OS Command Injection in CPython - CVE-2015-20107

Vulnerability identifier: #VU64573

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2015-20107

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in the mailcap module, which does not escape characters into commands discovered in the system mailcap file. A remote unauthenticated attacker can pass specially crafted data to the applications that call mailcap.findmatch with untrusted input and execute arbitrary OS commands on the target system.

CPython
Gentoo Linux
Oracle Linux
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
HPE Helion Openstack
Red Hat CodeReady Linux Builder for x86_64
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Workstation Extension
Ubuntu
Slackware Linux
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Server 15 SP3 LTSS
Python 3 Module
openSUSE Leap
openEuler
Fedora
cflinuxfs3
PowerStore T
PowerStore X
OpenManage Network Integration (OMNI)
Enterprise SONiC
Dell Data Protection Central
Robotic Process Automation for Cloud Pak
OpenShift sandboxed containers
OpenShift Virtualization
OpenShift Data Foundation (formerly OpenShift Container Storage)
QRadar Suite
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Red Hat OpenShift distributed tracing (RHOSDT)
IBM Cloud Transformation Advisor
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
rh-python38-python (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3.9-minimal (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.7 (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.9 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.8 (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.11 (Ubuntu package)
python2.7-minimal (Ubuntu package)
python2.7 (Ubuntu package)
python2.7
python
libpython2_7-1_0-32bit
libpython2_7-1_0-debuginfo
libpython2_7-1_0-debuginfo-32bit
libpython2_7-1_0
python-32bit
python-base
python-base-32bit
python-base-debuginfo
python-base-debuginfo-32bit
python-base-debugsource
python-curses
python-curses-debuginfo
python-debuginfo
python-debuginfo-32bit
python-debugsource
python-demo
python-devel
python-gdbm
python-gdbm-debuginfo
python-idle
python-tk
python-tk-debuginfo
python-xml
python-xml-debuginfo
python-doc
python-doc-pdf
libpython2_7-1_0-32bit-debuginfo
python-32bit-debuginfo
python-base-32bit-debuginfo
python3-tk
python3-debugsource
libpython3_4m1_0
libpython3_4m1_0-debuginfo
python3
python3-base
python3-base-debuginfo
python3-base-debugsource
python3-curses
python3-curses-debuginfo
python3-debuginfo
python3-devel
python3-devel-debuginfo
python3-dbm
python3-dbm-debuginfo
python3-tk-debuginfo
libpython3_4m1_0-32bit
libpython3_4m1_0-debuginfo-32bit
python3-base-debuginfo-32bit
python3.4-minimal (Ubuntu package)
python3.4 (Ubuntu package)
python3 (Red Hat package)
python3.6
python36-devel
libpython3_6m1_0
libpython3_6m1_0-debuginfo
python36
python36-base
python36-base-debuginfo
python36-debuginfo
python36-debugsource
libpython3_6m1_0-32bit
libpython3_6m1_0-debuginfo-32bit
python3-idle
python3-tools
python3-testsuite
python3-core-debugsource
libpython3_6m1_0-32bit-debuginfo
python3-doc
python3-doc-devhelp
python3-testsuite-debuginfo
python3-debug
python3-help
python3.7
python3.8
python3.9
python39-core-debugsource
python39-curses
python39-curses-debuginfo
python39-dbm
python39-dbm-debuginfo
python39-debuginfo
python39-debugsource
python39-devel
python39-doc
python39-doc-devhelp
python39-idle
python39-testsuite
python39-testsuite-debuginfo
python39-tk
python39-tools
python39-tk-debuginfo
libpython3_9-1_0
libpython3_9-1_0-32bit
libpython3_9-1_0-32bit-debuginfo
python39-base-debuginfo
python39-base
python39
python39-32bit
python39-32bit-debuginfo
python39-base-32bit
python39-base-32bit-debuginfo
libpython3_9-1_0-debuginfo
python3.9 (Red Hat package)
python3.10 (Ubuntu package)
python3.10-minimal (Ubuntu package)
python3-docs
python3.10
mingw-python3
python310
libpython3_10-1_0
python310-base-32bit
python310-32bit-debuginfo
python310-base-32bit-debuginfo
python310-32bit
python310-doc-devhelp
python310-core-debugsource
python310-dbm
python310-dbm-debuginfo
libpython3_10-1_0-32bit-debuginfo
python310-idle
python310-base
python310-devel
python310-curses
python310-tools
libpython3_10-1_0-debuginfo
python310-tk-debuginfo
python310-curses-debuginfo
python310-testsuite-debuginfo
libpython3_10-1_0-32bit
python310-tk
python310-testsuite
python310-debugsource
python310-doc
python310-debuginfo
python310-base-debuginfo
python3.12 (Ubuntu package)
python3.12-minimal (Ubuntu package)
pypy
pypy3.7
pypy3.8
pypy3.9
pypy3.10
Red Hat OpenShift Container Platform
Voice Gateway
Dell Enterprise SONiC Distribution
IBM Qradar SIEM
Dell EMC Storage Monitoring and Reporting (SMR)
Dell EMC VxRail Appliance
PowerScale OneFS
Junos Space Security Director

Install updates from vendor's website.

