Lucene search

K
oraclelinuxOracleLinuxELSA-2023-6914
HistoryNov 17, 2023 - 12:00 a.m.

python3.11-pip security update

2023-11-1700:00:00
linux.oracle.com
12
python
pip
update
security
cve-2007-4559
pep-721
pep-706
tarfile
data filter
fix
changelog
fedora contributors
rhbz#2218249
rhel-232
unix

6.7 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.8%

[22.3.1-4]

  • Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
    Resolves: RHBZ#2218249
    [22.3.1-3]
  • Fix changelog to contain Fedora contributors
    Resolves: RHEL-232

6.7 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.8%