Lucene search

K
oraclelinuxOracleLinuxELSA-2023-6659
HistoryNov 11, 2023 - 12:00 a.m.

python3.9 security update

2023-11-1100:00:00
linux.oracle.com
10
python3.9
security update
cve-2023-40217
cve-2023-24329
rhel-3043
rhbz#263261
rhbz#2173917
tarfile extraction

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.8%

[3.9.18-1]

  • Update to 3.9.18
  • Security fix for CVE-2023-40217
    Resolves: RHEL-3043
    [3.9.17-2]
  • Fix symlink handling in the fix for CVE-2023-24329
    Resolves: rhbz#263261
    [3.9.17-1]
  • Update to 3.9.17
  • Security fix for CVE-2023-24329
    Resolves: rhbz#2173917
    [3.9.16-2]
  • Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
    Resolves: rhbz#263261

6.8 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.8%