CPython - update to 3.10.5
cflinuxfs3 - update to 0.311.0
OpenShift sandboxed containers - update to 1.3.1
QRadar Suite - update to 1.10.17.0
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.4.6, 2.5.3, 2.6.2
Red Hat Advanced Cluster Security for Kubernetes - update to 3.72
rh-python38-python (Red Hat package) - update to 3.8.14-1.el7
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - update to 4.11.5
OpenShift Logging - update to 5.3.12
python3.9-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.9.7-2ubuntu0.1
python3.5-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.5.22ubuntu0~16.04.13+esm1
python3.5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 3.5.22ubuntu0~16.04.13+esm1
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.7 (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.6.9-1~18.04ubuntu1.8
python3.6 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.6.9-1~18.04ubuntu1.8
python3.9 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.9.7-2ubuntu0.1
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.5, 3.8.10-0ubuntu1~20.04.10
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.5, 3.8.10-0ubuntu1~20.04.10
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
Voice Gateway - update to 1.0.8.4
Red Hat OpenShift distributed tracing (RHOSDT) - update to 2.6.0
python2.7-minimal (Ubuntu package) - addressed in versions 2.7.17-1~18.04ubuntu1.8, 2.7.18-1~20.04.3, 2.7.18-8ubuntu0.2, 2.7.18-13ubuntu1.1
python2.7 (Ubuntu package) - addressed in versions 2.7.17-1~18.04ubuntu1.8, 2.7.18-1~20.04.3, 2.7.18-8ubuntu0.2, 2.7.18-13ubuntu1.1
python2.7 - addressed in versions 2.7.18-22.fc35, 2.7.18-22.fc36, 2.7.18-22.fc37
python - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
libpython2_7-1_0-32bit - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
libpython2_7-1_0-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
libpython2_7-1_0-debuginfo-32bit - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1
libpython2_7-1_0 - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-32bit - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-base - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-base-32bit - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-base-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-base-debuginfo-32bit - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1
python-base-debugsource - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-curses - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-curses-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-debuginfo-32bit - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1
python-debugsource - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-demo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-devel - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-gdbm - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-gdbm-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-idle - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-tk - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-tk-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-xml - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-xml-debuginfo - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-doc - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
python-doc-pdf - addressed in versions 2.7.18-28.87.1, 2.7.18-33.11.1, 2.7.18-150000.41.1
libpython2_7-1_0-32bit-debuginfo - update to 2.7.18-150000.41.1
python-32bit-debuginfo - update to 2.7.18-150000.41.1
python-base-32bit-debuginfo - update to 2.7.18-150000.41.1
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710
python3-tk - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-debugsource - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
libpython3_4m1_0 - update to 3.4.10-25.93.1
libpython3_4m1_0-debuginfo - update to 3.4.10-25.93.1
python3 - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-base - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-base-debuginfo - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-base-debugsource - update to 3.4.10-25.93.1
python3-curses - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-curses-debuginfo - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-debuginfo - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-devel - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-devel-debuginfo - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-dbm - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-dbm-debuginfo - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-tk-debuginfo - addressed in versions 3.4.10-25.93.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
libpython3_4m1_0-32bit - update to 3.4.10-25.93.1
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.93.1
python3-base-debuginfo-32bit - update to 3.4.10-25.93.1
python3.4-minimal (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm1
python3.4 (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm1
python3 (Red Hat package) - update to 3.6.8-47.el8_6
python3.6 - addressed in versions 3.6.15-3.fc35, 3.6.15-9.fc36, 3.6.15-9.fc37
python36-devel - update to 3.6.15-24.1
libpython3_6m1_0 - addressed in versions 3.6.15-24.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-24.1, 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python36 - update to 3.6.15-24.1
python36-base - update to 3.6.15-24.1
python36-base-debuginfo - update to 3.6.15-24.1
python36-debuginfo - update to 3.6.15-24.1
python36-debugsource - update to 3.6.15-24.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-24.1, 3.6.15-150300.10.27.1
libpython3_6m1_0-debuginfo-32bit - update to 3.6.15-24.1
