Security
Headlines
HeadlinesLatestCVEs

Headline

RHSA-2023:3935: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

  • CVE-2023-24329: A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity.
Red Hat Security Data
#vulnerability#linux#red_hat#sap

Synopsis

Important: python3 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: urllib.parse url blocklisting bypass (CVE-2023-24329)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Products

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64
  • Red Hat Enterprise Linux Server - TUS 8.2 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2 x86_64

Fixes

  • BZ - 2173917 - CVE-2023-24329 python: urllib.parse url blocklisting bypass

Red Hat Enterprise Linux Server - AUS 8.2

SRPM

python3-3.6.8-24.el8_2.1.src.rpm

SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f

x86_64

platform-python-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 525c19c2bd269c2df2b9a3e8c8ceff0d68108779d9622d80b21f5fa241c1a06b

platform-python-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 7fa0fb63ee6bcaaed1b4ff0e829b025c855df8197b63e300f2ab487e65c86f90

platform-python-debug-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 6c127701768cc6071ecb52f5d8d93f26b07302458132212df14e7bd522850dbe

platform-python-debug-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 292af78f51038dcdce192f62f1eec804657f90f688f9a79f3cba45c1e0f1f58b

platform-python-devel-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 0e219d673a125a1cb91e5698761007955e180d09318e3e46f9bd426e7837609f

platform-python-devel-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 63f4d104822906c8bb9f535c4f79b42f7b74afd9ce3561be4cec317ae88f4b94

python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad

python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad

python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5

python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5

python3-debugsource-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531

python3-debugsource-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531

python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50

python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50

python3-idle-3.6.8-24.el8_2.1.i686.rpm

SHA-256: d242e70d520b90ed688e7eeb70b3b503fc6f8e11630f580ba09222c0ed195835

python3-idle-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: a032c15ffe983434a0b861b297ce6a32fdfabd63d37eb1f9ddf42ea282f68ec4

python3-libs-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 24a192cf43b3083b065dcdf688d6bd9ae95ea65de556726aa46ecddee8aeb653

python3-libs-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 1e874b97d8ac677cbaeaaf10255836e270938cdbec15c6f3f0621dcd668fc98a

python3-test-3.6.8-24.el8_2.1.i686.rpm

SHA-256: c0e791d0b3ba9ffd9e98df7900a8b1ca84cb7856bb11a96b387dd5a8c993a51f

python3-test-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: c8f45441a312f784d12ba88c6c350d7f74c8a45452483fa97d1055a67398f322

python3-tkinter-3.6.8-24.el8_2.1.i686.rpm

SHA-256: b5bb3381217fc4e79f14e4ec8ee5401a129e02e8c10da57a49f00beabb76f10e

python3-tkinter-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: ee6a389da114ff22be24f32880dbd198b2a32046a4f14c0c96f1b063dd9f9c82

Red Hat Enterprise Linux Server - TUS 8.2

SRPM

python3-3.6.8-24.el8_2.1.src.rpm

SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f

x86_64

platform-python-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 525c19c2bd269c2df2b9a3e8c8ceff0d68108779d9622d80b21f5fa241c1a06b

platform-python-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 7fa0fb63ee6bcaaed1b4ff0e829b025c855df8197b63e300f2ab487e65c86f90

platform-python-debug-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 6c127701768cc6071ecb52f5d8d93f26b07302458132212df14e7bd522850dbe

platform-python-debug-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 292af78f51038dcdce192f62f1eec804657f90f688f9a79f3cba45c1e0f1f58b

platform-python-devel-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 0e219d673a125a1cb91e5698761007955e180d09318e3e46f9bd426e7837609f

platform-python-devel-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 63f4d104822906c8bb9f535c4f79b42f7b74afd9ce3561be4cec317ae88f4b94

python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad

python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad

python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5

python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5

python3-debugsource-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531

python3-debugsource-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531

python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50

python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50

python3-idle-3.6.8-24.el8_2.1.i686.rpm

SHA-256: d242e70d520b90ed688e7eeb70b3b503fc6f8e11630f580ba09222c0ed195835

python3-idle-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: a032c15ffe983434a0b861b297ce6a32fdfabd63d37eb1f9ddf42ea282f68ec4

python3-libs-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 24a192cf43b3083b065dcdf688d6bd9ae95ea65de556726aa46ecddee8aeb653

python3-libs-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 1e874b97d8ac677cbaeaaf10255836e270938cdbec15c6f3f0621dcd668fc98a

python3-test-3.6.8-24.el8_2.1.i686.rpm

SHA-256: c0e791d0b3ba9ffd9e98df7900a8b1ca84cb7856bb11a96b387dd5a8c993a51f

python3-test-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: c8f45441a312f784d12ba88c6c350d7f74c8a45452483fa97d1055a67398f322

python3-tkinter-3.6.8-24.el8_2.1.i686.rpm

SHA-256: b5bb3381217fc4e79f14e4ec8ee5401a129e02e8c10da57a49f00beabb76f10e

python3-tkinter-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: ee6a389da114ff22be24f32880dbd198b2a32046a4f14c0c96f1b063dd9f9c82

