Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Python 2.7 packages allow blocked URLs to be accessed
published 3 years ago
Summary
The Python 2.7 packages from Almalinux, including python2-nose, babel, python-nose-docs, python-psycopg2-doc, and python-sqlalchemy-doc, can be tricked into loading URLs that should be blocked. This could let malicious web content reach your applications that rely on these libraries. Apply the latest security update for these Python packages as soon as possible.
What to do
- Update almalinux python2-nose to version 1.3.7-31.module_el8.6.0+2781+fed64c13.
- Update almalinux babel to version 2.5.1-10.module_el8.6.0+2781+fed64c13.
- Update almalinux python-nose-docs to version 1.3.7-31.module_el8.6.0+2781+fed64c13.
- Update almalinux python-psycopg2-doc to version 2.7.5-7.module_el8.6.0+2781+fed64c13.
- Update almalinux python-psycopg2-doc to version 2.7.5-7.module_el8.6.0+3162+01a09e5a.
- Update almalinux python-sqlalchemy-doc to version 1.3.2-2.module_el8.6.0+2781+fed64c13.
- Update almalinux python2 to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-cython to version 0.28.1-7.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-cython to version 0.28.1-7.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pymysql to version 0.8.0-10.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-attrs to version 17.4.0-10.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-babel to version 2.5.1-10.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-backports to version 1.0-16.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-backports to version 1.0-16.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-backports-ssl_match_hostname to version 3.5.0.1-12.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-bson to version 3.7.0-1.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-bson to version 3.7.0-1.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-chardet to version 3.0.4-10.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-coverage to version 4.5.1-4.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-coverage to version 4.5.1-4.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-debug to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-devel to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-dns to version 1.15.0-10.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-docs to version 2.7.16-2.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-docs-info to version 2.7.16-2.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-docutils to version 0.14-12.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-funcsigs to version 1.0.2-13.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-idna to version 2.5-7.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-ipaddress to version 1.0.18-6.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-jinja2 to version 2.10-9.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-libs to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-lxml to version 4.2.3-6.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-lxml to version 4.2.3-6.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-markupsafe to version 0.23-19.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-markupsafe to version 0.23-19.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-mock to version 2.0.0-13.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-numpy to version 1:1.14.2-16.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-numpy to version 1:1.14.2-16.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-numpy-doc to version 1:1.14.2-16.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-numpy-f2py to version 1:1.14.2-16.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-numpy-f2py to version 1:1.14.2-16.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-pip to version 9.0.3-19.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pip-wheel to version 9.0.3-19.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pluggy to version 0.6.0-8.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-psycopg2 to version 2.7.5-7.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-psycopg2 to version 2.7.5-7.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-psycopg2-debug to version 2.7.5-7.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-psycopg2-debug to version 2.7.5-7.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-psycopg2-tests to version 2.7.5-7.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-psycopg2-tests to version 2.7.5-7.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-py to version 1.5.3-6.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pygments to version 2.2.0-22.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pymongo to version 3.7.0-1.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-pymongo to version 3.7.0-1.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pymongo-gridfs to version 3.7.0-1.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pymongo-gridfs to version 3.7.0-1.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-pysocks to version 1.6.8-6.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pytest to version 3.4.2-13.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pytest-mock to version 1.9.0-4.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pytz to version 2017.2-12.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pyyaml to version 3.12-16.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-pyyaml to version 3.12-16.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-requests to version 2.20.0-3.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-rpm-macros to version 3-38.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-scipy to version 1.0.0-21.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-scipy to version 1.0.0-21.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-setuptools to version 39.0.1-13.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-setuptools-wheel to version 39.0.1-13.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-setuptools_scm to version 1.15.7-6.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-six to version 1.11.0-6.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-sqlalchemy to version 1.3.2-2.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-sqlalchemy to version 1.3.2-2.module_el8.6.0+3162+01a09e5a.
- Update almalinux python2-test to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-tkinter to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-tools to version 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma.
- Update almalinux python2-urllib3 to version 1.24.2-3.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-virtualenv to version 15.1.0-22.module_el8.8.0+3580+eeda85da.
- Update almalinux python2-wheel to version 1:0.31.1-3.module_el8.6.0+2781+fed64c13.
