Red Hat Product Errata RHSA-2024:4370 - Security Advisory
Issued:
2024-07-08
Updated:
2024-07-08

RHSA-2024:4370 - Security Advisory

Synopsis

Important: python3 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8 aarch64

Fixes

  • BZ - 2276518 - CVE-2023-6597 python: Path traversal on tempfile.TemporaryDirectory

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
x86_64
python3.11-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: a1dc772cba13754a611285d799889254b46d5c66eb6213ca208f056874eeeb9b
python3.11-debuginfo-3.11.2-2.el8_8.3.i686.rpm SHA-256: e7684445ebd546b6fae70f899dc8cf2f847ff68b361ee2dfe89daf9a3be2a24a
python3.11-debuginfo-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 67a3bbd2b5936ccae268948e8d10fe7d2ade8a108ff8fa8cd85c58fcf3e89792
python3.11-debugsource-3.11.2-2.el8_8.3.i686.rpm SHA-256: cd0c0d00144f1570397c1f4335e95f5a3ce17b7f1ca11d3eb658d6ca8c0bacdc
python3.11-debugsource-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 95ff13817488bed48dfa295d31652fc36288fcadd7c3899cd7a51e9784d91378
python3.11-devel-3.11.2-2.el8_8.3.i686.rpm SHA-256: 1af860735f88699455a246e6a6213aeee595b3bd79ab0ceaf815013e875af641
python3.11-devel-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: c6dd7413218220258c34888b890e96825a9cb017e675dff4f3b73038c0178db1
python3.11-libs-3.11.2-2.el8_8.3.i686.rpm SHA-256: 3c678d7df0ae28e568f8481ef72b4e3f350b087acc7b05c3a8ef18093e42f98c
python3.11-libs-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 6cb3569163c5405a88c3aeada5d1fe9fc74918d4c8cdfff968c00bd5581ca8e3
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: dea2b801c684778d276f29389812c8059911ad35ae3ab893708e72590e9a2cb6

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
s390x
python3.11-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 95078ad53e2ffa6a57b3bba6a016671c81e80198c878d932d81ba880d567f84d
python3.11-debuginfo-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 7bd6301d506691144b44d9714ca99c5a493c75ce93c15fed48eb8283f8e5535a
python3.11-debugsource-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 7a0f5635536785f4834f4a21cd0a1bf65cdd91e39a24d2ed2b15d8c753c157f9
python3.11-devel-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 3fffc3dc37d5e5c1821cad216f3fb131644ba7df828046ac29c329334ea52a9b
python3.11-libs-3.11.2-2.el8_8.3.s390x.rpm SHA-256: a8129059eddbfb86e26af8838a47878e4fe3219762e75e0356704c5b17db0811
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 4b4d06bac73a7bb0d07509b2fa71f32513d08ab09ac3d44c48d512b216b93cc7

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
ppc64le
python3.11-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 0ce2483d8c715b757c71f410d213dc4718df33e0141e56a53a5eb96459070d29
python3.11-debuginfo-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: c12885c8164ef6dfd104a480fe9a606c9ee0e92bc1d1c13b1ce8d5fd7703e99a
python3.11-debugsource-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 26fdac6faac33066bf21188852bbe2c5b59abe5bb30ec676d255b81d794de0ff
python3.11-devel-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 4eed097504a6f818280ce2061bc8f8a1ae08514b2eade3218545d1ec25b6ebcb
python3.11-libs-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 1d52cda406cc6b083762f701cbda1629459f797341b5fe99d275c686c3534053
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: bef56d6e46c3888b118c6d640dda58890af58eaefa8ecccbaf9eb8bdac03ebe7

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
x86_64
python3.11-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: a1dc772cba13754a611285d799889254b46d5c66eb6213ca208f056874eeeb9b
python3.11-debuginfo-3.11.2-2.el8_8.3.i686.rpm SHA-256: e7684445ebd546b6fae70f899dc8cf2f847ff68b361ee2dfe89daf9a3be2a24a
python3.11-debuginfo-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 67a3bbd2b5936ccae268948e8d10fe7d2ade8a108ff8fa8cd85c58fcf3e89792
python3.11-debugsource-3.11.2-2.el8_8.3.i686.rpm SHA-256: cd0c0d00144f1570397c1f4335e95f5a3ce17b7f1ca11d3eb658d6ca8c0bacdc
python3.11-debugsource-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 95ff13817488bed48dfa295d31652fc36288fcadd7c3899cd7a51e9784d91378
python3.11-devel-3.11.2-2.el8_8.3.i686.rpm SHA-256: 1af860735f88699455a246e6a6213aeee595b3bd79ab0ceaf815013e875af641
python3.11-devel-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: c6dd7413218220258c34888b890e96825a9cb017e675dff4f3b73038c0178db1
python3.11-libs-3.11.2-2.el8_8.3.i686.rpm SHA-256: 3c678d7df0ae28e568f8481ef72b4e3f350b087acc7b05c3a8ef18093e42f98c
python3.11-libs-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 6cb3569163c5405a88c3aeada5d1fe9fc74918d4c8cdfff968c00bd5581ca8e3
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: dea2b801c684778d276f29389812c8059911ad35ae3ab893708e72590e9a2cb6

