Headline
RHSA-2023:3935: Red Hat Security Advisory: python3 security update
An update for python3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Related CVEs:
- CVE-2023-24329: A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity.
Synopsis
Important: python3 security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
An update for python3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Description
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
- python: urllib.parse url blocklisting bypass (CVE-2023-24329)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
- Red Hat Enterprise Linux Server - AUS 8.2 x86_64
- Red Hat Enterprise Linux Server - TUS 8.2 x86_64
- Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
- Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2 x86_64
Fixes
- BZ - 2173917 - CVE-2023-24329 python: urllib.parse url blocklisting bypass
Red Hat Enterprise Linux Server - AUS 8.2
SRPM
python3-3.6.8-24.el8_2.1.src.rpm
SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f
x86_64
platform-python-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 525c19c2bd269c2df2b9a3e8c8ceff0d68108779d9622d80b21f5fa241c1a06b
platform-python-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 7fa0fb63ee6bcaaed1b4ff0e829b025c855df8197b63e300f2ab487e65c86f90
platform-python-debug-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 6c127701768cc6071ecb52f5d8d93f26b07302458132212df14e7bd522850dbe
platform-python-debug-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 292af78f51038dcdce192f62f1eec804657f90f688f9a79f3cba45c1e0f1f58b
platform-python-devel-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 0e219d673a125a1cb91e5698761007955e180d09318e3e46f9bd426e7837609f
platform-python-devel-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 63f4d104822906c8bb9f535c4f79b42f7b74afd9ce3561be4cec317ae88f4b94
python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad
python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad
python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5
python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5
python3-debugsource-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531
python3-debugsource-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531
python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50
python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50
python3-idle-3.6.8-24.el8_2.1.i686.rpm
SHA-256: d242e70d520b90ed688e7eeb70b3b503fc6f8e11630f580ba09222c0ed195835
python3-idle-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: a032c15ffe983434a0b861b297ce6a32fdfabd63d37eb1f9ddf42ea282f68ec4
python3-libs-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 24a192cf43b3083b065dcdf688d6bd9ae95ea65de556726aa46ecddee8aeb653
python3-libs-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 1e874b97d8ac677cbaeaaf10255836e270938cdbec15c6f3f0621dcd668fc98a
python3-test-3.6.8-24.el8_2.1.i686.rpm
SHA-256: c0e791d0b3ba9ffd9e98df7900a8b1ca84cb7856bb11a96b387dd5a8c993a51f
python3-test-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: c8f45441a312f784d12ba88c6c350d7f74c8a45452483fa97d1055a67398f322
python3-tkinter-3.6.8-24.el8_2.1.i686.rpm
SHA-256: b5bb3381217fc4e79f14e4ec8ee5401a129e02e8c10da57a49f00beabb76f10e
python3-tkinter-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: ee6a389da114ff22be24f32880dbd198b2a32046a4f14c0c96f1b063dd9f9c82
Red Hat Enterprise Linux Server - TUS 8.2
SRPM
python3-3.6.8-24.el8_2.1.src.rpm
SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f
x86_64
platform-python-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 525c19c2bd269c2df2b9a3e8c8ceff0d68108779d9622d80b21f5fa241c1a06b
platform-python-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 7fa0fb63ee6bcaaed1b4ff0e829b025c855df8197b63e300f2ab487e65c86f90
platform-python-debug-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 6c127701768cc6071ecb52f5d8d93f26b07302458132212df14e7bd522850dbe
platform-python-debug-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 292af78f51038dcdce192f62f1eec804657f90f688f9a79f3cba45c1e0f1f58b
platform-python-devel-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 0e219d673a125a1cb91e5698761007955e180d09318e3e46f9bd426e7837609f
platform-python-devel-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 63f4d104822906c8bb9f535c4f79b42f7b74afd9ce3561be4cec317ae88f4b94
python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad
python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad
python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5
python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5
python3-debugsource-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531
python3-debugsource-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531
python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50
python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50
python3-idle-3.6.8-24.el8_2.1.i686.rpm
SHA-256: d242e70d520b90ed688e7eeb70b3b503fc6f8e11630f580ba09222c0ed195835
python3-idle-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: a032c15ffe983434a0b861b297ce6a32fdfabd63d37eb1f9ddf42ea282f68ec4
python3-libs-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 24a192cf43b3083b065dcdf688d6bd9ae95ea65de556726aa46ecddee8aeb653
python3-libs-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 1e874b97d8ac677cbaeaaf10255836e270938cdbec15c6f3f0621dcd668fc98a
python3-test-3.6.8-24.el8_2.1.i686.rpm
SHA-256: c0e791d0b3ba9ffd9e98df7900a8b1ca84cb7856bb11a96b387dd5a8c993a51f
python3-test-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: c8f45441a312f784d12ba88c6c350d7f74c8a45452483fa97d1055a67398f322
python3-tkinter-3.6.8-24.el8_2.1.i686.rpm
SHA-256: b5bb3381217fc4e79f14e4ec8ee5401a129e02e8c10da57a49f00beabb76f10e
python3-tkinter-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: ee6a389da114ff22be24f32880dbd198b2a32046a4f14c0c96f1b063dd9f9c82
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2
SRPM
python3-3.6.8-24.el8_2.1.src.rpm
SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f
ppc64le
platform-python-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 94c735643a730dcfd560e43f96fd67740033d59d299626e1357648047c13ddc7
platform-python-debug-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 7bf3252c5bbd0840e4f01486c5d9ba80c08cef9fb938fd2e20c9ae88960c8f42
platform-python-devel-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 0ffdc3b2aaa34b4725b1aca822f610dada063b178d2f25dec6eedba70673610d
python3-debuginfo-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: c515f8d03f0b6b492c8bcc2a7cc440726bb84ca6a40436ab079db8b12fcf8901
python3-debuginfo-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: c515f8d03f0b6b492c8bcc2a7cc440726bb84ca6a40436ab079db8b12fcf8901
