Red Hat Product Errata RHSA-2024:7415 - Security Advisory
Issued:
2024-10-01
Updated:
2024-10-01

RHSA-2024:7415 - Security Advisory

Synopsis

Moderate: python3.11 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection (CVE-2024-6923)
  • python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.2 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.2 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.2 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.2 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

  • BZ - 2302255 - CVE-2024-6923 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection
  • BZ - 2309426 - CVE-2024-6232 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
x86_64
python3.11-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 8bbb4c5d57b3b63796190d230affc4695ed0b8d30469213f056cb06a2b231efd
python3.11-debuginfo-3.11.2-2.el9_2.6.i686.rpm SHA-256: 57db9ab2e8a1f01d557f60e4e5cd67b3e5cf8b0c43439fe7bbcdfa454135a3b3
python3.11-debuginfo-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: dbad4cde2fe38851cadf11c1f897b6b399b4cf4e7a62eea4d91888024a2815e0
python3.11-debugsource-3.11.2-2.el9_2.6.i686.rpm SHA-256: efb12624029a5024186224ee1fdd62fbd48f826f430fa208792d24b6dbddf3d0
python3.11-debugsource-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 856d7560ea8d6d42b1cba172556dd94d33f86e5de891e11c8ff52159045efefb
python3.11-devel-3.11.2-2.el9_2.6.i686.rpm SHA-256: 6da5afb62f79f2353cd82bb0ac168c2fd383cb7eb738c793880f060b8f4eab7f
python3.11-devel-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 81f160160766547d7662bdd19e25b817ab62ba7229b3a06844bb08b8c577f17b
python3.11-libs-3.11.2-2.el9_2.6.i686.rpm SHA-256: 645559f0c6e5a88c8d1d4505ddc745b85ebfbfda44571a1f7c64ab9e632cae7c
python3.11-libs-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 2f357686d83ca6b069b6fbbf7184402c2e2f6b506972706e2a3e8c99ba3a6765
python3.11-tkinter-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 02c696c558c145383e8f919b2f501807f751f41386fa10c609cceb51a15d6d8b

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
x86_64
python3.11-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 8bbb4c5d57b3b63796190d230affc4695ed0b8d30469213f056cb06a2b231efd
python3.11-debuginfo-3.11.2-2.el9_2.6.i686.rpm SHA-256: 57db9ab2e8a1f01d557f60e4e5cd67b3e5cf8b0c43439fe7bbcdfa454135a3b3
python3.11-debuginfo-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: dbad4cde2fe38851cadf11c1f897b6b399b4cf4e7a62eea4d91888024a2815e0
python3.11-debugsource-3.11.2-2.el9_2.6.i686.rpm SHA-256: efb12624029a5024186224ee1fdd62fbd48f826f430fa208792d24b6dbddf3d0
python3.11-debugsource-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 856d7560ea8d6d42b1cba172556dd94d33f86e5de891e11c8ff52159045efefb
python3.11-devel-3.11.2-2.el9_2.6.i686.rpm SHA-256: 6da5afb62f79f2353cd82bb0ac168c2fd383cb7eb738c793880f060b8f4eab7f
python3.11-devel-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 81f160160766547d7662bdd19e25b817ab62ba7229b3a06844bb08b8c577f17b
python3.11-libs-3.11.2-2.el9_2.6.i686.rpm SHA-256: 645559f0c6e5a88c8d1d4505ddc745b85ebfbfda44571a1f7c64ab9e632cae7c
python3.11-libs-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 2f357686d83ca6b069b6fbbf7184402c2e2f6b506972706e2a3e8c99ba3a6765
python3.11-tkinter-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 02c696c558c145383e8f919b2f501807f751f41386fa10c609cceb51a15d6d8b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
s390x
python3.11-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 52da287edbf003b1e3b5f512827cbd63929dee8b2b65ca871893d11920b93e20
python3.11-debuginfo-3.11.2-2.el9_2.6.s390x.rpm SHA-256: b3ba32a7fe644f85ab0fa00e0a5e651a92178af2943a4a3e560834ce3c022ad5
python3.11-debugsource-3.11.2-2.el9_2.6.s390x.rpm SHA-256: c735a3c2bd36ed29935f37a1634dc7a7c84874522f3d55cc3d9ae3a590c76bbf
python3.11-devel-3.11.2-2.el9_2.6.s390x.rpm SHA-256: e1c1bf0923341ca32509048ee38475b429420c5ea98283922ef266bb18131e51
python3.11-libs-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 74f5b94887f1378fd76f87d3d183251d6a4e2aecd518a2e31f5fd3a2b08be25b
python3.11-tkinter-3.11.2-2.el9_2.6.s390x.rpm SHA-256: a1f3f7665b8fdd896a605d817f05036f71d6d159efda048d1e67e20d7375a363

