Red Hat Product Errata RHSA-2024:4896 - Security Advisory
Issued:
2024-07-29
Updated:
2024-07-29

RHSA-2024:4896 - Security Advisory

Synopsis

Important: python3.11 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.2 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.2 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.2 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.2 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

  • BZ - 2276518 - CVE-2023-6597 python: Path traversal on tempfile.TemporaryDirectory

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
x86_64
python3.11-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 26238f1b16f770235532c04cdd25b3612adf918b0beaf44c3f59e2b9b1aa6c90
python3.11-debuginfo-3.11.2-2.el9_2.4.i686.rpm SHA-256: 526d0a59640d37b25e5339b1311b7d8ebac032b7e05f73383eeeae47ede652e3
python3.11-debuginfo-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 8875758ab47dd899ed1a74c84ac27a2a425f67f8270a61befef945293034e2c2
python3.11-debugsource-3.11.2-2.el9_2.4.i686.rpm SHA-256: ef33c833c580d26c0fe1711eecad48789cab9455376c798c128072561fbfe057
python3.11-debugsource-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: a08c8ae97a83d94d2862d4c5c3034431d03729b5be0aa0ccd4f0ebc8f3d778b7
python3.11-devel-3.11.2-2.el9_2.4.i686.rpm SHA-256: 70255ce9a27193d557a0f523cfe758b314ad9bbaec364f61a663d9800f875ed1
python3.11-devel-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 59c247bfb66a0aae2efca9546c68c445c40647b039898fd13d82ef147e498872
python3.11-libs-3.11.2-2.el9_2.4.i686.rpm SHA-256: 43dbb353dbdfa6d7bdc8be2fafa80b8351a649229bbade259bb4424c4356dd07
python3.11-libs-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 07ddfce474874346309e434b4d81d8a18fc53d746763c8a8cee2b2da95ba8cb6
python3.11-tkinter-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 18375c2aedae0f705327e34ba35f85b1c695b945260b4ff83240550716772b30

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
x86_64
python3.11-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 26238f1b16f770235532c04cdd25b3612adf918b0beaf44c3f59e2b9b1aa6c90
python3.11-debuginfo-3.11.2-2.el9_2.4.i686.rpm SHA-256: 526d0a59640d37b25e5339b1311b7d8ebac032b7e05f73383eeeae47ede652e3
python3.11-debuginfo-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 8875758ab47dd899ed1a74c84ac27a2a425f67f8270a61befef945293034e2c2
python3.11-debugsource-3.11.2-2.el9_2.4.i686.rpm SHA-256: ef33c833c580d26c0fe1711eecad48789cab9455376c798c128072561fbfe057
python3.11-debugsource-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: a08c8ae97a83d94d2862d4c5c3034431d03729b5be0aa0ccd4f0ebc8f3d778b7
python3.11-devel-3.11.2-2.el9_2.4.i686.rpm SHA-256: 70255ce9a27193d557a0f523cfe758b314ad9bbaec364f61a663d9800f875ed1
python3.11-devel-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 59c247bfb66a0aae2efca9546c68c445c40647b039898fd13d82ef147e498872
python3.11-libs-3.11.2-2.el9_2.4.i686.rpm SHA-256: 43dbb353dbdfa6d7bdc8be2fafa80b8351a649229bbade259bb4424c4356dd07
python3.11-libs-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 07ddfce474874346309e434b4d81d8a18fc53d746763c8a8cee2b2da95ba8cb6
python3.11-tkinter-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 18375c2aedae0f705327e34ba35f85b1c695b945260b4ff83240550716772b30

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
s390x
python3.11-3.11.2-2.el9_2.4.s390x.rpm SHA-256: d7c390497c25bc4d87720c1f9b7ed0c79df55cf259d1c583333ba4631fc3d58a
python3.11-debuginfo-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 22580a07cb63dd49551e41d278400dcd9f19c93182e4be3e0b89e73cadf98f26
python3.11-debugsource-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 0f7f1b23c7f76941eef0271f9c827179f8288dd8a5ad3627cb652374f689a780
python3.11-devel-3.11.2-2.el9_2.4.s390x.rpm SHA-256: fff91b5385ccd640dc725496793710d8c744b4d6cc66454bebc6ba8fc028685f
python3.11-libs-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 9c785c9fbc1c3abccfe4c13cf5864eb794391de8840abf5d9348528216eda506
python3.11-tkinter-3.11.2-2.el9_2.4.s390x.rpm SHA-256: e43daea15c74d0280b4933f5f6253abdc8b77d15045b1421f4d8b3626a9ec620

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
ppc64le
python3.11-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 8fb5d81e72ab21f97299efbe18041101c92f7726f8ba61b9f42617764b0bd24e
python3.11-debuginfo-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 823f0efded885d90f166e0d69db96d8d66b625f93f2cecd40633b8489b93dfda
python3.11-debugsource-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 3bd98a0b81bb40e5e362e347b27ddf3a06cf975a5ce9ab4b399bd57117e7c39d
python3.11-devel-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 96b211d25e8ca8df2dbe3d43a641a575c587967e26467201e9f33e26d84629bf
python3.11-libs-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: b9c045eb9361e7af04fbeafcc9d2fb7acd7314dbf6127ae19e1f1165f4bd1d09
python3.11-tkinter-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 1a910c026a305af485cfaf456501a772dc11c5fc9af2304fda59b1fc4aa28d7d

