Most recent entries from all

ALSA-2024:4766 — Low: python3 security update

Affected: AlmaLinux:9: python3.11, AlmaLinux:9: python3.11-debug, AlmaLinux:9: python3.11-devel, AlmaLinux:9: python3.11-idle, AlmaLinux:9: python3.11-libs, AlmaLinux:9: python3.11-test, AlmaLinux:9: python3.11-tkinter

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* python: incorrect IPv4 and IPv6 private ranges (CVE-2024-4032)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-05196

BELL-CVE-2024-4032

Affected: Alpaquita:23: python3, Alpaquita:stream: python3, BellSoft Hardened Containers:23: python3, BellSoft Hardened Containers:stream: python3

BIT-libpython-2024-4032 — Incorrect IPv4 and IPv6 private ranges

Affected: Bitnami: libpython

The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries.

CPython 3.12.4 and 3.13.0 contain updated information from these registries and thus have the intended behavior.

certfr-2024-avi-0540 — De multiples vulnérabilités ont été découvertes dans Python. Elles permettent à un attaquant de provoquer un contournem…

certfr-2024-avi-0540

Withdrawn: CLEANSTART-2026-CQ39979 — Security fixes in cassandra 5.0.6-r2

Withdrawn by the publisher.

Affected: CleanStart: cassandra

Package cassandra version 5.0.6-r2 fixes 26 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-pr98-23f8-jwxv, ghsa-25qh-j22f-pwp8, ghsa-6v67-2wr5-gvf4, ghsa-qqpg-mvqg-649v...

EUVD-2026-258651

fkie_cve-2024-4032

CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

GHSA-mh6q-v4mp-2cc7

CPython 3.12.4 and 3.13.0a6 contain updated information from these registries and thus have the intended behavior.

gsd-2024-4032

msrc_CVE-2024-4032 — Incorrect IPv4 and IPv6 private ranges

msrc_CVE-2024-4032

OESA-2024-1940 — python3 security update

Affected: openEuler:24.03-LTS: python3

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C++ (or other languages, depending on the chosen implementation). Python is also usable as an extension language for applications written in other languages that need easy-to-use scripting or automation interfaces. Security Fix(es): A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.(CVE-2024-0397) The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and ipaddress.IPv6Network classes, where values wouldn’t be returned in accordance with the latest information from the IANA Special-Purpose Address Registries. CPython 3.12.4 and 3.13.0a6 contain updated information from…

openSUSE-SU-2024:14078-1 — python38-3.8.19-4.1 on GA media

python38-3.8.19-4.1 on GA media

RHSA-2024:5962 — Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update

python: incorrect IPv4 and IPv6 private ranges pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

SUSE-EL-9-CLIENT-TOOLS-2024-4029 — Security update for SUSE Manager Salt Bundle

Security update for SUSE Manager Salt Bundle

UBUNTU-CVE-2024-4032

Affected: Ubuntu:Pro:14.04:LTS: python3.4, Ubuntu:Pro:14.04:LTS: python3.5, Ubuntu:Pro:16.04:LTS: python3.5, Ubuntu:Pro:18.04:LTS: python3.6, Ubuntu:Pro:18.04:LTS: python3.7, Ubuntu:Pro:18.04:LTS: python3.8, Ubuntu:20.04:LTS: python3.8, Ubuntu:Pro:20.04:LTS: python3.9, Ubuntu:22.04:LTS: python3.10, Ubuntu:Pro:22.04:LTS: python3.11 and 1 more

WID-SEC-W-2024-1396 — Python: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und Umgehung von Sicherheitsmaßnahmen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um Dateien zu manipulieren und Sicherheitsmaßnahmen zu umgehen.