Red Hat issued a bug fix advisory for python3.12 in Red Hat Enterprise Linux 10, which includes fixes for CVE-2024-6232, a Regular Expression Denial of Service (ReDoS) vulnerability in the Python tarfile module caused by excessive backtracking when parsing header values. This vulnerability could potentially allow an attacker to cause a denial of service by triggering high CPU usage. The advisory also references other CVEs fixed in this update. The update is distributed as part of Red Hat Enterprise Linux 10 packages and related builder products. The vendor advisory confirms the availability of updated packages and provides instructions for remediation. No active exploitation has been reported.

The primary impact of CVE-2024-6232 is a potential denial of service condition via ReDoS in the Python tarfile module. This could lead to resource exhaustion on affected systems running vulnerable versions of python3.12. No known active exploits have been reported. The overall security impact is considered moderate to high based on the nature of the vulnerability and Red Hat's severity rating for related python3.11 issues.

Red Hat has released updated python3.12 packages for Red Hat Enterprise Linux 10 and related products that address CVE-2024-6232 and other issues. Users should apply these official updates as described in the Red Hat advisory and referenced articles (https://access.redhat.com/articles/11258). No additional mitigations are specified or required beyond applying the vendor-provided patches.