Threats Tagged 'cve-2024-0397'

Red Hat has issued a moderate security advisory for python3.9 version 3.9.21 addressing multiple vulnerabilities. The update fixes issues including unquoted paths in virtual environment activation scripts (CVE-2024-9287) and improper validation of IPv6 and IPvFuture addresses (CVE-2024-11168). These vulnerabilities affect Red Hat Enterprise Linux 9 and related variants. The advisory does not provide a CVSS score but rates the impact as moderate.

A security update for Python 3.12 on Red Hat Enterprise Linux addresses multiple vulnerabilities including denial of service issues via zip-bomb attacks and incorrect handling of private IP ranges. The update fixes vulnerabilities in the zipfile module and iteration over malicious ZIP files that could lead to denial of service, as well as incorrect IPv4 and IPv6 private range definitions. This advisory affects Red Hat Enterprise Linux 9 and related variants. The update is rated as moderate severity by Red Hat Product Security.

A security update for python3.11 in Red Hat Enterprise Linux 9 addresses vulnerabilities in the zipfile module that could lead to denial of service. Specifically, CVE-2024-0450 involves zip-bomb vulnerabilities, and CVE-2024-8088 involves denial of service when iterating over malicious ZIP files. These issues have been rated as moderate severity by Red Hat Product Security. The update is included in Red Hat Enterprise Linux 9.5 and related extended update support versions.