Lucene search

K
osvGoogleOSV:SUSE-SU-2024:2280-1
HistoryJul 02, 2024 - 7:03 p.m.

Security update for python39

2024-07-0219:03:52
Google
osv.dev
2
python 3.9
security update
cve-2024-4032
global ip
memory race condition
ssl certificate

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low

This update for python39 fixes the following issues:

  • CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448)
  • CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447)

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

Low