RHSA-2023:6793HighCVSS 8.6

Red Hat Security Advisory: rh-python38-python security update

Published
November 8, 2023
Last Modified
August 19, 2026

🔗 CVE IDs covered (8)

CVE-2023-23931 →CVE-2023-24329 →CVE-2023-32681 →CVE-2023-40217 →CVE-2007-4559 →CVE-2022-40897 →CVE-2022-40898 →CVE-2022-45061 →

📋 Description

CVE-2007-4559 — python: tarfile module directory traversal CVE-2022-40897 — pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py CVE-2022-40898 — python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli CVE-2022-45061 — python: CPU denial of service via inefficient IDNA decoder CVE-2023-23931 — python-cryptography: memory corruption via immutable objects CVE-2023-24329 — python: urllib.parse url blocklisting bypass CVE-2023-32681 — python-requests: Unintended leak of Proxy-Authorization header CVE-2023-40217 — python: TLS handshake bypass

🎯 Affected products72

  • Red Hat Software Collections for RHEL Workstation(v. 7)
  • Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-0:3.8.18-2.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-0:3.8.18-2.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-0:3.8.18-2.el7.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-0:3.8.18-2.el7.src as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-cryptography-0:2.8-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-0:2.8-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-0:2.8-6.el7.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-0:2.8-6.el7.src as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-cryptography-0:2.8-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-0:2.8-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-cryptography-debuginfo-0:2.8-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-debuginfo-0:2.8-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-debuginfo-0:2.8-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-cryptography-debuginfo-0:2.8-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-debug-0:3.8.18-2.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-debug-0:3.8.18-2.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-debug-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-debug-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-debuginfo-0:3.8.18-2.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-debuginfo-0:3.8.18-2.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-debuginfo-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-debuginfo-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • rh-python38-python-devel-0:3.8.18-2.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-devel-0:3.8.18-2.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-devel-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • rh-python38-python-devel-0:3.8.18-2.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • +42 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Do not extract archives from untrusted sources with the Python tarfile module. Users of the module should add sanity checks when calling the tarfile.extract or tarfile.extractall functions. Workaround: For users who are not able to update Requests immediately, there is one potential workaround. You may disable redirects by setting allow_redirects to False on all calls through Requests top-level APIs. Note that if you are currently relying on redirect behaviors, you will need to capture the 3xx response codes and ensure a new request is made to the redirect destination. import requests r = requests.get('http://github.com/', allow_redirects=False)

🔗 References (11)