Red Hat Product Errata RHSA-2025:0280 - Security Advisory
Issued:
2025-01-13
Updated:
2025-01-13

RHSA-2025:0280 - Security Advisory

Synopsis

Moderate: python3.11 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for python3.11 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python: Virtual environment (venv) activation scripts don't quote paths (CVE-2024-9287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2321440 - CVE-2024-9287 python: Virtual environment (venv) activation scripts don't quote paths

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
x86_64
python3.11-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: c5a68cffb9ab19f40a8a62323ca6cb6838dddda20b2de480ee6e3164091f9419
python3.11-debuginfo-3.11.7-1.el9_4.7.i686.rpm SHA-256: 51909297fa207e6574e318d4aefd214b0fdaec5a6903b5736fc9aa5654dd2b2f
python3.11-debuginfo-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 74794284a543bee623fba0781550baeaff10209a1ad67ec3ef6003e85d0171c4
python3.11-debugsource-3.11.7-1.el9_4.7.i686.rpm SHA-256: 5299a1449a61279e214ea1842fd7fe5c94638ae37032cdf7aeb62d078dade0b1
python3.11-debugsource-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: f37867247232e60dec0240bfdb93ab507b9b9b6dd5aac4b1f6f8e053837a216a
python3.11-devel-3.11.7-1.el9_4.7.i686.rpm SHA-256: 826e9d57f535c93c98c2bb8bba39d558fb19810c75a9ba42b48a716311fd2d65
python3.11-devel-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 20c4aed48d38647fb491fd1d5347ccba7953dcf870531e8651a96387c545ba42
python3.11-libs-3.11.7-1.el9_4.7.i686.rpm SHA-256: 1f7360a2090f0937d1431ac9c09357668f414517fdc1674c2f30c2fe1ea24e39
python3.11-libs-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 0f43f87341b962707fa272a1a1dc01d4f6406d9649fa1e9feefca3e24322170c
python3.11-tkinter-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: dfdd345039a2e48f93ae58e81ddb7268645da1289f440941a12c7ec348646647

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
x86_64
python3.11-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: c5a68cffb9ab19f40a8a62323ca6cb6838dddda20b2de480ee6e3164091f9419
python3.11-debuginfo-3.11.7-1.el9_4.7.i686.rpm SHA-256: 51909297fa207e6574e318d4aefd214b0fdaec5a6903b5736fc9aa5654dd2b2f
python3.11-debuginfo-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 74794284a543bee623fba0781550baeaff10209a1ad67ec3ef6003e85d0171c4
python3.11-debugsource-3.11.7-1.el9_4.7.i686.rpm SHA-256: 5299a1449a61279e214ea1842fd7fe5c94638ae37032cdf7aeb62d078dade0b1
python3.11-debugsource-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: f37867247232e60dec0240bfdb93ab507b9b9b6dd5aac4b1f6f8e053837a216a
python3.11-devel-3.11.7-1.el9_4.7.i686.rpm SHA-256: 826e9d57f535c93c98c2bb8bba39d558fb19810c75a9ba42b48a716311fd2d65
python3.11-devel-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 20c4aed48d38647fb491fd1d5347ccba7953dcf870531e8651a96387c545ba42
python3.11-libs-3.11.7-1.el9_4.7.i686.rpm SHA-256: 1f7360a2090f0937d1431ac9c09357668f414517fdc1674c2f30c2fe1ea24e39
python3.11-libs-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 0f43f87341b962707fa272a1a1dc01d4f6406d9649fa1e9feefca3e24322170c
python3.11-tkinter-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: dfdd345039a2e48f93ae58e81ddb7268645da1289f440941a12c7ec348646647