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
aarch64
python3.11-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: f1fa46048b1574dd44b220da2401c9405bcfffac0423d84018e7528fa21c4a53
python3.11-debuginfo-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: a9f2c2d7b9db68266185e4916b74bff9330d8279a79292b9b3776fe21422e9be
python3.11-debugsource-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 8deb36d151ed1b6274312aadf491ceec652e960817deea8b88d1bf935ae3fe06
python3.11-devel-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 37e111e142057a6cbc0207c9eb627ceeb95aeac1a24ea8fdd24c124426aa87af
python3.11-libs-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 4916867c240aa60ca073bb72c3ba8b0dd03688d3b596916b1390a36f20d14ac5
python3.11-tkinter-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 62282978c10366572affac4fb4a59819edee1df1a1e0f00e85915740d34fee14

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
ppc64le
python3.11-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 8fb5d81e72ab21f97299efbe18041101c92f7726f8ba61b9f42617764b0bd24e
python3.11-debuginfo-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 823f0efded885d90f166e0d69db96d8d66b625f93f2cecd40633b8489b93dfda
python3.11-debugsource-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 3bd98a0b81bb40e5e362e347b27ddf3a06cf975a5ce9ab4b399bd57117e7c39d
python3.11-devel-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 96b211d25e8ca8df2dbe3d43a641a575c587967e26467201e9f33e26d84629bf
python3.11-libs-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: b9c045eb9361e7af04fbeafcc9d2fb7acd7314dbf6127ae19e1f1165f4bd1d09
python3.11-tkinter-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 1a910c026a305af485cfaf456501a772dc11c5fc9af2304fda59b1fc4aa28d7d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
x86_64
python3.11-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 26238f1b16f770235532c04cdd25b3612adf918b0beaf44c3f59e2b9b1aa6c90
python3.11-debuginfo-3.11.2-2.el9_2.4.i686.rpm SHA-256: 526d0a59640d37b25e5339b1311b7d8ebac032b7e05f73383eeeae47ede652e3
python3.11-debuginfo-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 8875758ab47dd899ed1a74c84ac27a2a425f67f8270a61befef945293034e2c2
python3.11-debugsource-3.11.2-2.el9_2.4.i686.rpm SHA-256: ef33c833c580d26c0fe1711eecad48789cab9455376c798c128072561fbfe057
python3.11-debugsource-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: a08c8ae97a83d94d2862d4c5c3034431d03729b5be0aa0ccd4f0ebc8f3d778b7
python3.11-devel-3.11.2-2.el9_2.4.i686.rpm SHA-256: 70255ce9a27193d557a0f523cfe758b314ad9bbaec364f61a663d9800f875ed1
python3.11-devel-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 59c247bfb66a0aae2efca9546c68c445c40647b039898fd13d82ef147e498872
python3.11-libs-3.11.2-2.el9_2.4.i686.rpm SHA-256: 43dbb353dbdfa6d7bdc8be2fafa80b8351a649229bbade259bb4424c4356dd07
python3.11-libs-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 07ddfce474874346309e434b4d81d8a18fc53d746763c8a8cee2b2da95ba8cb6
python3.11-tkinter-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 18375c2aedae0f705327e34ba35f85b1c695b945260b4ff83240550716772b30

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.2

SRPM
x86_64
python3.11-3.11.2-2.el9_2.4.i686.rpm SHA-256: d90c6a5ab6c01f49db28d51ec29923375a98fc87e9a3f188d5dd01dcfa889a5e
python3.11-debug-3.11.2-2.el9_2.4.i686.rpm SHA-256: 49499a9e7062af98261155a1ca30f3699268e64d3637e55aed2098e971cf25e7
python3.11-debug-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 26affcec41df2fc7fd18a2126db9bfea6df1889190262886c0a4ac529236f33b
python3.11-debuginfo-3.11.2-2.el9_2.4.i686.rpm SHA-256: 526d0a59640d37b25e5339b1311b7d8ebac032b7e05f73383eeeae47ede652e3
python3.11-debuginfo-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 8875758ab47dd899ed1a74c84ac27a2a425f67f8270a61befef945293034e2c2
python3.11-debugsource-3.11.2-2.el9_2.4.i686.rpm SHA-256: ef33c833c580d26c0fe1711eecad48789cab9455376c798c128072561fbfe057
python3.11-debugsource-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: a08c8ae97a83d94d2862d4c5c3034431d03729b5be0aa0ccd4f0ebc8f3d778b7
python3.11-idle-3.11.2-2.el9_2.4.i686.rpm SHA-256: 641505f521707e7415fd78749db29f4741110ce42e72270a9c9b7e65e49337ea
python3.11-idle-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: b6caa34a6c3b130dc398b24c4946fdd0825fab95aaa1937a16604dd4688ae4bd
python3.11-test-3.11.2-2.el9_2.4.i686.rpm SHA-256: a4aa87777b284d38a9614b6e8c7e39f68233d07a0addecbaadf9f23115363fc7
python3.11-test-3.11.2-2.el9_2.4.x86_64.rpm SHA-256: 639983884cc8f6500769707a65d28966990c2690e80ea5f79e0210e4da5efb70
python3.11-tkinter-3.11.2-2.el9_2.4.i686.rpm SHA-256: 6ec1db1e537e5f30413b4c85321769e4cf385fff03dea0b388d570e98f1a4122