- Update almalinux python2-wheel-wheel to version 1:0.31.1-3.module_el8.6.0+2781+fed64c13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | python2-nose |
< 1.3.7-31.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.3.7-31.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | babel |
< 2.5.1-10.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.5.1-10.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python-nose-docs |
< 1.3.7-31.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.3.7-31.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python-psycopg2-doc |
< 2.7.5-7.module_el8.6.0+2781+fed64c13 < 2.7.5-7.module_el8.6.0+3162+01a09e5a Fix: upgrade to 2.7.5-7.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python-sqlalchemy-doc |
< 1.3.2-2.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.3.2-2.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2 |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-cython |
< 0.28.1-7.module_el8.6.0+3162+01a09e5a < 0.28.1-7.module_el8.6.0+2781+fed64c13 Fix: upgrade to 0.28.1-7.module_el8.6.0+3162+01a09e5a
|
| AlmaLinux:8 | almalinux | python2-pymysql |
< 0.8.0-10.module_el8.6.0+2781+fed64c13 Fix: upgrade to 0.8.0-10.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-attrs |
< 17.4.0-10.module_el8.6.0+2781+fed64c13 Fix: upgrade to 17.4.0-10.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-babel |
< 2.5.1-10.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.5.1-10.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-backports |
< 1.0-16.module_el8.6.0+2781+fed64c13 < 1.0-16.module_el8.6.0+3162+01a09e5a Fix: upgrade to 1.0-16.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-backports-ssl_match_hostname |
< 3.5.0.1-12.module_el8.6.0+2781+fed64c13 Fix: upgrade to 3.5.0.1-12.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-bson |
< 3.7.0-1.module_el8.6.0+2781+fed64c13 < 3.7.0-1.module_el8.6.0+3162+01a09e5a Fix: upgrade to 3.7.0-1.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-chardet |
< 3.0.4-10.module_el8.6.0+2781+fed64c13 Fix: upgrade to 3.0.4-10.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-coverage |
< 4.5.1-4.module_el8.6.0+2781+fed64c13 < 4.5.1-4.module_el8.6.0+3162+01a09e5a Fix: upgrade to 4.5.1-4.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-debug |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-devel |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-dns |
< 1.15.0-10.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.15.0-10.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-docs |
< 2.7.16-2.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.7.16-2.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-docs-info |
< 2.7.16-2.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.7.16-2.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-docutils |
< 0.14-12.module_el8.6.0+2781+fed64c13 Fix: upgrade to 0.14-12.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-funcsigs |
< 1.0.2-13.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.0.2-13.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-idna |
< 2.5-7.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.5-7.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-ipaddress |
< 1.0.18-6.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.0.18-6.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-jinja2 |
< 2.10-9.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.10-9.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-libs |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-lxml |
< 4.2.3-6.module_el8.6.0+2781+fed64c13 < 4.2.3-6.module_el8.6.0+3162+01a09e5a Fix: upgrade to 4.2.3-6.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-markupsafe |
< 0.23-19.module_el8.6.0+3162+01a09e5a < 0.23-19.module_el8.6.0+2781+fed64c13 Fix: upgrade to 0.23-19.module_el8.6.0+3162+01a09e5a
|
| AlmaLinux:8 | almalinux | python2-mock |
< 2.0.0-13.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.0.0-13.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-numpy |
< 1:1.14.2-16.module_el8.6.0+2781+fed64c13 < 1:1.14.2-16.module_el8.6.0+3162+01a09e5a Fix: upgrade to 1:1.14.2-16.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-numpy-doc |
< 1:1.14.2-16.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1:1.14.2-16.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-numpy-f2py |
< 1:1.14.2-16.module_el8.6.0+2781+fed64c13 < 1:1.14.2-16.module_el8.6.0+3162+01a09e5a Fix: upgrade to 1:1.14.2-16.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pip |
< 9.0.3-19.module_el8.6.0+2781+fed64c13 Fix: upgrade to 9.0.3-19.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pip-wheel |
< 9.0.3-19.module_el8.6.0+2781+fed64c13 Fix: upgrade to 9.0.3-19.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pluggy |
