Lucene search
OracleLinuxELSA-2023-3556HistoryJun 12, 2023 - 12:00 a.m.
python3 security update
2023-06-1200:00:00
linux.oracle.com
56
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
28.8%
[3.6.8-19.0.1]
- Remove the ‘getfile’ feature of pydoc [Orabug: 33182027][CVE-2021-3426]
- Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8-19] - Security fix for CVE-2023-24329
- Fix the test suite support for Expat >= 2.4.5
Resolves: rhbz#2173917
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | python3 | <Â 3.6.8-19.0.1.el7_9 | python3-3.6.8-19.0.1.el7_9.src.rpm |
| oracle linux | 7 | aarch64 | python3 | <Â 3.6.8-19.0.1.el7_9 | python3-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | python3-debug | <Â 3.6.8-19.0.1.el7_9 | python3-debug-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | python3-devel | <Â 3.6.8-19.0.1.el7_9 | python3-devel-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | python3-idle | <Â 3.6.8-19.0.1.el7_9 | python3-idle-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | python3-libs | <Â 3.6.8-19.0.1.el7_9 | python3-libs-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | python3-test | <Â 3.6.8-19.0.1.el7_9 | python3-test-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | python3-tkinter | <Â 3.6.8-19.0.1.el7_9 | python3-tkinter-3.6.8-19.0.1.el7_9.aarch64.rpm |
| oracle linux | 7 | src | python3 | <Â 3.6.8-19.0.1.el7_9 | python3-3.6.8-19.0.1.el7_9.src.rpm |
| oracle linux | 7 | i686 | python3 | <Â 3.6.8-19.0.1.el7_9 | python3-3.6.8-19.0.1.el7_9.i686.rpm |
Related
nessus
nessus
Fedora 37 : python3.9 (2023-03599274db)
2023-06-08 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Python vulnerability (USN-5960-1)
2023-03-16 00:00:00
Fedora 37 : pypy (2023-acdfd145f2)
2023-06-08 00:00:00
cvelist
cvelist
CVE-2023-24329
2023-02-17 00:00:00
openvas
openvas
Python < 3.7.17, 3.8.x < 3.8.17, 3.9.x < 3.9.17, 3.10.x < 3.10.12, 3.11.x < 3.11.4 RCE Vulnerability - Mac OS X
2023-02-20 00:00:00
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-1826)
2023-05-09 00:00:00
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2023-1808)
2023-05-09 00:00:00
osv
osv
Important: python3.9 security update
2023-08-31 16:55:39
Important: python27:2.7 security update
2023-06-24 18:52:51
BIT-python-2023-24329
2024-03-06 11:04:03
slackware
slackware
[slackware-security] python3
2023-06-09 01:28:03
cloudfoundry
cloudfoundry
USN-5960-1: Python vulnerability | Cloud Foundry
2023-04-29 00:00:00
USN-6139-1: Python vulnerability | Cloud Foundry
2023-10-05 00:00:00
cert
cert
Python Parsing Error Enabling Bypass CVE-2023-24329
2023-08-11 00:00:00
rocky
rocky
python3.11 security update
2023-08-31 16:54:34
python27:2.7 security update
2023-06-24 18:52:51
python39:3.9 and python39-devel:3.9 security update
2023-08-31 16:54:34
almalinux
almalinux
Important: python3 security update
2023-06-14 00:00:00
Important: python39:3.9 and python39-devel:3.9 security update
2023-06-27 00:00:00
Important: python3.11 security update
2023-06-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-24329 affecting package python3 3.7.13-5
2023-03-16 03:40:27
CVE-2023-24329 affecting package python2 2.7.18-11
2023-03-16 03:40:27
CVE-2023-24329 affecting package python3 for versions less than 3.9.14-8
2023-10-13 16:12:18
debiancve
debiancve
CVE-2023-24329
2023-02-17 15:15:12
redhat
redhat
(RHSA-2023:3595) Important: python3.9 security update
2023-06-14 09:04:30
(RHSA-2023:3935) Important: python3 security update
2023-06-29 12:38:17
fedora
fedora
[SECURITY] Fedora 38 Update: python2.7-2.7.18-31.fc38
2023-05-28 01:07:33
[SECURITY] Fedora 38 Update: pypy3.9-7.3.11-4.3.9.fc38
2023-05-31 17:35:04
[SECURITY] Fedora 37 Update: python3.9-3.9.16-2.fc37
2023-06-08 02:00:24
amazon
amazon
Medium: python3
2023-03-17 16:34:00
cloudlinux
cloudlinux
python: Fix of CVE-2023-24329
2023-03-06 21:09:04
python: Fix of CVE-2023-24329
2023-07-20 20:54:04
ibm
ibm
Security Bulletin: A vulnerability in Python may affect IBM Robotic Process Automation and result in a remote attacker bypassing security restrictions (CVE-2023-24329).
2023-11-22 20:55:44
redhatcve
redhatcve
CVE-2023-24329
2023-02-28 12:29:51
oraclelinux
oraclelinux
python27:2.7 security update
2023-07-08 00:00:00
python3.11 security update
2023-06-15 00:00:00
python3.9 security update
2023-06-15 00:00:00
centos
centos
python, tkinter security update
2023-07-27 14:34:23
ubuntucve
ubuntucve
CVE-2023-24329
2023-02-17 00:00:00
thn
thn
New Python URL Parsing Flaw Could Enable Command Execution Attacks
2023-08-12 06:03:00
ubuntu
ubuntu
Python vulnerability
2023-03-16 00:00:00
Python vulnerability
2023-06-05 00:00:00
aix
aix
AIX is affected by security restrictions bypass due to Python
2023-08-18 09:49:04
cve
cve
CVE-2023-24329
2023-02-17 15:15:12
cgr
cgr
CVE-2023-24329 vulnerabilities
2024-05-19 03:07:16
githubexploit
githubexploit
Exploit for Improper Input Validation in Python
2023-08-17 10:33:52
prion
prion
Security feature bypass
2023-02-17 15:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
28.8%
Related for ELSA-2023-3556