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
ppc64le
python3.11-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 382b4ae632e23b20c98659b636f9464a5bcd7f198e57c1111c2280770cd394af
python3.11-debuginfo-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: bbdd75d7ec4534af468e96635c9a228f2758eda0716d01099ccf5a614b3410a1
python3.11-debugsource-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 2f48fa7789334f09f89d731e5779ba16ece54d4568e9e17c9356e72beb21c63c
python3.11-devel-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 4db22874c8dc9d8aefa444efbb488b5df287d76f2adb699f0b027a4be858f685
python3.11-libs-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: ea63073b7493c5d5d5a59994131607dd1b36a286751d5451b08ff7224aed5121
python3.11-tkinter-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 8ab6d318d470c1fb5a36b430cc4d762abcb83461cd08c109d79e06334fa07542

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
aarch64
python3.11-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 35954f2ab7652795fc804959defd3bdbd82a4bd04b49704556bfa0da8d4e2e7c
python3.11-debuginfo-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: d0e5af786b681f7ff6046f041432d3f54949d4117e46e8b24d83556020fbecde
python3.11-debugsource-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 7cf27311db670ac3986f149456df7b0f0eafdcde787798f20bf111e4de13a379
python3.11-devel-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: eec0d2347d3b54417d26f68592f01282e23a881d309453eed0f4de8cef7d4c8d
python3.11-libs-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 4083d2a5713380dfbf43852e6564f33b6b3f9486da13183bd4bbad9417d64a0f
python3.11-tkinter-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 7def20d8a955a23eee1d81ce6065db718d1bff5e3bc567d9e0bb6153d4c8e73d

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
ppc64le
python3.11-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 382b4ae632e23b20c98659b636f9464a5bcd7f198e57c1111c2280770cd394af
python3.11-debuginfo-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: bbdd75d7ec4534af468e96635c9a228f2758eda0716d01099ccf5a614b3410a1
python3.11-debugsource-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 2f48fa7789334f09f89d731e5779ba16ece54d4568e9e17c9356e72beb21c63c
python3.11-devel-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 4db22874c8dc9d8aefa444efbb488b5df287d76f2adb699f0b027a4be858f685
python3.11-libs-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: ea63073b7493c5d5d5a59994131607dd1b36a286751d5451b08ff7224aed5121
python3.11-tkinter-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 8ab6d318d470c1fb5a36b430cc4d762abcb83461cd08c109d79e06334fa07542

