenv - update to 15.1.0-21
python2-attrs - update to 17.4.0-10
rh-python38-python-pip (Red Hat package) - update to 19.3.1-4.el7
python39-pip-wheel - update to 20.2.4-7
python39-pip - update to 20.2.4-7
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
IBM Robotic Process Automation - addressed in versions 21.0.7.8, 23.0.9
Junos Space Security Director - update to 24.1R3
python2-setuptools - update to 39.0.1-13
python2-setuptools-wheel - update to 39.0.1-13
rh-python38-python-setuptools (Red Hat package) - update to 41.6.0-8.el7
python39-setuptools - update to 50.3.2-4
python39-setuptools-wheel - update to 50.3.2-4
python2-pytz - update to 2017.2-12

• https://github.com/python/cpython/issues/98433

• Denial of service in Python IDNA decoder
• SUSE update for python3
• SUSE update for python3
• SUSE update for python
• Slackware Linux update for python3
• Ubuntu update for python2.7
• Ubuntu update for python2.7
• Multiple vulnerabilities in cflinuxfs3
• Multiple vulnerabilities in Oracle Solaris
• SUSE update for python
• Multiple vulnerabilities in IBM Spectrum Protect Plus File Systems Agent
• Red Hat Enterprise Linux 8 update for python3
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• SUSE update for python3
• Ubuntu update for python3.9
• Red Hat Enterprise Linux 9 update for python3.9
• SUSE update for python36
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.5
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• SUSE update for python39
• SUSE update for python
• Resource exhaustion in IBM AIX
• SUSE update for python310
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.7
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.6
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Amazon Linux AMI update for python38
• Amazon Linux AMI update for python27
• VMware Tanzu products update for Python
• Multiple vulnerabilities in Oracle Database Server
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.11
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Gentoo update for Python, PyPy3
• Resource exhaustion in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.5
• Multiple vulnerabilities in IBM Security Verify Access
• Multiple vulnerabilities in IBM Cognos Analytics
• VMware Tanzu Greenplum for Kubernetes update for Python
• Red Hat Enterprise Linux 8 update for the python27:2.7 module
• Red Hat Enterprise Linux 8 update for the python39:3.9 and python39-devel:3.9 modules
• Red Hat Enterprise Linux 8 update for the python38:3.8 and python38-devel:3.8 modules
• Denial of service in BIG-IP Next SPK and CNF
• Multiple vulnerabilities in Dell ECS
• Resource exhaustion in IBM Data Privacy on Cloud Pak for Data
• Multiple vulnerabilities in IBM Spectrum Discover
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in IBM Watson Discovery Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in IBM Spectrum Protect Plus Container
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central
• Fedora 37 update for pypy3.8
• Fedora 37 update for pypy3.9
• Fedora 36 update for pypy3.8
• Fedora 38 update for python2.7
• Fedora 36 update for pypy3.9
• Fedora 36 update for python2.7
• Fedora 37 update for python2.7
• Multiple vulnerabilities in Dell PowerStore Family
• Fedora 40 update for pypy
• Fedora 37 update for pypy
• Fedora 39 update for pypy
• Fedora 38 update for pypy
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Red Hat Software Collections update for rh-python38-python
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in Dell EMC Enterprise SONiC
• IBM Storage Scale System update for Python
• Multiple vulnerabilities in IBM Spectrum Copy Data Management
• Red Hat Enterprise Linux 8.6 Extended Update Support update for python3
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• openEuler update for python3
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Ubuntu update for python3.10
• Amazon Linux AMI update for python3.9
• Multiple vulnerabilities in Dell ObjectScale
• Resource exhaustion in IBM Cloud Pak for Data
• Multiple vulnerabilities in HPE Moonshot 1500 Chassis Manager
• SUSE update for python310
• SUSE update for python39
• Fedora 36 update for mingw-python3
• Fedora 37 update for mingw-python3
• Fedora 37 update for python3.7
• Fedora 36 update for python3.7
• Fedora 35 update for python3.7
• Fedora 37 update for python3.8
• Fedora 36 update for python3.8
• Fedora 35 update for python3.8
• Fedora 37 update for python3.9
• Fedora 36 update for python3.9
• Fedora 35 update for python3.9
• Fedora 37 update for python3.10
• Fedora 36 update for python3-docs, python3.10
• Fedora 37 update for python3.12
• Fedora 36 update for python3.12
• Fedora 37 update for python3-docs, python3.11
• Fedora 36 update for python3.11
• Fedora 35 update for python3.11
• Fedora 38 update for python3.6
• Fedora 36 update for python3.6
• Fedora 37 update for python3.6
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Ubuntu update for python2.7
• Anolis OS update for python27:2.7 module
• Anolis OS update for python3
• Anolis OS update for python39:3.9 module
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• Multiple vulnerabilities in Junos Space Security Director Policy Enforcer module