Important: python3.11 security update
Summary
ALSA-2023:3594: Important: python3.11 security update. Affects python3.11 versions < 3.11.2-2.el8_8.1. Fixed in 3.11.2-2.el8_8.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries.
Vulnerability Detail
The vulnerability in python3.11 is related to urllib.parse url blocklisting bypass (CVE-2023-24329). This vulnerability allows an attacker to bypass the blocklisting mechanism in the urllib.parse module, potentially leading to various security issues. The impact of this vulnerability can vary depending on the specific usage of the affected package.
How To Fix
Minimum fixed version
3.11.2-2.el8_8.1
This is the first release that contains the fix.
sudo dnf update python3.11Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, it is important to update the python3.11 package to address the vulnerability and ensure the security of your system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for python3.11 →
FAQ
Python3.11 is a version of the Python programming language.
urllib.parse is a module in Python's standard library that provides functions for parsing URLs.
The impact of this vulnerability can vary depending on the specific usage of the affected package. It could potentially lead to security issues.
To fix this vulnerability, update the python3.11 package to version 3.11.2-2.el8_8.1 or later.
You can find more information about this vulnerability in the CVE page(s) listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for python3.11.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