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2

SRPM

python3-3.6.8-24.el8_2.1.src.rpm

SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f

ppc64le

platform-python-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 94c735643a730dcfd560e43f96fd67740033d59d299626e1357648047c13ddc7

platform-python-debug-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 7bf3252c5bbd0840e4f01486c5d9ba80c08cef9fb938fd2e20c9ae88960c8f42

platform-python-devel-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 0ffdc3b2aaa34b4725b1aca822f610dada063b178d2f25dec6eedba70673610d

python3-debuginfo-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: c515f8d03f0b6b492c8bcc2a7cc440726bb84ca6a40436ab079db8b12fcf8901

python3-debuginfo-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: c515f8d03f0b6b492c8bcc2a7cc440726bb84ca6a40436ab079db8b12fcf8901

python3-debugsource-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: dfc94e3d7930ffd2372f57dc7836db4a96fe2b4682270a6e4207dd89bb6cd4a9

python3-debugsource-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: dfc94e3d7930ffd2372f57dc7836db4a96fe2b4682270a6e4207dd89bb6cd4a9

python3-idle-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 28a23b1dbd833e4ee04c8f15606079f8d195ec7150e9375de66852d9637d734b

python3-libs-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 08723c158e6c6d0bf218ce81dd4717947c4b5e348cd387114e2e15f060d67304

python3-test-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 9cbbda4170ef84abb7beba782a6bd7eecd6ce40b260df2d948d270c460bd3484

python3-tkinter-3.6.8-24.el8_2.1.ppc64le.rpm

SHA-256: 8a734ee70f84975dc2b47277f4c3d53c4b11553385482942b4cbc343003d4d22

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2

SRPM

python3-3.6.8-24.el8_2.1.src.rpm

SHA-256: 6bd3b7506f9c65809cf3fb2b2d6bfc6fa97d47aafc96d3d67ec61c7150ff966f

x86_64

platform-python-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 525c19c2bd269c2df2b9a3e8c8ceff0d68108779d9622d80b21f5fa241c1a06b

platform-python-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 7fa0fb63ee6bcaaed1b4ff0e829b025c855df8197b63e300f2ab487e65c86f90

platform-python-debug-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 6c127701768cc6071ecb52f5d8d93f26b07302458132212df14e7bd522850dbe

platform-python-debug-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 292af78f51038dcdce192f62f1eec804657f90f688f9a79f3cba45c1e0f1f58b

platform-python-devel-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 0e219d673a125a1cb91e5698761007955e180d09318e3e46f9bd426e7837609f

platform-python-devel-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 63f4d104822906c8bb9f535c4f79b42f7b74afd9ce3561be4cec317ae88f4b94

python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad

python3-debuginfo-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 2a882e41d2b9815809296b73817217353aeba679406d1c512490d36055747bad

python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5

python3-debuginfo-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: dae95e5080013106b78d820d6abee81c13ca607c5a975a0118764cd33b53e3b5

python3-debugsource-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531

python3-debugsource-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 44c55fa80fb38c4879f1526386c20ff522790b7911a336810f32cafba4749531

python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50

python3-debugsource-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 13e76e331168dd036509b2c24ffe39ed31d8d42f084e8d7b727a660d35165a50

python3-idle-3.6.8-24.el8_2.1.i686.rpm

SHA-256: d242e70d520b90ed688e7eeb70b3b503fc6f8e11630f580ba09222c0ed195835

python3-idle-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: a032c15ffe983434a0b861b297ce6a32fdfabd63d37eb1f9ddf42ea282f68ec4

python3-libs-3.6.8-24.el8_2.1.i686.rpm

SHA-256: 24a192cf43b3083b065dcdf688d6bd9ae95ea65de556726aa46ecddee8aeb653

python3-libs-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: 1e874b97d8ac677cbaeaaf10255836e270938cdbec15c6f3f0621dcd668fc98a

python3-test-3.6.8-24.el8_2.1.i686.rpm

SHA-256: c0e791d0b3ba9ffd9e98df7900a8b1ca84cb7856bb11a96b387dd5a8c993a51f

python3-test-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: c8f45441a312f784d12ba88c6c350d7f74c8a45452483fa97d1055a67398f322

python3-tkinter-3.6.8-24.el8_2.1.i686.rpm

SHA-256: b5bb3381217fc4e79f14e4ec8ee5401a129e02e8c10da57a49f00beabb76f10e

python3-tkinter-3.6.8-24.el8_2.1.x86_64.rpm

SHA-256: ee6a389da114ff22be24f32880dbd198b2a32046a4f14c0c96f1b063dd9f9c82

Related news

CVE-2023-43041: Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities in components.

IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID: 266808.

Red Hat Security Advisory 2023-4972-01

Red Hat Security Advisory 2023-4972-01 - Multicluster Engine for Kubernetes 2.1.8 images Multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy. Issues addressed include a bypass vulnerability.

New Python URL Parsing Flaw Enables Command Injection Attacks

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution. "urlparse has a parsing problem when the entire URL starts with blank characters," the CERT Coordination Center (CERT/CC) said in a Friday

Red Hat Security Advisory 2023-4421-01

Red Hat Security Advisory 2023-4421-01 - OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform. This advisory contains OpenShift Virtualization 4.12.5 images.

Red Hat Security Advisory 2023-4290-01

Red Hat Security Advisory 2023-4290-01 - OpenShift sandboxed containers 1.4.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

RHSA-2023:4290: Red Hat Security Advisory: OpenShift sandboxed containers 1.4.1 security update

OpenShift sandboxed containers 1.4.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-3089: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated.

RHSA-2023:4282: Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-24329: A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity.

Red Hat Security Advisory 2023-4241-01

Red Hat Security Advisory 2023-4241-01 - Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform.

RHSA-2023:4091: Red Hat Security Advisory: OpenShift Container Platform 4.13.5 security update

Red Hat OpenShift Container Platform release 4.13.5 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41717: A flaw was found in the net/http library of the golang package. This flaw allows an attacker to cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server c...

RHSA-2023:4053: Red Hat Security Advisory: OpenShift Container Platform 4.11.45 bug fix and security update

Red Hat OpenShift Container Platform release 4.11.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-21235: A flaw was found in the VCS package, caused by improper validation of user-supplied input. By using a specially-crafted argument, a remote attacker could execute arbitrary commands o...

RHSA-2023:4113: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.3.5 security update

Red Hat OpenShift Service Mesh 2.3.5 Containers Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests. * CVE-2023-3089: A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptog...

Red Hat Security Advisory 2023-4032-01

Red Hat Security Advisory 2023-4032-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.

Red Hat Security Advisory 2023-3925-01

Red Hat Security Advisory 2023-3925-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.12.23.

Red Hat Security Advisory 2023-3936-01

Red Hat Security Advisory 2023-3936-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.

RHSA-2023:3943: Red Hat Security Advisory: ACS 4.1 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security (RHACS). The updated image includes new features and bug fixes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-27191: A broken cryptographic algorithm flaw was found in golang.org/x/crypto/ssh. This issue causes a client to fail authentication with RSA keys to servers that reject signature algorithms based on SHA-2, enabling an attacker to crash the server, resulting in a loss of availability. * CVE...

Red Hat Security Advisory 2023-3614-01

Red Hat Security Advisory 2023-3614-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.13.4.

Red Hat Security Advisory 2023-3776-01

Red Hat Security Advisory 2023-3776-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.

RHSA-2023:3614: Red Hat Security Advisory: OpenShift Container Platform 4.13.4 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.4 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of [impact]. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-41723: A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number...

Red Hat Security Advisory 2023-3664-01

Red Hat Security Advisory 2023-3664-01 - Release of Security Advisory for the OpenShift Jenkins image and Jenkins agent base image.

RHSA-2023:3664: Red Hat Security Advisory: OpenShift Jenkins image and Jenkins agent base image security update

Release of Bug Advisories for the OpenShift Jenkins image and Jenkins agent base image. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2022-1705: A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating "chunked" encoding. This issue could allow request smuggling, but only if combined with an intermediate server that also improperly accepts the header as invalid. * CVE-2022-2880: A flaw was found in the golang package, where reques...

Red Hat Security Advisory 2023-3556-01

Red Hat Security Advisory 2023-3556-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.

RHSA-2023:3556: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-24329: A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity.

Red Hat Security Advisory 2023-3550-01

Red Hat Security Advisory 2023-3550-01 - Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Issues addressed include a bypass vulnerability.

Ubuntu Security Notice USN-5888-1

Ubuntu Security Notice 5888-1 - It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. Hamza Avvan discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to execute arbitrary code.