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
s390x
python3.11-3.11.7-1.el9_4.7.s390x.rpm SHA-256: da6a7e4fa40314175015930fba5ddab7b5dd97d9b924216e6c8393c7b4e50099
python3.11-debuginfo-3.11.7-1.el9_4.7.s390x.rpm SHA-256: f8a059c78883fc2768ca8e6f7b3cda4622cc6b21c0df7ac9092abff0b81050ad
python3.11-debugsource-3.11.7-1.el9_4.7.s390x.rpm SHA-256: b47cde28476728b1109f3748ffbde8b104d716a63c0adf8b1cc248f9b5e537c5
python3.11-devel-3.11.7-1.el9_4.7.s390x.rpm SHA-256: 94c0ef252a8261261cfa922df0f23adbd788fe74843e14f49c047bcaaf4b7ffd
python3.11-libs-3.11.7-1.el9_4.7.s390x.rpm SHA-256: 63ee0b8110a57326f1be3e1a09853c06d7f266fb21cb8cf1619c4e32cfc3fc85
python3.11-tkinter-3.11.7-1.el9_4.7.s390x.rpm SHA-256: 7f280be26b85168fa93b8b64fc6783f8879fbaa05dbdab108901559dc6d0a674

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
ppc64le
python3.11-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 7291b5447b8cdefa1cc380fa92e6cadd3ea5ca2f680ae4723392ba3a19afca8b
python3.11-debuginfo-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: fe5306b0dd1e6db041d787387ad3fbdca5fc8ae17febf76a4d362192df798f10
python3.11-debugsource-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 5d597519b64b380c14299670c6a3bc3ae9aed3e84c7363b4a797dd6822c5a9d6
python3.11-devel-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 062ce34caa9f422d6ac6e39f9ec7c48a2d90236f469d8848fcd88f41b81348de
python3.11-libs-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: ac16724c6c80e24d506491f5d230f8b02a846058e319f6ec0449af7c59de4ce6
python3.11-tkinter-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 7c9821a0a76fef5b761dcfc51a474b1876770faff311940fb8dcd7d1b99db8fd

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
aarch64
python3.11-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: ae94ab6b48224af5c06907b97051c92019b881c18d7aee20f6bdb71eb99d073a
python3.11-debuginfo-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: abf1b5208798b9a354a9243c1fe9ff727ceb161a04ecec2be98e075c03fa1cbd
python3.11-debugsource-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 338cf60a496f981adcb5a79de9469081540720c87452dfce105fa6b94a8eb7a6
python3.11-devel-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 3bbef255d5adb7af19d25a46e288fa7dc8c6dc4dd5ded69d226034af14bebed8
python3.11-libs-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 40881953891bc8436e1ea25bcebb288f3757c19892e462651b19c0ff25d05db1
python3.11-tkinter-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: b5b722155cca4d2f16250b3a00416c831f880d2ecb51a06b58fe222fa651931a

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
ppc64le
python3.11-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 7291b5447b8cdefa1cc380fa92e6cadd3ea5ca2f680ae4723392ba3a19afca8b
python3.11-debuginfo-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: fe5306b0dd1e6db041d787387ad3fbdca5fc8ae17febf76a4d362192df798f10
python3.11-debugsource-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 5d597519b64b380c14299670c6a3bc3ae9aed3e84c7363b4a797dd6822c5a9d6
python3.11-devel-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 062ce34caa9f422d6ac6e39f9ec7c48a2d90236f469d8848fcd88f41b81348de
python3.11-libs-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: ac16724c6c80e24d506491f5d230f8b02a846058e319f6ec0449af7c59de4ce6
python3.11-tkinter-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 7c9821a0a76fef5b761dcfc51a474b1876770faff311940fb8dcd7d1b99db8fd

