Red Hat Product Errata RHSA-2024:7647 - Security Advisory
Issued:
2024-10-03
Updated:
2024-10-03

RHSA-2024:7647 - Security Advisory

Synopsis

Moderate: python3.11 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8 aarch64

Fixes

  • BZ - 2309426 - CVE-2024-6232 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
x86_64
python3.11-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 49c829f58c8ee5ff7a44b5ef53ba60abbde7c25d4781b3f46a953e9cc7ad6e61
python3.11-debuginfo-3.11.2-2.el8_8.4.i686.rpm SHA-256: 1b3d560fdfc8ffd31aacbd0127f0bcd4aeafe16722da32fe1f78e58e782b7852
python3.11-debuginfo-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: fe53203f4c02e2fa38a8b48161dcfdfc272733695641afc8aaa045fac6afbf47
python3.11-debugsource-3.11.2-2.el8_8.4.i686.rpm SHA-256: 773f89a2149626257cb5a8f607131ef4813523399aa727ee59f68fbd2465d09f
python3.11-debugsource-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 76794aa8fe5b02aebfcb2e1ff491fe02318159900553af4cf0a6412253f85056
python3.11-devel-3.11.2-2.el8_8.4.i686.rpm SHA-256: 569917e254c5d9a66c20f3ade684d01dc6b06596b65851d78aabda61b5a41a4d
python3.11-devel-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 79405be0efcc4f8e1ad4d41bbaa325a0f6bb47eb15467e9f8a0afebc48256885
python3.11-libs-3.11.2-2.el8_8.4.i686.rpm SHA-256: 9b63a3e46170da46fce0ad8fb915b6919a4d2dd33603e0688044ddf36fc8392c
python3.11-libs-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 0cfaad843482072f17315e8695b06549583109c39295f80c91ab173b16442b11
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 926be60f0ba1d4718548da6322f6377813d66bf92a4a791a2f69c101f3189216

Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
x86_64
python3.11-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 49c829f58c8ee5ff7a44b5ef53ba60abbde7c25d4781b3f46a953e9cc7ad6e61
python3.11-debuginfo-3.11.2-2.el8_8.4.i686.rpm SHA-256: 1b3d560fdfc8ffd31aacbd0127f0bcd4aeafe16722da32fe1f78e58e782b7852
python3.11-debuginfo-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: fe53203f4c02e2fa38a8b48161dcfdfc272733695641afc8aaa045fac6afbf47
python3.11-debugsource-3.11.2-2.el8_8.4.i686.rpm SHA-256: 773f89a2149626257cb5a8f607131ef4813523399aa727ee59f68fbd2465d09f
python3.11-debugsource-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 76794aa8fe5b02aebfcb2e1ff491fe02318159900553af4cf0a6412253f85056
python3.11-devel-3.11.2-2.el8_8.4.i686.rpm SHA-256: 569917e254c5d9a66c20f3ade684d01dc6b06596b65851d78aabda61b5a41a4d
python3.11-devel-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 79405be0efcc4f8e1ad4d41bbaa325a0f6bb47eb15467e9f8a0afebc48256885
python3.11-libs-3.11.2-2.el8_8.4.i686.rpm SHA-256: 9b63a3e46170da46fce0ad8fb915b6919a4d2dd33603e0688044ddf36fc8392c
python3.11-libs-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 0cfaad843482072f17315e8695b06549583109c39295f80c91ab173b16442b11
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 926be60f0ba1d4718548da6322f6377813d66bf92a4a791a2f69c101f3189216

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
s390x
python3.11-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 7ec9017ccbc30a80a814122b626f41f175f01259ed9f07a1cb4e40a1de081ca2
python3.11-debuginfo-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 173320dbe5276d7a7bd5f3d471e9b9a80e4132e5b9676a7a39799f438282597e
python3.11-debugsource-3.11.2-2.el8_8.4.s390x.rpm SHA-256: c3def85943535a6508939ace370a47b92cd8b9b09608b0b199e0e0e990931b27
python3.11-devel-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 349f55c7c353b05bd243e430199480a6fedcd362e1bff25ebcb98cf858bb42c3
python3.11-libs-3.11.2-2.el8_8.4.s390x.rpm SHA-256: e271feebce74a8b9d01f6bc49d47578c71d39dbc0d57e970b9c91de524bb29cb
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.s390x.rpm SHA-256: e47354c30f62c2ea27470d024c986eebb5c5ee2f07ea0c74c767979ed96d8dbb

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
ppc64le
python3.11-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 228b685ec2063eb82920ad42c9ed69de591441ef16af15516745425ca190e2a1
python3.11-debuginfo-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: eb6987988ee7870be1884a464ccf20445d136019e9b77d0efe46ad11e60bce6c
python3.11-debugsource-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 27adea5acc918365fb6a9c921482c25371a896ebcfc8dc1f8a8bcfb4159fc1d7
python3.11-devel-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 11d0e4dc30da0f2d81ee9e06029dfd51ecb79c651360ee1dda39c53b60b967bb
python3.11-libs-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: b1553b4e40125c64bd455b4c056684ce0b7fa177e5baa94470f492e554ae60d4
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 3a730772890aba191c052697b57af4805a38102655f386961517d5f6207c779a

