Red Hat Security Advisory: python3.12 security update
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
AI Analysis
Technical Summary
CVE-2024-6923 is a vulnerability in the cpython implementation of Python 3.11 where the email module does not properly quote newlines in email headers. This flaw allows an attacker to perform email header injection. Red Hat has issued a security advisory (RHSA-2024:6179) for Red Hat Enterprise Linux 9, providing updated python3.11 packages that fix this issue. The advisory rates the impact as moderate and directs users to apply the update to remediate the vulnerability.
Potential Impact
The vulnerability permits email header injection via the Python email module, which could potentially be exploited to manipulate email headers. The advisory classifies the security impact as moderate. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python3.11 packages for Red Hat Enterprise Linux 9 that fix this vulnerability. Users should apply the official security update as described in Red Hat advisory RHSA-2024:6179 and the referenced update article (https://access.redhat.com/articles/11258). Patch status is confirmed as available from the vendor advisory.
Red Hat Security Advisory: python3.12 security update
Description
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix. Security Fix(es): * cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected software
pkg:rpm/redhat/python3.11Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-6923 is a vulnerability in the cpython implementation of Python 3.11 where the email module does not properly quote newlines in email headers. This flaw allows an attacker to perform email header injection. Red Hat has issued a security advisory (RHSA-2024:6179) for Red Hat Enterprise Linux 9, providing updated python3.11 packages that fix this issue. The advisory rates the impact as moderate and directs users to apply the update to remediate the vulnerability.
Potential Impact
The vulnerability permits email header injection via the Python email module, which could potentially be exploited to manipulate email headers. The advisory classifies the security impact as moderate. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated python3.11 packages for Red Hat Enterprise Linux 9 that fix this vulnerability. Users should apply the official security update as described in Red Hat advisory RHSA-2024:6179 and the referenced update article (https://access.redhat.com/articles/11258). Patch status is confirmed as available from the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:6179
- Cve Count
- 1
Threat ID: 6a3da1f14853345fc183292f
Added to database: 06/25/2026, 21:47:29 UTC
Last enriched: 06/25/2026, 22:44:53 UTC
Last updated: 09/10/2026, 19:24:54 UTC
Views: 112
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.