RHSA-2023:2764MediumCVSS 7.5
Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2020-10735 — python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS CVE-2021-28861 — python: open redirection vulnerability in lib/http/server.py may lead to information disclosure CVE-2022-45061 — python: CPU denial of service via inefficient IDNA decoder
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2023:2764
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1834423
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2120642
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2144072
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2764.json