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
x86_64
python3.11-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 8bbb4c5d57b3b63796190d230affc4695ed0b8d30469213f056cb06a2b231efd
python3.11-debuginfo-3.11.2-2.el9_2.6.i686.rpm SHA-256: 57db9ab2e8a1f01d557f60e4e5cd67b3e5cf8b0c43439fe7bbcdfa454135a3b3
python3.11-debuginfo-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: dbad4cde2fe38851cadf11c1f897b6b399b4cf4e7a62eea4d91888024a2815e0
python3.11-debugsource-3.11.2-2.el9_2.6.i686.rpm SHA-256: efb12624029a5024186224ee1fdd62fbd48f826f430fa208792d24b6dbddf3d0
python3.11-debugsource-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 856d7560ea8d6d42b1cba172556dd94d33f86e5de891e11c8ff52159045efefb
python3.11-devel-3.11.2-2.el9_2.6.i686.rpm SHA-256: 6da5afb62f79f2353cd82bb0ac168c2fd383cb7eb738c793880f060b8f4eab7f
python3.11-devel-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 81f160160766547d7662bdd19e25b817ab62ba7229b3a06844bb08b8c577f17b
python3.11-libs-3.11.2-2.el9_2.6.i686.rpm SHA-256: 645559f0c6e5a88c8d1d4505ddc745b85ebfbfda44571a1f7c64ab9e632cae7c
python3.11-libs-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 2f357686d83ca6b069b6fbbf7184402c2e2f6b506972706e2a3e8c99ba3a6765
python3.11-tkinter-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 02c696c558c145383e8f919b2f501807f751f41386fa10c609cceb51a15d6d8b

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.2

SRPM
x86_64
python3.11-3.11.2-2.el9_2.6.i686.rpm SHA-256: 88c76cee82fa3766ef1089b79420caefe210a07120d3c29b1e5a66a9cf435948
python3.11-debug-3.11.2-2.el9_2.6.i686.rpm SHA-256: f0849c3f2bd364c42c490e68e51253e77bf059bdfbb3d4a9bbf835972ce1db46
python3.11-debug-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: d34fb5c138f2c7912b32172f3ac9e3d06ae605ae21a9580420ce7fac83bc6f68
python3.11-debuginfo-3.11.2-2.el9_2.6.i686.rpm SHA-256: 57db9ab2e8a1f01d557f60e4e5cd67b3e5cf8b0c43439fe7bbcdfa454135a3b3
python3.11-debuginfo-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: dbad4cde2fe38851cadf11c1f897b6b399b4cf4e7a62eea4d91888024a2815e0
python3.11-debugsource-3.11.2-2.el9_2.6.i686.rpm SHA-256: efb12624029a5024186224ee1fdd62fbd48f826f430fa208792d24b6dbddf3d0
python3.11-debugsource-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 856d7560ea8d6d42b1cba172556dd94d33f86e5de891e11c8ff52159045efefb
python3.11-idle-3.11.2-2.el9_2.6.i686.rpm SHA-256: b266b6eeff5ac0fd2a71da77621a2240ff090900c229f0620f46a39d9ddc9d49
python3.11-idle-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: 3b978ae1786cae0ae27ee1faaa945812f3a693297564c87db6bf8a9a6942d1b6
python3.11-test-3.11.2-2.el9_2.6.i686.rpm SHA-256: bdc87ad0a45e29d9a6b73024d97ea2b02011a1c9cf14490f082dcf6ceb911497
python3.11-test-3.11.2-2.el9_2.6.x86_64.rpm SHA-256: c2d44db08a870d4f709904f9b2c5dcc7f59599f2949ecd652d553d46cb942990
python3.11-tkinter-3.11.2-2.el9_2.6.i686.rpm SHA-256: 7cfb279ffc01d28d979e0ce67589fd5a8694046691b7af5cea041cab2375a99e

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.2

SRPM
ppc64le
python3.11-debug-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: dcca68ec4b1bb5131608e4bdb182f80ce3115e3e3afca8eac8a74f4f92eef1d5
python3.11-debuginfo-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: bbdd75d7ec4534af468e96635c9a228f2758eda0716d01099ccf5a614b3410a1
python3.11-debugsource-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 2f48fa7789334f09f89d731e5779ba16ece54d4568e9e17c9356e72beb21c63c
python3.11-idle-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: 42292e9e5142f1709fdd2202a5cd6c74c82d8f7f86b2501e7446fb30c99d3975
python3.11-test-3.11.2-2.el9_2.6.ppc64le.rpm SHA-256: c92e52862a8243b3a4d9ae925421679550e7b3f8c6fb95c7110422f31cd262b3

