Lucene search
K

MiracleLinux 8 : python39:3.9 and python39-devel:3.9 (AXSA:2024-8429:01)

🗓️ 20 Jan 2026 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 1 Views

MiracleLinux 8 has vulnerabilities in python39 and python39-devel per advisory 2024-8429: ReDoS, memory corruption, email parse, and cookie header issues.

Related
Refs
Code
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM InfoSphere Information Server is affected by urllib3 vulnerability (CVE-2023-43804)
29 Nov 202304:36
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite - IoT uses multiple third party dependencies which is vulnerable to CVEs.
7 Apr 202519:17
ibm
IBM Security Bulletins
Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs
31 Jan 202402:01
ibm
IBM Security Bulletins
Security Bulletin: A vulnerability in Python affects IBM Robotic Process Automation and could allow a remote authenticated attacker to obtain sensitive information (CVE-2023-43804).
2 Dec 202415:55
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in urllib3-1.26.16-py2.py3-none-any.whl
28 Mar 202411:47
ibm
IBM Security Bulletins
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service due to [CVE-2022-40897]
25 Jul 202313:39
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Certifi, Setuptools and Python may affect IBM Spectrum Protect Plus Microsoft File Systems Backup and Restore (CVE-2022-23491, CVE-2022-40897, CVE-2022-45061)
1 Feb 202310:43
ibm
IBM Security Bulletins
Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities
7 Mar 202515:14
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product
15 Jul 202515:44
ibm
IBM Security Bulletins
Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities
27 Sep 202313:24
ibm
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The package checks in this plugin were extracted from
# Miracle Linux Security Advisory AXSA:2024-8429:01.
##

include('compat.inc');

if (description)
{
  script_id(293254);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/20");

  script_cve_id(
    "CVE-2022-40897",
    "CVE-2023-23931",
    "CVE-2023-27043",
    "CVE-2023-43804"
  );

  script_name(english:"MiracleLinux 8 : python39:3.9 and python39-devel:3.9 (AXSA:2024-8429:01)");

  script_set_attribute(attribute:"synopsis", value:
"The remote MiracleLinux host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the
AXSA:2024-8429:01 advisory.

    * pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py (CVE-2022-40897)
      * python-cryptography: memory corruption via immutable objects (CVE-2023-23931)
      * python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple
    (CVE-2023-27043)
      * python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://tsn.miraclelinux.com/en/node/19613");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:N");
  script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:P");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2023-43804");
  script_set_attribute(attribute:"cvss4_score_source", value:"CVE-2022-40897");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"vendor_severity", value:"High");

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/12/22");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/08/29");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/01/20");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:PyYAML-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:numpy-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python-cffi-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python-cryptography-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python-lxml-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python-psutil-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python-psycopg2-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-Cython");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-PyMySQL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-attrs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-cffi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-chardet");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-cryptography");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-idna");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-iniconfig");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-lxml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-mod_wsgi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-more-itertools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-numpy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-numpy-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-numpy-f2py");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-packaging");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pluggy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-ply");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-psutil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-psycopg2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-psycopg2-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-psycopg2-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-py");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pybind11");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pybind11-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pycparser");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pyparsing");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pysocks");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pytest");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-pyyaml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-requests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-rpm-macros");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-scipy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-setuptools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-setuptools-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-six");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-toml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-urllib3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-wcwidth");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:python39-wheel-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:miracle:linux:scipy-debugsource");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:miracle:linux:8");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Miracle Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/MiracleLinux/release", "Host/MiracleLinux/rpm-list", "Host/cpu");

  exit(0);
}


include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'MIRACLE LINUX' >!< os_product) audit(AUDIT_OS_NOT, 'MIRACLE LINUX');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'MIRACLE LINUX');
if (! preg(pattern:"^8([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'MiracleLinux 8.x', 'MIRACLE LINUX ' + os_version);

if (!get_kb_item('Host/MiracleLinux/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('aarch64' >!< cpu && 'ppc' >!< cpu && 's390' >!< cpu && 'x86_64' >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'MIRACLE LINUX', cpu);