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
aarch64
python3.11-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: dd2e2e8631163e5a55c366eb92feb155f6fa2541b0f161bbadf1639aa64d8eec
python3.11-debuginfo-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: 3765791afff4d854c8999e4a2baface6331756e8e0cda90b76d5ddd8a71db9f0
python3.11-debugsource-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: 22be4e4b78f908446b35df0cc4f9e22c5258cbfb50c9cdd52d0a1531e9b9a8dd
python3.11-devel-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: 5f4286cfd4596c674a0eda1313847b0ed5ecab9632de5cdd4b06fd936020002f
python3.11-libs-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: ca831a5116c6895cc212eee2fd5410864358c6e69a91a852cc256e5be4e2cba0
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: 27df152b9a64a5c45d5ec574e22b402767ffd8259b51feb0d2714e0cf2e3ca1d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
ppc64le
python3.11-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 0ce2483d8c715b757c71f410d213dc4718df33e0141e56a53a5eb96459070d29
python3.11-debuginfo-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: c12885c8164ef6dfd104a480fe9a606c9ee0e92bc1d1c13b1ce8d5fd7703e99a
python3.11-debugsource-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 26fdac6faac33066bf21188852bbe2c5b59abe5bb30ec676d255b81d794de0ff
python3.11-devel-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 4eed097504a6f818280ce2061bc8f8a1ae08514b2eade3218545d1ec25b6ebcb
python3.11-libs-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 1d52cda406cc6b083762f701cbda1629459f797341b5fe99d275c686c3534053
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: bef56d6e46c3888b118c6d640dda58890af58eaefa8ecccbaf9eb8bdac03ebe7

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
python3.11-3.11.2-2.el8_8.3.src.rpm SHA-256: ce2d80d2dfadc4ce3ce8c6752147947da0365f9c0a8cdfb989c0e0d54566f90f
x86_64
python3.11-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: a1dc772cba13754a611285d799889254b46d5c66eb6213ca208f056874eeeb9b
python3.11-debuginfo-3.11.2-2.el8_8.3.i686.rpm SHA-256: e7684445ebd546b6fae70f899dc8cf2f847ff68b361ee2dfe89daf9a3be2a24a
python3.11-debuginfo-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 67a3bbd2b5936ccae268948e8d10fe7d2ade8a108ff8fa8cd85c58fcf3e89792
python3.11-debugsource-3.11.2-2.el8_8.3.i686.rpm SHA-256: cd0c0d00144f1570397c1f4335e95f5a3ce17b7f1ca11d3eb658d6ca8c0bacdc
python3.11-debugsource-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 95ff13817488bed48dfa295d31652fc36288fcadd7c3899cd7a51e9784d91378
python3.11-devel-3.11.2-2.el8_8.3.i686.rpm SHA-256: 1af860735f88699455a246e6a6213aeee595b3bd79ab0ceaf815013e875af641
python3.11-devel-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: c6dd7413218220258c34888b890e96825a9cb017e675dff4f3b73038c0178db1
python3.11-libs-3.11.2-2.el8_8.3.i686.rpm SHA-256: 3c678d7df0ae28e568f8481ef72b4e3f350b087acc7b05c3a8ef18093e42f98c
python3.11-libs-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 6cb3569163c5405a88c3aeada5d1fe9fc74918d4c8cdfff968c00bd5581ca8e3
python3.11-rpm-macros-3.11.2-2.el8_8.3.noarch.rpm SHA-256: 2642fec74dc072a2b6da7d7547c46c754e409642a1abc283cff37f9680117db5
python3.11-tkinter-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: dea2b801c684778d276f29389812c8059911ad35ae3ab893708e72590e9a2cb6