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.2

SRPM
s390x
python3.11-debug-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 9e8434b213e58768cc34bb4b3186b1d607ef40b0239040a5fedec61643753bf0
python3.11-debuginfo-3.11.2-2.el9_2.6.s390x.rpm SHA-256: b3ba32a7fe644f85ab0fa00e0a5e651a92178af2943a4a3e560834ce3c022ad5
python3.11-debugsource-3.11.2-2.el9_2.6.s390x.rpm SHA-256: c735a3c2bd36ed29935f37a1634dc7a7c84874522f3d55cc3d9ae3a590c76bbf
python3.11-idle-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 34e180994464b3448f00a96ab977234016060a7a16d9cc22d3ae636d50fd3baa
python3.11-test-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 2115f8bbe9c4e20ce0b7bd1943a1088899c6986cb015829f9d686d06b44e4f09

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.2

SRPM
aarch64
python3.11-debug-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 56ac27b55fc5e0694410d2463204d56f4ae20eddbe50dbafff5ea93fa77f4463
python3.11-debuginfo-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: d0e5af786b681f7ff6046f041432d3f54949d4117e46e8b24d83556020fbecde
python3.11-debugsource-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 7cf27311db670ac3986f149456df7b0f0eafdcde787798f20bf111e4de13a379
python3.11-idle-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 13e6a2a2ecab5274aef167f4b5c287afa5ecfe6e067b7f12fec709caafc5080d
python3.11-test-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: f5c3a0c72ee03d7fbc17d33a5b9bfd5e4988b7e6de7759998fe783131c58d032

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
aarch64
python3.11-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 35954f2ab7652795fc804959defd3bdbd82a4bd04b49704556bfa0da8d4e2e7c
python3.11-debuginfo-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: d0e5af786b681f7ff6046f041432d3f54949d4117e46e8b24d83556020fbecde
python3.11-debugsource-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 7cf27311db670ac3986f149456df7b0f0eafdcde787798f20bf111e4de13a379
python3.11-devel-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: eec0d2347d3b54417d26f68592f01282e23a881d309453eed0f4de8cef7d4c8d
python3.11-libs-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 4083d2a5713380dfbf43852e6564f33b6b3f9486da13183bd4bbad9417d64a0f
python3.11-tkinter-3.11.2-2.el9_2.6.aarch64.rpm SHA-256: 7def20d8a955a23eee1d81ce6065db718d1bff5e3bc567d9e0bb6153d4c8e73d

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
python3.11-3.11.2-2.el9_2.6.src.rpm SHA-256: a87491c1b506d72b8c132110b45f67e50efae727cca9bfc6f356e84cafa86964
s390x
python3.11-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 52da287edbf003b1e3b5f512827cbd63929dee8b2b65ca871893d11920b93e20
python3.11-debuginfo-3.11.2-2.el9_2.6.s390x.rpm SHA-256: b3ba32a7fe644f85ab0fa00e0a5e651a92178af2943a4a3e560834ce3c022ad5
python3.11-debugsource-3.11.2-2.el9_2.6.s390x.rpm SHA-256: c735a3c2bd36ed29935f37a1634dc7a7c84874522f3d55cc3d9ae3a590c76bbf
python3.11-devel-3.11.2-2.el9_2.6.s390x.rpm SHA-256: e1c1bf0923341ca32509048ee38475b429420c5ea98283922ef266bb18131e51
python3.11-libs-3.11.2-2.el9_2.6.s390x.rpm SHA-256: 74f5b94887f1378fd76f87d3d183251d6a4e2aecd518a2e31f5fd3a2b08be25b
python3.11-tkinter-3.11.2-2.el9_2.6.s390x.rpm SHA-256: a1f3f7665b8fdd896a605d817f05036f71d6d159efda048d1e67e20d7375a363

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.