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
x86_64
python3.11-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 49c829f58c8ee5ff7a44b5ef53ba60abbde7c25d4781b3f46a953e9cc7ad6e61
python3.11-debuginfo-3.11.2-2.el8_8.4.i686.rpm SHA-256: 1b3d560fdfc8ffd31aacbd0127f0bcd4aeafe16722da32fe1f78e58e782b7852
python3.11-debuginfo-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: fe53203f4c02e2fa38a8b48161dcfdfc272733695641afc8aaa045fac6afbf47
python3.11-debugsource-3.11.2-2.el8_8.4.i686.rpm SHA-256: 773f89a2149626257cb5a8f607131ef4813523399aa727ee59f68fbd2465d09f
python3.11-debugsource-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 76794aa8fe5b02aebfcb2e1ff491fe02318159900553af4cf0a6412253f85056
python3.11-devel-3.11.2-2.el8_8.4.i686.rpm SHA-256: 569917e254c5d9a66c20f3ade684d01dc6b06596b65851d78aabda61b5a41a4d
python3.11-devel-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 79405be0efcc4f8e1ad4d41bbaa325a0f6bb47eb15467e9f8a0afebc48256885
python3.11-libs-3.11.2-2.el8_8.4.i686.rpm SHA-256: 9b63a3e46170da46fce0ad8fb915b6919a4d2dd33603e0688044ddf36fc8392c
python3.11-libs-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 0cfaad843482072f17315e8695b06549583109c39295f80c91ab173b16442b11
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 926be60f0ba1d4718548da6322f6377813d66bf92a4a791a2f69c101f3189216

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
aarch64
python3.11-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: c40fe665eeecb1b0f1256e39e0ea4994c0b7e927f1e88636e0804b0bd0401bb5
python3.11-debuginfo-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 8450977946954d20f283ebc79a819c981b9293787fa656c90cbcae8cef26d6ce
python3.11-debugsource-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 5683baada6dab47edc47bd0c38c679ac29c327b47edeadaab91c03a564b2c304
python3.11-devel-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 5cd410f6fc63a5ac66ee75a45cce8e119f30c298d183ac684252f5539fddadba
python3.11-libs-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 35c1d9b67419442e24ec3639e97f4dc2ded7262e47a882ae27ea704f531d74ce
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: bc65f3ae9b4a7210c4b6a68a1ec9bc725e9923d267cf652931f2b79818903518

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
ppc64le
python3.11-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 228b685ec2063eb82920ad42c9ed69de591441ef16af15516745425ca190e2a1
python3.11-debuginfo-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: eb6987988ee7870be1884a464ccf20445d136019e9b77d0efe46ad11e60bce6c
python3.11-debugsource-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 27adea5acc918365fb6a9c921482c25371a896ebcfc8dc1f8a8bcfb4159fc1d7
python3.11-devel-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 11d0e4dc30da0f2d81ee9e06029dfd51ecb79c651360ee1dda39c53b60b967bb
python3.11-libs-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: b1553b4e40125c64bd455b4c056684ce0b7fa177e5baa94470f492e554ae60d4
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 3a730772890aba191c052697b57af4805a38102655f386961517d5f6207c779a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
python3.11-3.11.2-2.el8_8.4.src.rpm SHA-256: 87d33f06b7f9da74a57b8c0f7c76567ca7cf9c23a134e04ac3247eedcb446954
x86_64
python3.11-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 49c829f58c8ee5ff7a44b5ef53ba60abbde7c25d4781b3f46a953e9cc7ad6e61
python3.11-debuginfo-3.11.2-2.el8_8.4.i686.rpm SHA-256: 1b3d560fdfc8ffd31aacbd0127f0bcd4aeafe16722da32fe1f78e58e782b7852
python3.11-debuginfo-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: fe53203f4c02e2fa38a8b48161dcfdfc272733695641afc8aaa045fac6afbf47
python3.11-debugsource-3.11.2-2.el8_8.4.i686.rpm SHA-256: 773f89a2149626257cb5a8f607131ef4813523399aa727ee59f68fbd2465d09f
python3.11-debugsource-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 76794aa8fe5b02aebfcb2e1ff491fe02318159900553af4cf0a6412253f85056
python3.11-devel-3.11.2-2.el8_8.4.i686.rpm SHA-256: 569917e254c5d9a66c20f3ade684d01dc6b06596b65851d78aabda61b5a41a4d
python3.11-devel-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 79405be0efcc4f8e1ad4d41bbaa325a0f6bb47eb15467e9f8a0afebc48256885
python3.11-libs-3.11.2-2.el8_8.4.i686.rpm SHA-256: 9b63a3e46170da46fce0ad8fb915b6919a4d2dd33603e0688044ddf36fc8392c
python3.11-libs-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 0cfaad843482072f17315e8695b06549583109c39295f80c91ab173b16442b11
python3.11-rpm-macros-3.11.2-2.el8_8.4.noarch.rpm SHA-256: 5ef01fac56675e457c19fd6448465b86b644c92c306de36dfab4c30f5b9aea19
python3.11-tkinter-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 926be60f0ba1d4718548da6322f6377813d66bf92a4a791a2f69c101f3189216

