Moderate: python3 security update
Summary
ALSA-2024:0256: Moderate: python3 security update. Affects platform-python versions < 3.6.8-56.el8_9.3.alma.1. Fixed in 3.6.8-56.el8_9.3.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Vulnerability Detail
Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple (CVE-2023-27043). This vulnerability can potentially allow an attacker to manipulate email addresses and cause unexpected behavior in email parsing.
How To Fix
Minimum fixed version
3.6.8-56.el8_9.3.alma.1
This is the first release that contains the fix.
sudo dnf update platform-pythonTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability at the moment.
Conclusion
In conclusion, it is recommended to update the python3 package to the fixed version to mitigate the security vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for platform-python →
FAQ
This vulnerability can lead to incorrect email address parsing, potentially causing unexpected behavior in email-related functionality.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability.
There are no known exploits for this vulnerability at the moment.
The CVSS score for this vulnerability is not provided in the available information.
You can refer to the CVE page(s) listed in the References section of the vulnerability details for more information.
Related vulnerabilities
Recent vulnerabilities recorded for platform-python.
