Lucene search
K

Oracle Linux 8 : python39:3.9 / and / python39-devel:3.9 (ELSA-2024-8359)

🗓️ 25 Oct 2024 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 13 Views

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-8359 advisory

Related
Refs
Code
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
15 Mar 202500:18
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to regular expression DoS and command injection due to the python package (CVE-2024-6232, CVE-2024-9287)
23 Jul 202516:09
ibm
IBM Security Bulletins
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
4 Dec 202410:17
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite - Iot Component uses axios 1.7.9 and Python-3.8.17 which is vulnerable to CVE-2023-40217, CVE-2024-6232, CVE-2022-40897, CVE-2024-6345, CVE-2023-5752 and CVE-2025-27152
25 Jun 202508:00
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
28 Mar 202517:38
ibm
IBM Security Bulletins
Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities
27 Feb 202513:56
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to several issues due to the Python package (CVE-2024-6232, CVE-2024-7592, CVE-2024-7592)
23 Jul 202513:31
ibm
IBM Security Bulletins
Security Bulletin: IBM Concert Software is vulnerable to multiple issues
7 Mar 202516:09
ibm
IBM Security Bulletins
Security Bulletin: IBM Maximo Application Suite - Iot Component uses axios 1.7.9 and Python-3.8.17 which is vulnerable to CVE-2023-40217, CVE-2024-6232, CVE-2022-40897, CVE-2024-6345, CVE-2023-5752 and CVE-2025-27152
25 Jun 202507:57
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in Python CPython affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.
28 Mar 202515:53
ibm
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Oracle Linux Security Advisory ELSA-2024-8359.
##

include('compat.inc');

if (description)
{
  script_id(209649);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/11");

  script_cve_id("CVE-2024-6232");

  script_name(english:"Oracle Linux 8 : python39:3.9 / and / python39-devel:3.9 (ELSA-2024-8359)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Oracle Linux host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the
ELSA-2024-8359 advisory.

    mod_wsgi
    numpy
    python39
    [3.9.20-1]
    - Update to 3.9.20
    Resolves: RHEL-60007

    python3x-pip
    python3x-setuptools
    python3x-six
    python-cffi
    python-chardet
    python-cryptography
    python-idna
    python-lxml
    python-ply
    python-psutil
    python-psycopg2
    python-pycparser
    python-PyMySQL
    python-pysocks
    python-requests
    python-toml
    python-urllib3
    python-wheel
    PyYAML
    scipy

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://linux.oracle.com/errata/ELSA-2024-8359.html");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-6232");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/09/03");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/10/24");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/10/25");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:8");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-PyMySQL");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-cffi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-chardet");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-cryptography");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-debug");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-idle");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-idna");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-libs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-lxml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-mod_wsgi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-numpy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-numpy-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-numpy-f2py");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-pip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-pip-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-ply");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-psutil");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-psycopg2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-psycopg2-doc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-psycopg2-tests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-pycparser");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-pysocks");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-pyyaml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-requests");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-rpm-macros");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-scipy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-setuptools");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-setuptools-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-six");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-tkinter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-toml");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-urllib3");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-wheel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:python39-wheel-wheel");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Oracle Linux Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2024-2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/local_checks_enabled");

  exit(0);
}


include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:os_product)) audit(AUDIT_OS_NOT, 'Oracle Linux');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Oracle Linux');
if (! preg(pattern:"^8([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'Oracle Linux 8.x', 'Oracle Linux ' + os_version);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Oracle Linux', cpu);