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
x86_64
python3.11-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: c5a68cffb9ab19f40a8a62323ca6cb6838dddda20b2de480ee6e3164091f9419
python3.11-debuginfo-3.11.7-1.el9_4.7.i686.rpm SHA-256: 51909297fa207e6574e318d4aefd214b0fdaec5a6903b5736fc9aa5654dd2b2f
python3.11-debuginfo-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 74794284a543bee623fba0781550baeaff10209a1ad67ec3ef6003e85d0171c4
python3.11-debugsource-3.11.7-1.el9_4.7.i686.rpm SHA-256: 5299a1449a61279e214ea1842fd7fe5c94638ae37032cdf7aeb62d078dade0b1
python3.11-debugsource-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: f37867247232e60dec0240bfdb93ab507b9b9b6dd5aac4b1f6f8e053837a216a
python3.11-devel-3.11.7-1.el9_4.7.i686.rpm SHA-256: 826e9d57f535c93c98c2bb8bba39d558fb19810c75a9ba42b48a716311fd2d65
python3.11-devel-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 20c4aed48d38647fb491fd1d5347ccba7953dcf870531e8651a96387c545ba42
python3.11-libs-3.11.7-1.el9_4.7.i686.rpm SHA-256: 1f7360a2090f0937d1431ac9c09357668f414517fdc1674c2f30c2fe1ea24e39
python3.11-libs-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 0f43f87341b962707fa272a1a1dc01d4f6406d9649fa1e9feefca3e24322170c
python3.11-tkinter-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: dfdd345039a2e48f93ae58e81ddb7268645da1289f440941a12c7ec348646647

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4

SRPM
x86_64
python3.11-3.11.7-1.el9_4.7.i686.rpm SHA-256: b27b2d9cd7ecd9f88f4e82ceebe595ab87ccd426813e7b39d8c18e8e2c7bd983
python3.11-debug-3.11.7-1.el9_4.7.i686.rpm SHA-256: d4035025074369f3944f2bcbab779e17dabde53b267640d46cf524ad0fef6891
python3.11-debug-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: bb909129d1b1edf78e7dc018fdf33436043adf07786b8c7eb70f437c3a3b1157
python3.11-debuginfo-3.11.7-1.el9_4.7.i686.rpm SHA-256: 51909297fa207e6574e318d4aefd214b0fdaec5a6903b5736fc9aa5654dd2b2f
python3.11-debuginfo-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 74794284a543bee623fba0781550baeaff10209a1ad67ec3ef6003e85d0171c4
python3.11-debugsource-3.11.7-1.el9_4.7.i686.rpm SHA-256: 5299a1449a61279e214ea1842fd7fe5c94638ae37032cdf7aeb62d078dade0b1
python3.11-debugsource-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: f37867247232e60dec0240bfdb93ab507b9b9b6dd5aac4b1f6f8e053837a216a
python3.11-idle-3.11.7-1.el9_4.7.i686.rpm SHA-256: 1b3e8bc789c404c4cad16a258f9156491ef8e9e40459377983a19b7828d6437e
python3.11-idle-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: 3ed3760e8de607ae34e57c4ed3a64ba8cac884100c6ffc455ed49c122f79b228
python3.11-test-3.11.7-1.el9_4.7.i686.rpm SHA-256: 5b43c920a069cb39421d5e1e05c50057121e40a3826c9442d0e52fb6d78967ba
python3.11-test-3.11.7-1.el9_4.7.x86_64.rpm SHA-256: dc8a0485a4a0ff4a88b00847440b2625eadc45120e3787409ac0ed69a5daf110
python3.11-tkinter-3.11.7-1.el9_4.7.i686.rpm SHA-256: dd969c0527a3f270d4fb305c5ec08e2d815afb8bb37e43fb98ff8e4372dc26f7

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4

SRPM
ppc64le
python3.11-debug-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 3bec06d25034932c71c023535ed927de707119bd46d87d068c9219176a2fdd4e
python3.11-debuginfo-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: fe5306b0dd1e6db041d787387ad3fbdca5fc8ae17febf76a4d362192df798f10
python3.11-debugsource-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 5d597519b64b380c14299670c6a3bc3ae9aed3e84c7363b4a797dd6822c5a9d6
python3.11-idle-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: c3c832f3504e0e997a4a5f04083dffcd8416e8b3091b9829331541cc3129667a
python3.11-test-3.11.7-1.el9_4.7.ppc64le.rpm SHA-256: 84d49a318e11d1b86a1263321ba61578946b4b302af63f3fc64acebdcbd56624

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4

SRPM
s390x
python3.11-debug-3.11.7-1.el9_4.7.s390x.rpm SHA-256: e31945e37e14279813890f80c76c7ac35fbdb919abd067f2826112639ead7b0f
python3.11-debuginfo-3.11.7-1.el9_4.7.s390x.rpm SHA-256: f8a059c78883fc2768ca8e6f7b3cda4622cc6b21c0df7ac9092abff0b81050ad
python3.11-debugsource-3.11.7-1.el9_4.7.s390x.rpm SHA-256: b47cde28476728b1109f3748ffbde8b104d716a63c0adf8b1cc248f9b5e537c5
python3.11-idle-3.11.7-1.el9_4.7.s390x.rpm SHA-256: d5d09ad5cc0499d519dbe5b6f904a85bd243b4b63d0233f7718f932881d94c6a
python3.11-test-3.11.7-1.el9_4.7.s390x.rpm SHA-256: b5fed092e6e3d4afe2741f20f00b80af20a9e7227619e40c58ac18a0586cc0ad

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4

SRPM
aarch64
python3.11-debug-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: ac3a5b29763fa4efca423f1bcbb01989de437600554403cccf961725772982b6
python3.11-debuginfo-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: abf1b5208798b9a354a9243c1fe9ff727ceb161a04ecec2be98e075c03fa1cbd
python3.11-debugsource-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 338cf60a496f981adcb5a79de9469081540720c87452dfce105fa6b94a8eb7a6
python3.11-idle-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 872be752a3530cfdeb471b9e95b3a0e1e927e3b41f2cb7747bbf38475510e518
python3.11-test-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 635a966ee52de03fbf635debb16b697954f8ec568592b9e2a1f5cb6872d169dc

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
aarch64
python3.11-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: ae94ab6b48224af5c06907b97051c92019b881c18d7aee20f6bdb71eb99d073a
python3.11-debuginfo-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: abf1b5208798b9a354a9243c1fe9ff727ceb161a04ecec2be98e075c03fa1cbd
python3.11-debugsource-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 338cf60a496f981adcb5a79de9469081540720c87452dfce105fa6b94a8eb7a6
python3.11-devel-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 3bbef255d5adb7af19d25a46e288fa7dc8c6dc4dd5ded69d226034af14bebed8
python3.11-libs-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: 40881953891bc8436e1ea25bcebb288f3757c19892e462651b19c0ff25d05db1
python3.11-tkinter-3.11.7-1.el9_4.7.aarch64.rpm SHA-256: b5b722155cca4d2f16250b3a00416c831f880d2ecb51a06b58fe222fa651931a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
python3.11-3.11.7-1.el9_4.7.src.rpm SHA-256: 691398aefbcf1c1f4c8e8fa38abe02a9fe14f0f71a4523d94ae335afb63c1a11
s390x
python3.11-3.11.7-1.el9_4.7.s390x.rpm SHA-256: da6a7e4fa40314175015930fba5ddab7b5dd97d9b924216e6c8393c7b4e50099
python3.11-debuginfo-3.11.7-1.el9_4.7.s390x.rpm SHA-256: f8a059c78883fc2768ca8e6f7b3cda4622cc6b21c0df7ac9092abff0b81050ad
python3.11-debugsource-3.11.7-1.el9_4.7.s390x.rpm SHA-256: b47cde28476728b1109f3748ffbde8b104d716a63c0adf8b1cc248f9b5e537c5
python3.11-devel-3.11.7-1.el9_4.7.s390x.rpm SHA-256: 94c0ef252a8261261cfa922df0f23adbd788fe74843e14f49c047bcaaf4b7ffd
python3.11-libs-3.11.7-1.el9_4.7.s390x.rpm SHA-256: 63ee0b8110a57326f1be3e1a09853c06d7f266fb21cb8cf1619c4e32cfc3fc85
python3.11-tkinter-3.11.7-1.el9_4.7.s390x.rpm SHA-256: 7f280be26b85168fa93b8b64fc6783f8879fbaa05dbdab108901559dc6d0a674

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.