python3-debugsource-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: dfc94e3d7930ffd2372f57dc7836db4a96fe2b4682270a6e4207dd89bb6cd4a9
python3-debugsource-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: dfc94e3d7930ffd2372f57dc7836db4a96fe2b4682270a6e4207dd89bb6cd4a9
python3-idle-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 28a23b1dbd833e4ee04c8f15606079f8d195ec7150e9375de66852d9637d734b
python3-libs-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 08723c158e6c6d0bf218ce81dd4717947c4b5e348cd387114e2e15f060d67304
python3-test-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 9cbbda4170ef84abb7beba782a6bd7eecd6ce40b260df2d948d270c460bd3484
python3-tkinter-3.6.8-24.el8_2.1.ppc64le.rpm
SHA-256: 8a734ee70f84975dc2b47277f4c3d53c4b11553385482942b4cbc343003d4d22
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2
SRPM
python3-3.6.8-24.el8_2.1.src.rpm
SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f
x86_64
platform-python-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 525c19c2bd269c2df2b9a3e8c8ceff0d68108779d9622d80b21f5fa241c1a06b
platform-python-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 7fa0fb63ee6bcaaed1b4ff0e829b025c855df8197b63e300f2ab487e65c86f90
platform-python-debug-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 6c127701768cc6071ecb52f5d8d93f26b07302458132212df14e7bd522850dbe
platform-python-debug-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 292af78f51038dcdce192f62f1eec804657f90f688f9a79f3cba45c1e0f1f58b
platform-python-devel-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 0e219d673a125a1cb91e5698761007955e180d09318e3e46f9bd426e7837609f
platform-python-devel-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 63f4d104822906c8bb9f535c4f79b42f7b74afd9ce3561be4cec317ae88f4b94
python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad
python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad
python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5
python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5
python3-debugsource-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531
python3-debugsource-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531
python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50
python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50
python3-idle-3.6.8-24.el8_2.1.i686.rpm
SHA-256: d242e70d520b90ed688e7eeb70b3b503fc6f8e11630f580ba09222c0ed195835
python3-idle-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: a032c15ffe983434a0b861b297ce6a32fdfabd63d37eb1f9ddf42ea282f68ec4
python3-libs-3.6.8-24.el8_2.1.i686.rpm
SHA-256: 24a192cf43b3083b065dcdf688d6bd9ae95ea65de556726aa46ecddee8aeb653
python3-libs-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: 1e874b97d8ac677cbaeaaf10255836e270938cdbec15c6f3f0621dcd668fc98a
python3-test-3.6.8-24.el8_2.1.i686.rpm
SHA-256: c0e791d0b3ba9ffd9e98df7900a8b1ca84cb7856bb11a96b387dd5a8c993a51f
python3-test-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: c8f45441a312f784d12ba88c6c350d7f74c8a45452483fa97d1055a67398f322
python3-tkinter-3.6.8-24.el8_2.1.i686.rpm
SHA-256: b5bb3381217fc4e79f14e4ec8ee5401a129e02e8c10da57a49f00beabb76f10e
python3-tkinter-3.6.8-24.el8_2.1.x86_64.rpm
SHA-256: ee6a389da114ff22be24f32880dbd198b2a32046a4f14c0c96f1b063dd9f9c82
Related news
IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808.
Red Hat Security Advisory 2023-4972-01 - Multicluster Engine for Kubernetes 2.1.8 images Multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy. Issues addressed include a bypass vulnerability.
A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. "urlparse has a parsing problem when the entire URL starts with blank characters," the CERT Coordination Center (CERT/CC) said in a Friday
Red Hat Security Advisory 2023-4421-01 - OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.12.5 images.
Red Hat Security Advisory 2023-4290-01 - OpenShift sandboxed containers 1.4.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
OpenShift sandboxed containers 1.4.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-3089: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.
An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-24329: A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity.
Red Hat Security Advisory 2023-4241-01 - Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform.
Red Hat OpenShift Container Platform release 4.13.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41717: A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server c...
Red Hat OpenShift Container Platform release 4.11.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-21235: A flaw was found in the VCS package, caused by improper validation of user-supplied input. By using a specially-crafted argument, a remote attacker could execute arbitrary commands o...
Red Hat OpenShift Service Mesh 2.3.5 Containers Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. * CVE-2023-3089: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptog...
Red Hat Security Advisory 2023-4032-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.
Red Hat Security Advisory 2023-3925-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.12.23.
Red Hat Security Advisory 2023-3936-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.
Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes new features and bug fixes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-27191: A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability. * CVE...
Red Hat Security Advisory 2023-3614-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.13.4.
Red Hat Security Advisory 2023-3776-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.
Red Hat OpenShift Container Platform release 4.13.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number...
Red Hat Security Advisory 2023-3664-01 - Release of Security Advisory for the OpenShift Jenkins image and Jenkins agent base image.
Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1705: A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid. * CVE-2022-2880: A flaw was found in the golang package, where reques...
Red Hat Security Advisory 2023-3556-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.
An update for python3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-24329: A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity.
Red Hat Security Advisory 2023-3550-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.
Ubuntu Security Notice 5888-1 - It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. Hamza Avvan discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to execute arbitrary code.