var constraints = {
  'python39-devel:3.9': [
    {
      'release': '8',
      'pkgs': [
        {'reference':'python39-debug-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-debug-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE}
      ]
    },
  ],
  'python39:3.9': [
    {
      'release': '8',
      'pkgs': [
        {'reference':'python39-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-PyMySQL-0.10.1-2.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-cffi-1.14.3-2.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-chardet-3.0.4-19.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-cryptography-3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-devel-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-idle-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-idna-2.10-4.module+el8.10.0+90341+71ca88f4', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-libs-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-lxml-4.6.5-1.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-mod_wsgi-4.7.1-7.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-numpy-1.19.4-3.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-numpy-doc-1.19.4-3.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-numpy-f2py-1.19.4-3.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pip-20.2.4-9.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pip-wheel-20.2.4-9.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-ply-3.11-10.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psutil-5.8.0-4.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psycopg2-2.8.6-3.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psycopg2-doc-2.8.6-3.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psycopg2-tests-2.8.6-3.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pycparser-2.20-3.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pysocks-1.7.1-4.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pyyaml-5.4.1-1.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-requests-2.25.0-3.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-rpm-macros-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-scipy-1.5.4-5.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-setuptools-50.3.2-6.module+el8.10.0+90395+b6c4aad1', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-setuptools-wheel-50.3.2-6.module+el8.10.0+90395+b6c4aad1', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-six-1.15.0-3.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-test-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-tkinter-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-toml-0.10.1-5.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-urllib3-1.25.10-5.module+el8.10.0+90269+2fa22b99', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-wheel-0.35.1-4.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'python39-wheel-wheel-0.35.1-4.module+el8.9.0+90016+9c2d6573', 'cpu':'aarch64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'python39-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-PyMySQL-0.10.1-2.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-cffi-1.14.3-2.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-chardet-3.0.4-19.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-cryptography-3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-devel-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-idle-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-idna-2.10-4.module+el8.10.0+90341+71ca88f4', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-libs-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-lxml-4.6.5-1.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-mod_wsgi-4.7.1-7.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-numpy-1.19.4-3.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-numpy-doc-1.19.4-3.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-numpy-f2py-1.19.4-3.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pip-20.2.4-9.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pip-wheel-20.2.4-9.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-ply-3.11-10.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psutil-5.8.0-4.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psycopg2-2.8.6-3.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psycopg2-doc-2.8.6-3.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-psycopg2-tests-2.8.6-3.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pycparser-2.20-3.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pysocks-1.7.1-4.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-pyyaml-5.4.1-1.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-requests-2.25.0-3.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-rpm-macros-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-scipy-1.5.4-5.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-setuptools-50.3.2-6.module+el8.10.0+90395+b6c4aad1', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-setuptools-wheel-50.3.2-6.module+el8.10.0+90395+b6c4aad1', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-six-1.15.0-3.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-test-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-tkinter-3.9.20-1.module+el8.10.0+90419+54594e05', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-toml-0.10.1-5.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-urllib3-1.25.10-5.module+el8.10.0+90269+2fa22b99', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE},
        {'reference':'python39-wheel-0.35.1-4.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'},
        {'reference':'python39-wheel-wheel-0.35.1-4.module+el8.9.0+90016+9c2d6573', 'cpu':'x86_64', 'rpm_spec_vers_cmp':TRUE, 'epoch':'1'}
      ]
    }
  ]
};

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
var appstreams_found = 0;
var appstream;
var appstream_name;
var appstream_version;
foreach var module (keys(constraints)) {
  appstream = NULL;
  appstream_name = NULL;
  appstream_version = NULL;
  appstream_split = split(module, sep:':', keep:FALSE);
  if (!empty_or_null(appstream_split)) {
    appstream_name = appstream_split[0];
    appstream_version = appstream_split[1];
    if (!empty_or_null(appstream_name)) appstream = get_one_kb_item('Host/RedHat/appstream/' + appstream_name);
  }
  if (!empty_or_null(appstream) && appstream_version == appstream || appstream_name == 'all') {
    appstreams_found++;
    foreach var module_array ( constraints[module] ) {
      # Check that the target release is equal to the affected release
      if (!empty_or_null(module_array['release'])){
        if (module_array['release'] != os_release) continue;
      }
      if (!empty_or_null(module_array['sp'])){
        if (module_array['sp'] != os_sp) continue;
      }
      foreach var package_array ( module_array['pkgs'] ) {
        reference = NULL;
        sp = NULL;
        _cpu = NULL;
        el_string = NULL;
        rpm_spec_vers_cmp = NULL;
        epoch = NULL;
        allowmaj = NULL;
        exists_check = NULL;
        cves = NULL;
        if (!empty_or_null(package_array['reference'])) reference = package_array['reference'];
        if (!empty_or_null(package_array['sp'])) sp = package_array['sp'];
        if (!empty_or_null(package_array['cpu'])) _cpu = package_array['cpu'];
        if (!empty_or_null(package_array['el_string'])) el_string = package_array['el_string'];
        if (!empty_or_null(package_array['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = package_array['rpm_spec_vers_cmp'];
        if (!empty_or_null(package_array['epoch'])) epoch = package_array['epoch'];
        if (!empty_or_null(package_array['allowmaj'])) allowmaj = package_array['allowmaj'];
        if (!empty_or_null(package_array['exists_check'])) exists_check = package_array['exists_check'];
        if (!empty_or_null(package_array['cves'])) cves = package_array['cves'];
        if (reference &&
            (!exists_check || rpm_exists(rpm:exists_check)) &&
            rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
      }
    }
  }
}

if (!appstreams_found) audit(AUDIT_PACKAGE_NOT_INSTALLED, 'Module python39-devel:3.9 / python39:3.9');

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'python39 / python39-PyMySQL / python39-cffi / etc');
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation