python39:3.9 and python39-devel:3.9 security update

2024-05-3100:00:00

linux.oracle.com

python 3.9

security update

cve-2023-6597

cve-2024-0450

update

resolves rhel-33676

mod wsgi

numpy

python packages

xmlpullparser

expat

pycparser

pyyaml

scipy

unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

mod_wsgi
numpy
python39
[3.9.19-1]

Update to 3.9.19
Security fixes for CVE-2023-6597 and CVE-2024-0450
Fix tests for XMLPullParser with Expat with fixed CVE
Resolves: RHEL-33676, RHEL-33688
python3x-pip
python3x-setuptools
python3x-six
python-cffi
python-chardet
python-cryptography
python-idna
[2.10-4]
Security fix for CVE-2024-3651
Resolves: RHEL-32705
python-lxml
python-ply
python-psutil
python-psycopg2
python-pycparser
python-PyMySQL
python-pysocks
python-requests
python-toml
python-urllib3
python-wheel
PyYAML
scipy

OSVersionArchitecturePackageVersionFilename
oracle linux8srcpyyaml< 5.4.1-1.modulePyYAML-5.4.1-1.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcmod_wsgi< 4.7.1-7.modulemod_wsgi-4.7.1-7.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcnumpy< 1.19.4-3.modulenumpy-1.19.4-3.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-pymysql< 0.10.1-2.modulepython-PyMySQL-0.10.1-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-cffi< 1.14.3-2.modulepython-cffi-1.14.3-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-chardet< 3.0.4-19.modulepython-chardet-3.0.4-19.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-cryptography< 3.3.1-3.0.1.modulepython-cryptography-3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99.src.rpm
oracle linux8srcpython-idna< 2.10-4.modulepython-idna-2.10-4.module+el8.10.0+90341+71ca88f4.src.rpm
oracle linux8srcpython-lxml< 4.6.5-1.modulepython-lxml-4.6.5-1.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux8srcpython-ply< 3.11-10.modulepython-ply-3.11-10.module+el8.9.0+90016+9c2d6573.src.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	8	src	pyyaml	< 5.4.1-1.module	PyYAML-5.4.1-1.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	mod_wsgi	< 4.7.1-7.module	mod_wsgi-4.7.1-7.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	numpy	< 1.19.4-3.module	numpy-1.19.4-3.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	python-pymysql	< 0.10.1-2.module	python-PyMySQL-0.10.1-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	python-cffi	< 1.14.3-2.module	python-cffi-1.14.3-2.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	python-chardet	< 3.0.4-19.module	python-chardet-3.0.4-19.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	python-cryptography	< 3.3.1-3.0.1.module	python-cryptography-3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99.src.rpm
oracle linux	8	src	python-idna	< 2.10-4.module	python-idna-2.10-4.module+el8.10.0+90341+71ca88f4.src.rpm
oracle linux	8	src	python-lxml	< 4.6.5-1.module	python-lxml-4.6.5-1.module+el8.9.0+90016+9c2d6573.src.rpm
oracle linux	8	src	python-ply	< 3.11-10.module	python-ply-3.11-10.module+el8.9.0+90016+9c2d6573.src.rpm