CLSA-2025-1742379028 Fix CVE(s): CVE-2024-11168, CVE-2024-4032, CVE-2025-0938

🗓️ 19 Mar 2025 10:10:33Reported by GoogleType

osv🔗 osv.dev👁 24 Views

Security update fixes bracketed host validation in urllib, disallows brackets, and fixes ipaddress private ranges.

Reporter	Title	Published	Views	Family All 982
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	28 May 202514:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v5.1.1 is vulnerable to multiple Operator package issues	2 Apr 202517:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	4 Dec 202410:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	27 Sep 202422:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bleach bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.	2 Oct 202618:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	28 Aug 202521:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses Python-3.11 which is vulnerable to CVE-2024-4032.	8 May 202515:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	6 Jun 202510:29	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is affected by a denial of service (CVE-2024-0397) and information disclosure (CVE-2024-4032, CVE-2024-37891) due to Python	17 Sep 202423:09	–	ibm

Source	Link
errata	www.errata.cloudlinux.com/ubuntu16-els/CLSA-2025-1742379028.html

04 Jun 2026 09:46Current

6.8Medium risk

Vulners AI Score6.8

CVSS 46.3

CVSS 3.17.5

EPSS0.01556

SSVC