Threats Tagged 'cve-2024-8088'

A security update for python3.9 in Red Hat Enterprise Linux addresses a vulnerability in the Python email module where newlines in email headers were not properly quoted, allowing header injection (CVE-2024-6923). This issue is rated as having moderate security impact. The update is available for multiple Red Hat Enterprise Linux 9 variants and architectures. Users are advised to apply the update as detailed in the Red Hat advisory.

A security update for Python 3.12 on Red Hat Enterprise Linux addresses multiple vulnerabilities including denial of service issues via zip-bomb attacks and incorrect handling of private IP ranges. The update fixes vulnerabilities in the zipfile module and iteration over malicious ZIP files that could lead to denial of service, as well as incorrect IPv4 and IPv6 private range definitions. This advisory affects Red Hat Enterprise Linux 9 and related variants. The update is rated as moderate severity by Red Hat Product Security.

A security update for python3.11 in Red Hat Enterprise Linux 9 addresses vulnerabilities in the zipfile module that could lead to denial of service. Specifically, CVE-2024-0450 involves zip-bomb vulnerabilities, and CVE-2024-8088 involves denial of service when iterating over malicious ZIP files. These issues have been rated as moderate severity by Red Hat Product Security. The update is included in Red Hat Enterprise Linux 9.5 and related extended update support versions.

A security update for python3.9 in Red Hat Enterprise Linux 9 addresses a vulnerability (CVE-2024-8088) in the CPython implementation. The issue involves iterating over a malicious ZIP file, which may lead to a denial of service condition. The update is rated as having moderate security impact by Red Hat Product Security. The advisory provides updated packages for multiple Red Hat Enterprise Linux 9 variants and architectures. No CVSS score is provided for this vulnerability.

A security update for python3 in Red Hat Enterprise Linux 8.6 addresses an issue where incorrect IPv4 and IPv6 private ranges were handled (CVE-2024-4032). This vulnerability is rated as low severity by Red Hat Product Security. The update corrects the handling of private IP ranges in Python, which is widely used for system and application programming. No CVSS score is provided in the advisory. The update is available through Red Hat's official channels for affected Red Hat Enterprise Linux 8.6 variants.