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.2

SRPM
ppc64le
python3.11-debug-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 6ac26a439972baeed0895fffe307a26ffde27697cbed41f182f9c4f1dfd5ac40
python3.11-debuginfo-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 823f0efded885d90f166e0d69db96d8d66b625f93f2cecd40633b8489b93dfda
python3.11-debugsource-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: 3bd98a0b81bb40e5e362e347b27ddf3a06cf975a5ce9ab4b399bd57117e7c39d
python3.11-idle-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: c75afa9f91ef5a933d2930a154f6fab885706643001a690ff5d36d662d685e1a
python3.11-test-3.11.2-2.el9_2.4.ppc64le.rpm SHA-256: a0a944d80cf8f66719ad897214d95958fd35ac86349da71b9eb97940aef35db0

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.2

SRPM
s390x
python3.11-debug-3.11.2-2.el9_2.4.s390x.rpm SHA-256: a115cc1aae75c1350f2aefdd2bf51b80b928d8aa966300fd7cd0877d66984b15
python3.11-debuginfo-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 22580a07cb63dd49551e41d278400dcd9f19c93182e4be3e0b89e73cadf98f26
python3.11-debugsource-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 0f7f1b23c7f76941eef0271f9c827179f8288dd8a5ad3627cb652374f689a780
python3.11-idle-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 7bb77dd72246ad0b7983da5044f6e69b5734aa45f0350b40bc48cf95e1d35366
python3.11-test-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 0bc2f240e1b5c65c369c451b87d22c1fb07b3500808c974ffd2b4db05c0690bb

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.2

SRPM
aarch64
python3.11-debug-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: ff5be32ff87edfdc9765f00aa105dd5f1d24cfe327d4910f29a91093404e6bbd
python3.11-debuginfo-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: a9f2c2d7b9db68266185e4916b74bff9330d8279a79292b9b3776fe21422e9be
python3.11-debugsource-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 8deb36d151ed1b6274312aadf491ceec652e960817deea8b88d1bf935ae3fe06
python3.11-idle-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 279776296983ebbed1e2227b8f426ba2d4eba790c76c5ca5090eebbcaa91a9cb
python3.11-test-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: ee823d20a7f9c7b32dbdafe9b0edd805c91cdbb49c5a551ebd67c0b2e3db19b6

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
aarch64
python3.11-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: f1fa46048b1574dd44b220da2401c9405bcfffac0423d84018e7528fa21c4a53
python3.11-debuginfo-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: a9f2c2d7b9db68266185e4916b74bff9330d8279a79292b9b3776fe21422e9be
python3.11-debugsource-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 8deb36d151ed1b6274312aadf491ceec652e960817deea8b88d1bf935ae3fe06
python3.11-devel-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 37e111e142057a6cbc0207c9eb627ceeb95aeac1a24ea8fdd24c124426aa87af
python3.11-libs-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 4916867c240aa60ca073bb72c3ba8b0dd03688d3b596916b1390a36f20d14ac5
python3.11-tkinter-3.11.2-2.el9_2.4.aarch64.rpm SHA-256: 62282978c10366572affac4fb4a59819edee1df1a1e0f00e85915740d34fee14

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
python3.11-3.11.2-2.el9_2.4.src.rpm SHA-256: 3b0009ab792466b78ee75087e36e9b4d88dd3098b5c2cf1a2e8a92a6ebc90530
s390x
python3.11-3.11.2-2.el9_2.4.s390x.rpm SHA-256: d7c390497c25bc4d87720c1f9b7ed0c79df55cf259d1c583333ba4631fc3d58a
python3.11-debuginfo-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 22580a07cb63dd49551e41d278400dcd9f19c93182e4be3e0b89e73cadf98f26
python3.11-debugsource-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 0f7f1b23c7f76941eef0271f9c827179f8288dd8a5ad3627cb652374f689a780
python3.11-devel-3.11.2-2.el9_2.4.s390x.rpm SHA-256: fff91b5385ccd640dc725496793710d8c744b4d6cc66454bebc6ba8fc028685f
python3.11-libs-3.11.2-2.el9_2.4.s390x.rpm SHA-256: 9c785c9fbc1c3abccfe4c13cf5864eb794391de8840abf5d9348528216eda506
python3.11-tkinter-3.11.2-2.el9_2.4.s390x.rpm SHA-256: e43daea15c74d0280b4933f5f6253abdc8b77d15045b1421f4d8b3626a9ec620

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.