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8

SRPM
x86_64
python3.11-3.11.2-2.el8_8.4.i686.rpm SHA-256: afc509a1706255fc3caaba9cca60bd32ae980d9887a8f5cea244d85cd7a634a0
python3.11-debug-3.11.2-2.el8_8.4.i686.rpm SHA-256: d8566286b866f61d0a8ab7f480a86b80ac069f17ddf30634644ab6db59de3234
python3.11-debug-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: cd61281029418d7ba79291ad60b040f5b67344f2a55f244a69a28f2f0a0e5b28
python3.11-debuginfo-3.11.2-2.el8_8.4.i686.rpm SHA-256: 1b3d560fdfc8ffd31aacbd0127f0bcd4aeafe16722da32fe1f78e58e782b7852
python3.11-debuginfo-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: fe53203f4c02e2fa38a8b48161dcfdfc272733695641afc8aaa045fac6afbf47
python3.11-debugsource-3.11.2-2.el8_8.4.i686.rpm SHA-256: 773f89a2149626257cb5a8f607131ef4813523399aa727ee59f68fbd2465d09f
python3.11-debugsource-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 76794aa8fe5b02aebfcb2e1ff491fe02318159900553af4cf0a6412253f85056
python3.11-idle-3.11.2-2.el8_8.4.i686.rpm SHA-256: 272d27cdd96b2f91711894489b887ec2887615424c3a9d516d1d5c32f62ffa62
python3.11-idle-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 762b1970a3170010859474487edbdda0b07547ad0d98f985742259bd53f64cb5
python3.11-test-3.11.2-2.el8_8.4.i686.rpm SHA-256: 2882d0ba5351c9cc77c0db5c7116e56b72539b04c337cf4b89b76774abc400cf
python3.11-test-3.11.2-2.el8_8.4.x86_64.rpm SHA-256: 505ef95fde9c592540ec2ff50d976bb8e6675946f0d0dd8bc7e0aac68857be2a
python3.11-tkinter-3.11.2-2.el8_8.4.i686.rpm SHA-256: 3835976c6742b865a682c8880ff7d30614fa15f609653599d400d199b2e53fef

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8

SRPM
ppc64le
python3.11-debug-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: fcc1d6d1b309f79de6eade1de747f9fbf849b66533da23c527c7f988aa4f6302
python3.11-debuginfo-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: eb6987988ee7870be1884a464ccf20445d136019e9b77d0efe46ad11e60bce6c
python3.11-debugsource-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 27adea5acc918365fb6a9c921482c25371a896ebcfc8dc1f8a8bcfb4159fc1d7
python3.11-idle-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: 4d387f7a7c7f35fc7d11ff961cfee6259d86e2fff9c3ac74ca0822dca34cb787
python3.11-test-3.11.2-2.el8_8.4.ppc64le.rpm SHA-256: e33b40ac1ed1ecfdd23f22e5e9409899685b756325f263591f3c062d59c3e703

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.8

SRPM
s390x
python3.11-debug-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 7ca75e08fe30c0be7499e4ab367ad95b05d5c3532149dda7e501ffd918e82b38
python3.11-debuginfo-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 173320dbe5276d7a7bd5f3d471e9b9a80e4132e5b9676a7a39799f438282597e
python3.11-debugsource-3.11.2-2.el8_8.4.s390x.rpm SHA-256: c3def85943535a6508939ace370a47b92cd8b9b09608b0b199e0e0e990931b27
python3.11-idle-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 937d1da04741c29a9837453788950ad39e7fafb465cca374ed102d30ea17e217
python3.11-test-3.11.2-2.el8_8.4.s390x.rpm SHA-256: 0ddc8043bae04f90cbd7a01a8db3f133f83b4ea16646596e7528b3ea7945a7dc

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8

SRPM
aarch64
python3.11-debug-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 1539d33e1a35d07494bc583012259abb23c6b6673f033e06679a39ea6fe7f58f
python3.11-debuginfo-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 8450977946954d20f283ebc79a819c981b9293787fa656c90cbcae8cef26d6ce
python3.11-debugsource-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 5683baada6dab47edc47bd0c38c679ac29c327b47edeadaab91c03a564b2c304
python3.11-idle-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 5bbce08f4cf1552fd15f8a1b204446a616ebbc2f6eb164d6862569047416c49d
python3.11-test-3.11.2-2.el8_8.4.aarch64.rpm SHA-256: 096266f4045dbbdb2aec34edc434bcc113d706b7f4691abf35d07dc68cbdf278

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.