var module_ver = get_kb_item('Host/MiracleLinux/appstream/python39');
if (isnull(module_ver)) audit(AUDIT_PACKAGE_NOT_INSTALLED, 'Module python39:3.9');
if ('3.9' >!< module_ver) audit(AUDIT_PACKAGE_NOT_AFFECTED, 'Module python39:' + module_ver);

var constraints = {
  'python39:3.9': [
    {
      'release': '8',
      'pkgs': [
        {'reference':'numpy-debugsource-1.19.4-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python-cffi-debugsource-1.14.3-2.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python-cryptography-debugsource-3.3.1-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python-lxml-debugsource-4.6.5-1.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python-psutil-debugsource-5.8.0-4.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python-psycopg2-debugsource-2.8.6-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-attrs-20.3.0-2.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-cffi-1.14.3-2.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-chardet-3.0.4-19.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-cryptography-3.3.1-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-Cython-0.29.21-5.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-debug-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-debugsource-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-devel-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-idle-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-idna-2.10-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-iniconfig-1.1.1-2.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-libs-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-lxml-4.6.5-1.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-mod_wsgi-4.7.1-7.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-more-itertools-8.5.0-2.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-numpy-1.19.4-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-numpy-doc-1.19.4-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-numpy-f2py-1.19.4-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-packaging-20.4-4.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pip-20.2.4-9.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pip-wheel-20.2.4-9.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pluggy-0.13.1-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-ply-3.11-10.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-psutil-5.8.0-4.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-psycopg2-2.8.6-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-psycopg2-doc-2.8.6-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-psycopg2-tests-2.8.6-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-py-1.10.0-1.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pybind11-2.7.1-1.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pybind11-devel-2.7.1-1.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pycparser-2.20-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-PyMySQL-0.10.1-2.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pyparsing-2.4.7-5.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pysocks-1.7.1-4.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pytest-6.0.2-2.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-pyyaml-5.4.1-1.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-requests-2.25.0-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-rpm-macros-3.9.18-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-scipy-1.5.4-5.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-setuptools-50.3.2-5.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-setuptools-wheel-50.3.2-5.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-six-1.15.0-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-test-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-tkinter-3.9.18-3.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-toml-0.10.1-5.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-urllib3-1.25.10-5.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-wcwidth-0.2.5-3.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-wheel-0.35.1-4.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'python39-wheel-wheel-0.35.1-4.module+el8', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'PyYAML-debugsource-5.4.1-1.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'},
        {'reference':'scipy-debugsource-1.5.4-5.module+el8', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'0'}
      ]
    }
  ]
};

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
var appstreams_found = 0;
var appstream;
var appstream_name;
var appstream_version;
foreach var module (keys(constraints)) {
  appstream = NULL;
  appstream_name = NULL;
  appstream_version = NULL;
  appstream_split = split(module, sep:':', keep:FALSE);
  if (!empty_or_null(appstream_split)) {
    appstream_name = appstream_split[0];
    appstream_version = appstream_split[1];
    if (!empty_or_null(appstream_name)) appstream = get_one_kb_item('Host/MiracleLinux/appstream/' + appstream_name);
  }
  if (!empty_or_null(appstream) && appstream_version == appstream || appstream_name == 'all') {
    appstreams_found++;
    foreach var module_array ( constraints[module] ) {
      # Check that the target release is equal to the affected release
      if (!empty_or_null(module_array['release'])){
        if (module_array['release'] != os_release) continue;
      }
      if (!empty_or_null(module_array['sp'])){
        if (module_array['sp'] != os_sp) continue;
      }
      foreach var package_array ( module_array['pkgs'] ) {
        reference = NULL;
        sp = NULL;
        _cpu = NULL;
        el_string = NULL;
        rpm_spec_vers_cmp = NULL;
        epoch = NULL;
        allowmaj = NULL;
        exists_check = NULL;
        cves = NULL;
        if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
        if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
        if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
        if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
        if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
        if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
        if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
        if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
        if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
        if (reference &&
            (!exists_check || rpm_exists(rpm:exists_check)) &&
            rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
      }
    }
  }
}

if (!appstreams_found) audit(AUDIT_PACKAGE_NOT_INSTALLED, 'Module python39:3.9');
if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'PyYAML-debugsource / numpy-debugsource / python-cffi-debugsource / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Jan 2026 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 3.15.9 - 8.1
EPSS0.0095
SSVC
1