python3-idle - addressed in versions 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-tools - addressed in versions 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-testsuite - addressed in versions 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
python3-core-debugsource - addressed in versions 3.6.15-150000.3.106.1, 3.6.15-150300.10.27.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.27.1
python3-doc - update to 3.6.15-150300.10.27.1
python3-doc-devhelp - update to 3.6.15-150300.10.27.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.27.1
OpenManage Network Integration (OMNI) - update to 3.7
python3-debugsource - update to 3.7.9-22
python3-debug - update to 3.7.9-22
python3-help - update to 3.7.9-22
python3-debuginfo - update to 3.7.9-22
python3 - update to 3.7.9-22
python3-devel - update to 3.7.9-22
python3.7 - addressed in versions 3.7.13-2.fc35, 3.7.13-2.fc36, 3.7.13-2.fc37
python3.8 - addressed in versions 3.8.13-3.fc35, 3.8.13-3.fc36, 3.8.13-3.fc37
python3.9 - addressed in versions 3.9.13-2.fc35, 3.9.13-2.fc36, 3.9.13-2.fc37
python39-core-debugsource - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-curses - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-curses-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-dbm - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-dbm-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-debugsource - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-devel - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-doc - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-doc-devhelp - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-idle - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-testsuite - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-testsuite-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-tk - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-tools - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-tk-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
libpython3_9-1_0 - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
libpython3_9-1_0-32bit - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
libpython3_9-1_0-32bit-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-base-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-base - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39 - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-32bit - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-32bit-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-base-32bit - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python39-base-32bit-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
libpython3_9-1_0-debuginfo - addressed in versions 3.9.13-150300.4.13.1, 3.9.16-150300.4.24.1
python3.9 (Red Hat package) - update to 3.9.14-1.el9
python3 - update to 3.9.16
IBM Cloud Transformation Advisor - update to 3.10.1
python3.10 (Ubuntu package) - addressed in versions 3.10.4-3ubuntu0.1, 3.10.12-1~22.04.4
python3.10-minimal (Ubuntu package) - addressed in versions 3.10.4-3ubuntu0.1, 3.10.12-1~22.04.4
python3-docs - addressed in versions 3.10.5-1.fc35, 3.10.5-1.fc36
python3.10 - addressed in versions 3.10.5-2.fc35, 3.10.5-2.fc36, 3.10.5-2.fc37
mingw-python3 - addressed in versions 3.10.8-1.fc36, 3.10.8-1.fc37
python310 - update to 3.10.10-150400.4.22.1
libpython3_10-1_0 - update to 3.10.10-150400.4.22.1
python310-base-32bit - update to 3.10.10-150400.4.22.1
python310-32bit-debuginfo - update to 3.10.10-150400.4.22.1
python310-base-32bit-debuginfo - update to 3.10.10-150400.4.22.1
python310-32bit - update to 3.10.10-150400.4.22.1
python310-doc-devhelp - update to 3.10.10-150400.4.22.1
python310-core-debugsource - update to 3.10.10-150400.4.22.1
python310-dbm - update to 3.10.10-150400.4.22.1
python310-dbm-debuginfo - update to 3.10.10-150400.4.22.1
libpython3_10-1_0-32bit-debuginfo - update to 3.10.10-150400.4.22.1
python310-idle - update to 3.10.10-150400.4.22.1
python310-base - update to 3.10.10-150400.4.22.1
python310-devel - update to 3.10.10-150400.4.22.1
python310-curses - update to 3.10.10-150400.4.22.1
python310-tools - update to 3.10.10-150400.4.22.1
libpython3_10-1_0-debuginfo - update to 3.10.10-150400.4.22.1
python310-tk-debuginfo - update to 3.10.10-150400.4.22.1
python310-curses-debuginfo - update to 3.10.10-150400.4.22.1
python310-testsuite-debuginfo - update to 3.10.10-150400.4.22.1
libpython3_10-1_0-32bit - update to 3.10.10-150400.4.22.1
python310-tk - update to 3.10.10-150400.4.22.1
python310-testsuite - update to 3.10.10-150400.4.22.1
python310-debugsource - update to 3.10.10-150400.4.22.1
python310-doc - update to 3.10.10-150400.4.22.1
python310-debuginfo - update to 3.10.10-150400.4.22.1
python310-base-debuginfo - update to 3.10.10-150400.4.22.1
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
Enterprise SONiC - update to 4.1.2
Dell Enterprise SONiC Distribution - update to 4.4.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.4
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.0
OpenShift Virtualization - addressed in versions 4.11.1, 4.12.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
App Connect Enterprise Certified Container - addressed in versions 5.0.2, 6.2.0
pypy - addressed in versions 7.3.9-2.fc35, 7.3.9-2.fc36, 7.3.9-2.fc37
pypy3.7 - addressed in versions 7.3.9-2.3.7.fc35, 7.3.9-2.3.7.fc36, 7.3.9-2.3.7.fc37
pypy3.8 - addressed in versions 7.3.9-2.3.8.fc35, 7.3.9-2.3.8.fc36, 7.3.9-2.3.8.fc37
pypy3.9 - addressed in versions 7.3.9-2.3.9.fc35, 7.3.9-2.3.9.fc36, 7.3.9-2.3.9.fc37
pypy3.10 - addressed in versions 7.3.12-1.3.10.fc39, 7.3.12-1.3.10.fc40
IBM Qradar SIEM - update to 7.5.0 Update Pack 6
Dell EMC VxRail Appliance - update to 8.0.000
PowerScale OneFS - update to 9.5.0.6
Dell Data Protection Central - update to 19.7.0-9
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.1, 23.0.1
Junos Space Security Director - update to 24.1R3

