Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Red Hat Python idna Library Security Update
published 2 years ago
Summary
A security update is available for the Python idna library on Red Hat systems. This update fixes a security issue that could allow an attacker to conduct a DNS spoofing attack. To stay secure, apply the latest update to your Red Hat system.
What to do
- Update redhat python-idna to version 0:2.4-2.el7_9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_els:7 | redhat | python-idna |
< 0:2.4-2.el7_9 Fix: upgrade to 0:2.4-2.el7_9
|
Original advisory text
Red Hat Security Advisory: python-idna security update
References
- https://access.redhat.com/errata/RHSA-2024:8365 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2274779 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8365.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-3651 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-3651 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-3651 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published23 Oct 2024
Updated10 Jun 2026
First seen10 Jun 2026
Sources
RHSA-2024:8365 · OSV
Track software like this
Free during beta