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8

SRPM
x86_64
python3.11-3.11.2-2.el8_8.3.i686.rpm SHA-256: 6014dc9da53707a9741d376e83472f5ab20cf0b224e80b8fa934e9bb1925ccec
python3.11-debug-3.11.2-2.el8_8.3.i686.rpm SHA-256: f765e37ca33f5b67adc35cf51b95b0a5b4581831346cdca851e3e07125b78097
python3.11-debug-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 85b958b61a7759e4ab5030f0f675cc2b760f6b16624c50628d86abc10bfc9a14
python3.11-debuginfo-3.11.2-2.el8_8.3.i686.rpm SHA-256: e7684445ebd546b6fae70f899dc8cf2f847ff68b361ee2dfe89daf9a3be2a24a
python3.11-debuginfo-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 67a3bbd2b5936ccae268948e8d10fe7d2ade8a108ff8fa8cd85c58fcf3e89792
python3.11-debugsource-3.11.2-2.el8_8.3.i686.rpm SHA-256: cd0c0d00144f1570397c1f4335e95f5a3ce17b7f1ca11d3eb658d6ca8c0bacdc
python3.11-debugsource-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 95ff13817488bed48dfa295d31652fc36288fcadd7c3899cd7a51e9784d91378
python3.11-idle-3.11.2-2.el8_8.3.i686.rpm SHA-256: ba356cc21a0e0fd493cfe8bd9b92355ca30b2c2511407bda3053133ce333b6ec
python3.11-idle-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 8e170dc746b9c5dc0846bc4e85d12f11967ed0d69fbba7f74951a4814bd82cd3
python3.11-test-3.11.2-2.el8_8.3.i686.rpm SHA-256: 1696b754f81ef9aed8c34303408d82810ab39772246fa6b82d81e5488bf3b26b
python3.11-test-3.11.2-2.el8_8.3.x86_64.rpm SHA-256: 1d634a5850f73269c4a284444abc6f64bee2c49f9e2cdf92ee337453daaf857b
python3.11-tkinter-3.11.2-2.el8_8.3.i686.rpm SHA-256: 1fe09458d6712c21e7e9c9132921504d65200ed2b4a4431378366d3baa39cc18

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8

SRPM
ppc64le
python3.11-debug-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 9578fc1ba617825cc5b2404dc19d6867ec26d87163a5bdd3e817fefe6ffc3d83
python3.11-debuginfo-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: c12885c8164ef6dfd104a480fe9a606c9ee0e92bc1d1c13b1ce8d5fd7703e99a
python3.11-debugsource-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 26fdac6faac33066bf21188852bbe2c5b59abe5bb30ec676d255b81d794de0ff
python3.11-idle-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 8f24ec895d5b14f6c555b06f66e6b3ed90c181702b835b5bfc969042a7000026
python3.11-test-3.11.2-2.el8_8.3.ppc64le.rpm SHA-256: 4a2f4d01ff2cd26f8e327be20e0c7402e4a29096b0493facad426315d9e80713

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.8

SRPM
s390x
python3.11-debug-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 9dbe6c61a9e8d23165172c3b840a0a09f7d9d7d0983da82ca6e404351e26e694
python3.11-debuginfo-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 7bd6301d506691144b44d9714ca99c5a493c75ce93c15fed48eb8283f8e5535a
python3.11-debugsource-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 7a0f5635536785f4834f4a21cd0a1bf65cdd91e39a24d2ed2b15d8c753c157f9
python3.11-idle-3.11.2-2.el8_8.3.s390x.rpm SHA-256: 63aecbcb184558b41bfdb688b4cab0f8749dca4a7743f5f9941b689b885a84dd
python3.11-test-3.11.2-2.el8_8.3.s390x.rpm SHA-256: a5b235bc4165259eb79f633bb2c18afff6992ef9f04793738c4e417977fa4254

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8

SRPM
aarch64
python3.11-debug-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: a48383ba1a4cea97e13de50a497c6b31e389d63331c2aca32fa5d15708de9628
python3.11-debuginfo-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: 3765791afff4d854c8999e4a2baface6331756e8e0cda90b76d5ddd8a71db9f0
python3.11-debugsource-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: 22be4e4b78f908446b35df0cc4f9e22c5258cbfb50c9cdd52d0a1531e9b9a8dd
python3.11-idle-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: ff0dd0e04b1327f1900c38ea16a0401534a83b51f3215950f6616fb8247759fb
python3.11-test-3.11.2-2.el8_8.3.aarch64.rpm SHA-256: c7fac993efe01fb6cd701e0a6b14e398ad0cead271b3e86d241e0949a205f984

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.