< 0.6.0-8.module_el8.6.0+2781+fed64c13 Fix: upgrade to 0.6.0-8.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-psycopg2 |
< 2.7.5-7.module_el8.6.0+2781+fed64c13 < 2.7.5-7.module_el8.6.0+3162+01a09e5a Fix: upgrade to 2.7.5-7.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-psycopg2-debug |
< 2.7.5-7.module_el8.6.0+2781+fed64c13 < 2.7.5-7.module_el8.6.0+3162+01a09e5a Fix: upgrade to 2.7.5-7.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-psycopg2-tests |
< 2.7.5-7.module_el8.6.0+2781+fed64c13 < 2.7.5-7.module_el8.6.0+3162+01a09e5a Fix: upgrade to 2.7.5-7.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-py |
< 1.5.3-6.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.5.3-6.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pygments |
< 2.2.0-22.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.2.0-22.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pymongo |
< 3.7.0-1.module_el8.6.0+3162+01a09e5a < 3.7.0-1.module_el8.6.0+2781+fed64c13 Fix: upgrade to 3.7.0-1.module_el8.6.0+3162+01a09e5a
|
| AlmaLinux:8 | almalinux | python2-pymongo-gridfs |
< 3.7.0-1.module_el8.6.0+2781+fed64c13 < 3.7.0-1.module_el8.6.0+3162+01a09e5a Fix: upgrade to 3.7.0-1.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pysocks |
< 1.6.8-6.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.6.8-6.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pytest |
< 3.4.2-13.module_el8.6.0+2781+fed64c13 Fix: upgrade to 3.4.2-13.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pytest-mock |
< 1.9.0-4.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.9.0-4.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pytz |
< 2017.2-12.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2017.2-12.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-pyyaml |
< 3.12-16.module_el8.6.0+2781+fed64c13 < 3.12-16.module_el8.6.0+3162+01a09e5a Fix: upgrade to 3.12-16.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-requests |
< 2.20.0-3.module_el8.6.0+2781+fed64c13 Fix: upgrade to 2.20.0-3.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-rpm-macros |
< 3-38.module_el8.6.0+2781+fed64c13 Fix: upgrade to 3-38.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-scipy |
< 1.0.0-21.module_el8.6.0+2781+fed64c13 < 1.0.0-21.module_el8.6.0+3162+01a09e5a Fix: upgrade to 1.0.0-21.module_el8.6.0+2781+fed64c13
|
Showing 50 of 62. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | python2-setuptools |
< 39.0.1-13.module_el8.6.0+2781+fed64c13 Fix: upgrade to 39.0.1-13.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-setuptools-wheel |
< 39.0.1-13.module_el8.6.0+2781+fed64c13 Fix: upgrade to 39.0.1-13.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-setuptools_scm |
< 1.15.7-6.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.15.7-6.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-six |
< 1.11.0-6.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.11.0-6.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-sqlalchemy |
< 1.3.2-2.module_el8.6.0+2781+fed64c13 < 1.3.2-2.module_el8.6.0+3162+01a09e5a Fix: upgrade to 1.3.2-2.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-test |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-tkinter |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-tools |
< 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma Fix: upgrade to 2.7.18-13.module_el8.8.0+3580+eeda85da.1.alma
|
| AlmaLinux:8 | almalinux | python2-urllib3 |
< 1.24.2-3.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1.24.2-3.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-virtualenv |
< 15.1.0-22.module_el8.8.0+3580+eeda85da Fix: upgrade to 15.1.0-22.module_el8.8.0+3580+eeda85da
|
| AlmaLinux:8 | almalinux | python2-wheel |
< 1:0.31.1-3.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1:0.31.1-3.module_el8.6.0+2781+fed64c13
|
| AlmaLinux:8 | almalinux | python2-wheel-wheel |
< 1:0.31.1-3.module_el8.6.0+2781+fed64c13 Fix: upgrade to 1:0.31.1-3.module_el8.6.0+2781+fed64c13
|
Original advisory text
Important: python27:2.7 security update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.
Security Fix(es):
* python: urllib.parse url blocklisting bypass (CVE-2023-24329)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* python: urllib.parse url blocklisting bypass (CVE-2023-24329)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2023:3780 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-24329 Third Party Advisory
- https://bugzilla.redhat.com/2173917 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2023-3780.html Vendor Advisory
Timeline
Published22 Jun 2023
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2023:3780 · OSV
Track software like this
Free during beta