• https://github.com/python/cpython/issues/68966
• https://bugs.python.org/issue24778
• https://security.netapp.com/advisory/ntap-20220616-0001/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XO2H6CKWLRGTTZCGUQVELW6LUH437Q3O/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FIRUTX47BJD2HYJDLMI7JJBVCYFAPKAQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ONXSGLASNLGFL57YU6WT6Y5YURSFV43U/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ERYMM2QVDPOJLX4LYXWYIQN5FOIJLDRY/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MYG3EMFR7ZHC46TDNM7SNWO64A3W7EUF/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y4E2WBEJ42CGLGDHD6ZXOLZ2W6G3YOVD/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/46KWPTI72SSEOF53DOYQBQOCN4QQB2GE/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FCIO2W4DUVVMI6L52QCC4TT2B3K5VWHS/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W5664BGZVTA46LQDNTYX5THG6CN4FYJX/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIOJUZ5JMEMGSKNISTOVI4PDP36FDL5Y/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KAY6VBNVEFUXKJF37WFHYXUSRDEK34N3/

• OS command injection in CPython
• SUSE update for python36
• SUSE update for python3
• SUSE update for python39
• SUSE update for python
• SUSE update for python
• SUSE update for python
• SUSE update for python3
• SUSE update for python3
• Ubuntu update for python2.7
• OS Command Injection in cflinuxfs3
• Red Hat Enterprise Linux 8 update for python3
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Logging 5.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes (RHACS)
• Multiple vulnerabilities in Dell Data Protection Central
• Red Hat Software Collections update for rh-python38-python
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.5
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Red Hat OpenShift distributed tracing (RHOSDT)
• Multiple vulnerabilities in OpenShift sandboxed containers
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Red Hat Enterprise Linux 8 update for the python38:3.8 and python38-devel:3.8 modules
• Red Hat Enterprise Linux 8 update for the python39:3.9 and python39-devel:3.9 modules
• Red Hat Enterprise Linux 8 update for the python27:2.7 module
• Red Hat Enterprise Linux 9 update for python3.9
• Multiple vulnerabilities in OpenShift Virtualization 4.11
• Slackware Linux update for python3
• OS command injection in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Ubuntu update for python3.9
• SUSE update for python39
• SUSE update for python310
• OS command injection in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Gentoo update for Python, PyPy3
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Dell PowerStore Family
• Fedora 40 update for pypy3.10
• Fedora 39 update for pypy3.10
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in IBM QRadar Suite software
• Multiple vulnerabilities in Dell EMC Enterprise SONiC
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• openEuler update for python3
• Ubuntu update for python3.10
• Fedora 37 update for python3.10
• Fedora 36 update for python3-docs, python3.10
• Fedora 35 update for python3-docs, python3.10
• Fedora 37 update for python3.9
• Fedora 36 update for python3.9
• Fedora 35 update for python3.9
• Fedora 37 update for python3.8
• Fedora 36 update for python3.8
• Fedora 35 update for python3.8
• Fedora 37 update for python3.7
• Fedora 37 update for python3.6
• Fedora 36 update for python3.7
• Fedora 35 update for python3.7
• Fedora 36 update for python3.6
• Fedora 35 update for python3.6
• Fedora 37 update for python2.7
• Fedora 35 update for python2.7
• Fedora 36 update for python2.7
• Fedora 37 update for pypy3.9
• Fedora 37 update for pypy3.7
• Fedora 37 update for pypy3.8
• Fedora 37 update for pypy
• Fedora 36 update for pypy3.9
• Fedora 35 update for pypy3.9
• Fedora 35 update for pypy3.8
• Fedora 36 update for pypy3.8
• Fedora 35 update for pypy3.7
• Fedora 36 update for pypy3.7
• Fedora 35 update for pypy
• Fedora 36 update for pypy
• Fedora 37 update for mingw-python3
• Fedora 36 update for mingw-python3
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution
• Multiple vulnerabilities in Junos Space Security Director Policy Enforcer module