Threats affecting pkg:rpm/redhat/python3.11

A security update for python3.11 addresses vulnerabilities in the zipfile module that could lead to denial of service conditions. Specifically, CVE-2024-0450 involves zip-bomb vulnerabilities, and CVE-2024-8088 concerns denial of service caused by iterating over malicious ZIP files. These issues affect Red Hat Enterprise Linux 9 and related distributions. The update is rated as having moderate security impact and a patch is available.

A security update addresses a vulnerability in the Python 3.12 email module where newlines in email headers were not properly quoted, allowing header injection (CVE-2024-6923). This issue affects the python3.12 package as distributed in Red Hat Enterprise Linux 9 and related variants. The vulnerability has been rated as moderate severity by Red Hat Product Security. A patch is available and should be applied to affected systems to remediate the issue.